Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          DbjwQfKEarXyTx1a82PQzjl4sGSirtL29y43ePwBCgw=
Subject key identifier:   85:47:C7:C3:08:56:7E:C3:EF:75:1B:B8:E4:41:B9:87:C8:84:37:BC
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       019FA974C072F2D626BFC526A05FB547D5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 16:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:28 +0000
Files and hashes:         1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: u4ZEEB9d+QWc25Fo6jYw19LgbsjHo5gqC5IQDiPihF8=)
                          2: J5Qtt873sF3C37LKAWbfzw4yFDc.roa (hash: JFU1LgYxS8jjniEo7tgFwuxgms5qkAm/du3uO0+Rez0=)
                          3: ffutk4AzDWbO49BVdt4T-zTCdys.roa (hash: 0WTelKBs5m8Bof1HVTgMBViFv6aqh4aKrjX9Je73vRk=)
                          4: i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa (hash: 0pIJsCnFNnNGfcQdssGDfxgQRG8K8uUqTLzzq6uJaEA=)
                          5: x1mJQHrOX0aX1G3vkC2kyLyI2c4.roa (hash: +6t9XOehZRcRSvRzHT/6Ko6r/wNy+lvfdCUF86I4Zhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:c0:72:f2:d6:26:bf:c5:26:a0:5f:b5:47:d5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Jul 28 16:00:28 2026 GMT
            Not After : Jul 29 16:00:28 2026 GMT
        Subject: CN=8547c7c308567ec3ef751bb8e441b987c88437bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:76:9e:b7:6b:d1:ae:ef:21:78:08:ff:02:
                    a8:71:62:15:8b:bd:cf:86:b0:33:5b:aa:30:8c:0f:
                    2d:d7:2a:01:ba:e4:cb:8b:db:41:21:58:bf:c0:dd:
                    47:e6:fa:f1:2e:08:91:5f:f2:15:72:47:6d:0d:d6:
                    27:8f:5c:e5:be:09:9d:74:45:f6:95:51:25:31:1c:
                    72:f6:70:5a:a1:b8:03:b6:91:4f:fe:b5:d9:b1:f1:
                    30:38:34:bc:79:ed:2f:82:0d:17:bc:3b:e6:e5:77:
                    1c:2b:5f:17:e8:3a:22:72:b0:20:9e:81:5f:6a:f0:
                    da:9c:78:8c:85:09:38:53:ca:95:9b:b1:06:8c:50:
                    db:5c:57:2f:77:6d:ae:8a:17:c3:89:a3:c3:aa:47:
                    89:e5:26:77:56:b1:6b:5a:86:00:d7:e2:22:cc:02:
                    33:33:18:f0:21:bd:16:23:49:cd:8a:b9:79:1d:0d:
                    28:b4:03:5d:50:75:8f:09:b1:7f:b4:83:e6:30:67:
                    8a:8d:3e:37:b9:12:56:eb:60:6f:cf:b5:63:d4:1c:
                    cf:bb:c7:4a:89:f5:9e:52:b6:86:b3:3e:34:5e:5e:
                    73:c1:7d:97:e0:26:91:b4:4b:46:2a:a3:a4:85:a2:
                    b3:5b:d9:6f:13:bd:2d:06:55:79:b2:3a:1b:3d:2b:
                    0a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:C7:C3:08:56:7E:C3:EF:75:1B:B8:E4:41:B9:87:C8:84:37:BC
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:6e:c4:57:2e:f5:04:7d:68:d5:b1:c7:97:5d:c3:7f:59:9a:
         e1:4f:73:8d:ec:62:49:78:8c:63:fc:b3:16:b7:39:8d:e5:0c:
         87:38:8d:80:39:1c:07:c5:52:85:c9:12:5e:d2:04:0a:5e:6c:
         50:f4:76:70:17:b2:4c:34:58:4e:44:9f:27:25:f0:8a:a8:ae:
         a7:07:a7:89:b4:d7:00:aa:4f:c9:3e:7f:88:79:8e:22:cd:3f:
         4b:6f:39:99:94:fd:af:75:72:7a:7f:78:54:e0:fa:c1:2b:46:
         33:6f:66:96:8a:07:5b:4a:ff:81:77:5d:da:2f:7c:d8:e1:4b:
         92:7f:a5:9f:00:4e:13:a2:6f:62:e8:ff:8b:e8:d6:36:8c:6c:
         0c:61:58:30:3e:97:6a:3b:09:f5:cd:e6:1a:13:f5:e0:7f:63:
         8c:a6:aa:98:08:1f:c7:cd:9d:be:c4:ea:a8:d3:77:ca:cc:18:
         82:da:00:7a:93:49:37:93:4a:22:3d:6d:4d:8a:22:d7:20:96:
         a6:62:f2:61:de:c1:27:f2:1f:1c:2b:97:57:99:13:c7:f6:57:
         bc:ad:99:9a:78:7e:87:2e:f5:5a:31:a8:08:89:d4:7f:e7:4a:
         85:25:b2:a8:e1:e1:f4:a3:bb:09:bb:00:86:f1:1e:73:1f:be:
         92:11:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:48 2026 by rpki-client