Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          oCcgKAHkRK1WrHTDkzZzyKxlXBPVFlWvqatcSZ8wrxw=
Subject key identifier:   29:39:E8:50:C1:E4:4D:07:4C:59:DC:C4:FA:54:31:34:6E:C3:35:BB
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       019CE5C8EA32B08BB1158933474984DE79F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          19A5
Signing time:             Fri 13 Mar 2026 06:01:15 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:15 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:15 +0000
Files and hashes:         1: 6CxhyvgbQnQYOWG7uHJBGNxL3OU.roa (hash: QJ+EXUGo3PiqFr6CNx2RAdF1919Aq77MPKrNOqQalvY=)
                          2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: BU/MNZ501/QJZfrGaAZZ4/npKr0sL+5H8UHWCVs0aNk=)
                          3: O4IU7iPNzu2A0vwW8vK2sWpcBEY.roa (hash: 5KKl9g7AymUe6yQRBzgksD9k/xpn1hkBb8CCzOtRLBo=)
                          4: UZPdwTIQfWKOnGJwcTjWUkEQf5c.roa (hash: JrK8JTJISVqZqxkS99JHhNEb/sltN6+rvR3A7dFrhWM=)
                          5: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (hash: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w=)
                          6: oW_FIcyEUkX61KE2IHd2ICPcwP4.roa (hash: HBj5S2pG7gcpSo5gnpuf2s0t9RQaygJDmBwJYZXDb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:ea:32:b0:8b:b1:15:89:33:47:49:84:de:79:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Mar 13 06:01:15 2026 GMT
            Not After : Mar 14 06:01:15 2026 GMT
        Subject: CN=2939e850c1e44d074c59dcc4fa5431346ec335bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:f4:dc:46:33:b3:f7:08:1c:39:56:09:60:
                    2a:3e:f0:75:b2:8e:62:3d:90:22:22:f0:b3:56:bd:
                    a8:15:1e:a1:4f:fb:96:ed:e2:ac:ca:00:1a:7f:26:
                    cb:31:05:e4:f7:f4:a7:2a:d2:e6:90:84:83:80:0b:
                    2f:94:44:c7:a4:b7:ab:03:97:fe:ab:3d:53:fb:24:
                    09:4d:e9:c5:b1:e9:3e:b9:4c:e4:80:91:13:7c:cf:
                    94:47:fe:8b:ca:8e:60:a7:90:30:c0:eb:50:a3:96:
                    ba:4e:e6:a3:e8:4a:39:1e:d8:b4:f0:88:4a:89:ae:
                    0b:a8:5e:bd:f9:06:2c:f3:c9:ee:f3:cf:a7:3b:9d:
                    0c:84:80:ce:cd:82:26:00:5c:33:00:00:0e:26:17:
                    d4:b2:95:3c:6b:96:eb:ea:ce:16:ea:f7:85:bd:bb:
                    9b:4b:a9:c4:cd:4a:e1:25:92:1e:8e:a0:c9:23:00:
                    da:ff:42:c6:17:db:46:fc:fd:10:1e:23:6c:35:51:
                    9f:71:fc:8a:5a:5b:ca:2d:ab:51:e7:13:ca:7c:40:
                    3f:a4:59:c2:8b:d8:64:ff:a1:ed:0c:47:dc:b9:fa:
                    91:d3:03:32:e8:84:58:79:49:4f:07:90:23:53:0a:
                    55:f8:61:84:ea:c8:d7:27:af:9f:43:fd:97:c6:d7:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:E8:50:C1:E4:4D:07:4C:59:DC:C4:FA:54:31:34:6E:C3:35:BB
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:86:13:12:94:f6:cf:d7:01:48:43:42:30:94:e6:49:f3:74:
         3c:0a:80:b8:6c:be:19:bf:ae:6b:b8:cf:2d:d9:7b:ca:f3:39:
         3f:b2:8e:f0:f6:b9:23:6b:0b:64:75:e6:36:21:c5:e5:4d:d2:
         2f:9e:67:22:34:e5:49:65:bd:48:ae:67:35:e9:5b:fd:8b:ad:
         7e:0b:a1:2a:f0:0f:41:bc:67:3b:1d:7f:16:b5:44:bd:aa:4e:
         20:b4:bd:fc:9a:83:ff:68:22:93:00:91:cd:a7:c0:73:56:f1:
         b2:7e:ee:0a:4b:f0:0c:35:69:b0:c5:82:6a:9f:83:ef:d5:df:
         31:75:a1:ca:2f:b7:9e:c2:7e:35:e6:32:8a:c3:28:f7:92:87:
         ff:e0:2a:93:77:d7:4c:e9:16:e3:5c:4b:ec:50:fd:a2:ff:b4:
         be:9b:9f:58:de:35:98:2f:79:f1:22:87:28:30:f4:bf:39:58:
         d6:4e:f1:7d:61:97:fa:56:e3:4a:c9:a5:1f:51:42:82:3e:a0:
         30:11:eb:34:4a:39:14:ab:66:bc:80:73:5b:b3:58:e1:07:ea:
         5d:5c:2a:23:8c:12:65:30:d1:f7:00:ad:bc:ea:99:dc:e0:0c:
         5e:7f:66:58:cd:f9:fe:13:74:27:44:9c:5e:40:d0:12:51:8a:
         2c:ac:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:24 2026 by rpki-client