Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File:                     GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier:          qg7CDnEZBRmmNAkKVeEIfxY1kcT1VD+qZdPotDn7gwY=
Subject key identifier:   DB:21:20:3C:E3:59:56:7F:EA:00:68:47:70:7C:28:2E:FF:2B:A1:E0
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer:       /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial:       019F596C226887BC15061437101C34D97151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number:          19AA
Signing time:             Mon 13 Jul 2026 03:01:26 +0000
Manifest this update:     Mon 13 Jul 2026 03:01:26 +0000
Manifest next update:     Tue 14 Jul 2026 03:01:26 +0000
Files and hashes:         1: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: T9f+d+qTaGal+J/p9BTtWnSMG+Kcj/eEfLhVFj52Rvg=)
                          2: ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa (hash: oyYGCSqaAaDI1i5xJfDf0vsTp+UTW82dEmnGT90lSos=)
                          3: aLohr_CjNJaf_OCGCYUirDRs1Mc.roa (hash: BdAfbqtdeH1oK0lMhwivyNJCFGk02pluiC+NvbWmuzc=)
                          4: eye1En_Mp6FRxtfoP5Oj5VBibbo.roa (hash: asGncJIHjRIOGa0QDEKb+Wt6+ba0g195yHdWF434LME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:59:6c:22:68:87:bc:15:06:14:37:10:1c:34:d9:71:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
        Validity
            Not Before: Jul 13 03:01:26 2026 GMT
            Not After : Jul 14 03:01:26 2026 GMT
        Subject: CN=db21203ce359567fea006847707c282eff2ba1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:7c:21:dc:55:df:80:5d:ad:be:ea:ed:49:
                    05:c8:94:70:be:80:eb:40:0c:d7:02:1b:5f:c0:ee:
                    b0:e0:da:9c:cd:a4:94:d7:c1:60:36:9a:ea:a1:f6:
                    e8:84:ad:42:92:c8:40:b4:d9:27:82:7c:30:c0:b9:
                    5a:56:ed:a1:01:97:74:03:60:61:6d:81:11:39:5b:
                    79:ea:ff:c9:b0:52:51:8e:3b:3c:98:0c:35:a9:23:
                    cc:96:6d:49:bc:6c:36:8f:d6:17:8f:6f:92:1a:23:
                    ca:80:03:7d:85:96:e3:28:dd:00:09:8c:8b:c4:87:
                    09:22:a4:39:2f:ce:39:7a:9e:3c:58:89:c4:e2:24:
                    d7:43:32:c4:c5:4e:a7:0c:60:31:a7:99:94:75:a8:
                    f3:eb:fd:14:98:aa:47:98:78:6e:de:19:d2:30:db:
                    3d:98:86:c7:6d:64:a1:8f:1f:25:cd:59:3e:f5:35:
                    63:ef:15:88:d8:d8:77:ef:8c:8a:d9:84:ac:d0:22:
                    fb:d1:e4:c4:ce:69:3b:7d:75:8e:87:10:9f:b7:5d:
                    d5:77:14:1a:00:d3:f2:bb:c6:9b:64:99:1d:07:e5:
                    47:a7:ec:f5:50:8b:91:dd:94:28:59:13:4d:62:86:
                    99:13:ee:50:a1:28:32:91:08:7d:83:d3:48:20:21:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:21:20:3C:E3:59:56:7F:EA:00:68:47:70:7C:28:2E:FF:2B:A1:E0
            X509v3 Authority Key Identifier:
                keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:a6:42:fa:45:ad:73:27:c6:ab:f5:00:0e:c2:a0:41:db:
         eb:58:6e:d5:cc:3c:3d:b8:fb:0d:95:5d:d9:dc:36:e2:45:e5:
         75:d1:ec:d7:54:44:ae:0e:05:29:fa:36:51:01:f6:78:9b:a4:
         eb:d5:d8:ba:57:d9:47:37:0a:40:16:de:71:ea:e6:98:3f:4d:
         d6:56:e7:c3:2c:ac:96:4e:10:c0:7c:45:ab:30:8a:7d:71:b7:
         f3:92:6b:1a:86:00:aa:5f:77:c4:16:64:a7:f2:aa:72:72:0e:
         34:ae:fe:11:12:a6:a1:74:e0:08:14:18:5c:47:f8:49:9b:5c:
         30:e0:99:6d:0d:7d:06:74:d0:6b:2f:b2:61:80:2d:f1:2d:69:
         81:9e:39:d2:ef:b0:07:b7:aa:99:95:7c:8b:b5:75:06:b5:f2:
         6c:93:c6:1e:db:78:d2:88:ca:ef:f6:07:25:a2:77:60:a4:51:
         3a:70:40:c5:34:c2:63:05:fd:be:eb:38:06:b8:e2:75:df:55:
         bd:10:e0:85:2a:c1:bc:af:6e:27:51:e3:cc:d4:04:4f:06:03:
         2f:ea:f4:cb:c3:25:2a:96:0c:00:89:0b:5d:54:a9:76:be:5a:
         48:89:c4:b7:c0:c6:68:95:98:12:e3:24:de:b9:18:01:9d:22:
         e6:8a:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:26:12 2026 by rpki-client