Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          ucfj5gMhr/brY7y4IdpQVoGS29GP3qDKQqjA8K2fYvE=
Subject key identifier:   64:49:E5:AC:8E:D9:B0:6C:C4:56:10:CB:17:8E:A5:0D:AB:70:BF:62
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       019DCFABED994D6CB0ACC2476B9359DCAF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1A24
Signing time:             Mon 27 Apr 2026 16:00:44 +0000
Manifest this update:     Mon 27 Apr 2026 16:00:44 +0000
Manifest next update:     Tue 28 Apr 2026 16:00:44 +0000
Files and hashes:         1: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: 7zCakMS3s0qi5xnsTtY22qCbf771FXAQ+b9zv6BrC7E=)
                          2: GkxUNG0V4Fbpgon2wzEh4IwBeeU.roa (hash: Ei4DihfizalqTCTC5eHDtTFty1UKWXN2cPaiTRHyOaY=)
                          3: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          4: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          5: ib8VLpHSWSLchTduq736evV3xX0.roa (hash: zjzLzdvrwM8BfxrXRLkY+r3BCbyzlL/AqzKjo/BDCxo=)
                          6: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:ab:ed:99:4d:6c:b0:ac:c2:47:6b:93:59:dc:af:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Apr 27 16:00:44 2026 GMT
            Not After : Apr 28 16:00:44 2026 GMT
        Subject: CN=6449e5ac8ed9b06cc45610cb178ea50dab70bf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:66:77:fb:46:f5:3f:19:4a:84:7b:bc:99:
                    bf:45:47:bb:98:3f:74:9d:4d:65:da:c6:00:7c:dc:
                    89:87:e9:27:36:65:8a:9b:ec:c7:6f:b1:29:bc:2e:
                    fe:66:fd:2d:af:8d:ad:bd:76:93:c2:9e:29:14:ad:
                    a1:ee:93:45:11:ff:d2:22:dd:8b:32:6f:76:d1:4a:
                    69:89:de:cd:a3:73:94:c9:76:ce:56:41:81:f9:f3:
                    b7:33:51:6c:8a:70:d9:14:ef:99:eb:94:b1:03:00:
                    d3:8b:dd:48:5e:79:a9:d0:a8:b9:ec:f5:e1:08:69:
                    d5:5b:04:15:56:ee:51:02:df:2b:c3:25:a4:ab:ce:
                    78:54:85:d7:25:f6:6d:bc:a6:b0:9f:71:59:f7:8f:
                    4b:80:96:a1:12:64:66:29:10:c5:56:4a:bd:35:c3:
                    f9:72:1c:45:0c:e4:46:08:94:72:6d:02:22:e4:a8:
                    af:b4:5e:52:7f:56:0e:98:b0:5a:de:60:6f:40:55:
                    6f:08:1f:d8:8d:76:cd:20:2b:2b:db:cf:8c:01:ce:
                    d9:ff:cf:3d:0d:f6:fe:f2:22:79:2c:aa:16:e5:89:
                    c1:60:f9:a8:29:e0:b6:06:16:09:82:1a:85:a4:91:
                    69:97:51:f2:2f:36:c5:36:c9:5d:e7:63:44:f4:9d:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:49:E5:AC:8E:D9:B0:6C:C4:56:10:CB:17:8E:A5:0D:AB:70:BF:62
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:91:dc:11:77:2f:00:f9:a5:bd:36:92:86:e0:11:03:07:
         fe:79:54:d9:6b:c0:27:ad:01:23:b2:1d:bc:4e:55:17:86:e3:
         f1:40:00:b7:82:17:b3:26:d7:d2:5c:12:fa:4d:ab:f4:52:3b:
         35:2f:05:b0:e8:48:2e:60:d7:95:7e:09:a2:95:8f:9d:0c:c3:
         c9:4d:69:57:ae:f7:ac:06:47:e7:fa:d9:4f:53:47:7c:c3:62:
         89:5a:06:dd:2e:ff:39:c3:55:f8:55:57:11:05:c2:44:50:c6:
         a9:03:01:3c:da:ae:c9:1d:f3:ee:54:ab:7a:0b:95:7e:03:8f:
         3a:00:1d:e6:c1:2c:ed:70:1a:c0:80:06:ac:81:19:3c:d6:cf:
         cf:da:ff:90:91:87:53:d2:96:74:13:e2:1b:d0:5e:3d:f5:e4:
         b4:a1:f1:a1:e8:c5:e2:ba:d3:d5:b1:8c:09:f8:89:df:41:7c:
         59:45:58:2e:0a:da:eb:4f:12:f2:72:b8:e0:56:e9:d6:c0:d2:
         ad:12:b6:f4:35:80:ea:28:e0:3d:af:3f:d9:3f:db:d6:a0:12:
         94:7a:3e:36:8c:45:37:49:cb:30:22:be:35:eb:a0:16:c1:91:
         a8:53:54:4a:b6:39:ed:74:91:0e:53:c5:0e:c5:3d:e4:5e:3e:
         e3:65:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:12:26 2026 by rpki-client