Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File:                     GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier:          4tJ+pLlpEEex1hIIGsaRG5m3Yf8NZ3iaQ7SLlzhXiIY=
Subject key identifier:   45:90:29:82:77:D9:1B:30:9F:FB:C3:F0:8E:5A:4F:5A:D5:E0:A2:8A
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer:       /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial:       019C9CD478830E6F327A724905AC2F6D33C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number:          0CB7
Signing time:             Fri 27 Feb 2026 02:01:36 +0000
Manifest this update:     Fri 27 Feb 2026 02:01:36 +0000
Manifest next update:     Sat 28 Feb 2026 02:01:36 +0000
Files and hashes:         1: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: OcjIMy/WmGwAJ4MNucMvu9gtQGD40AfJAFJjkoIyP4I=)
                          2: ZZeABTpJzzngeuL-OTKi1sObkvk.roa (hash: LZJnobolr7nVT9FIHfxLJ++YArusGtx4j3xW25plKP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 23:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9c:d4:78:83:0e:6f:32:7a:72:49:05:ac:2f:6d:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
        Validity
            Not Before: Feb 27 02:01:36 2026 GMT
            Not After : Feb 28 02:01:36 2026 GMT
        Subject: CN=4590298277d91b309ffbc3f08e5a4f5ad5e0a28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:0e:8a:db:12:65:8d:05:84:c5:ad:86:b9:
                    45:0f:fc:98:35:58:5e:eb:44:75:26:5f:90:79:6e:
                    65:92:c0:25:fd:b4:80:65:0a:fd:5b:fa:bd:9a:61:
                    90:e2:31:cf:ef:2f:7c:de:06:3e:c6:8f:a4:25:60:
                    e7:a5:ee:4b:6e:70:a1:65:15:99:92:63:46:0f:e6:
                    c2:e0:fd:fd:b1:94:5f:12:53:09:ed:16:53:e3:2e:
                    be:21:0b:d4:c6:e6:f9:b4:77:da:e4:d3:c9:37:5d:
                    2e:44:72:32:59:15:79:f1:c2:f8:b3:95:8c:66:7e:
                    df:ad:1d:0b:9c:25:35:c0:dd:63:bb:a9:cf:85:8a:
                    c3:dd:f7:90:6e:b8:ac:07:f3:8f:ee:bf:ab:04:aa:
                    1e:0b:5c:6b:f9:7b:cc:be:c8:e1:cf:40:fa:b1:0d:
                    1d:e9:f4:ac:cd:be:81:5e:aa:1d:e9:45:eb:f9:9f:
                    13:4b:eb:23:b9:34:35:ec:08:7d:57:84:81:55:5b:
                    cd:07:44:e2:54:3f:01:ee:e0:33:3a:35:c8:58:3e:
                    46:b2:9c:21:18:05:92:96:15:b8:04:9a:26:d8:13:
                    f0:0c:83:ca:2b:d4:02:9e:45:37:a8:1d:89:1e:91:
                    6e:53:f3:fa:9d:c0:b3:26:03:df:ee:7a:3e:2b:05:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:90:29:82:77:D9:1B:30:9F:FB:C3:F0:8E:5A:4F:5A:D5:E0:A2:8A
            X509v3 Authority Key Identifier:
                keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:4a:3d:d8:e1:90:30:59:41:07:0f:4a:77:58:06:53:45:
         b6:23:af:9d:17:44:1f:c0:ba:1e:2e:4a:ab:aa:89:34:d9:77:
         c8:6a:28:7c:dd:8c:e0:4b:30:15:98:e7:ac:6e:ac:24:16:d5:
         d8:9f:8c:fb:7b:71:17:c5:5b:30:9b:1f:cd:34:c6:56:6e:c4:
         c8:b3:40:50:66:73:67:62:9d:22:33:89:3d:9d:06:78:2f:a6:
         0c:1e:af:4c:1a:d3:ca:af:28:bc:02:e8:3b:ee:8b:47:3b:38:
         f1:f3:67:31:4f:9f:ae:63:10:2a:d6:e7:40:d0:55:4f:d3:8a:
         07:2f:96:17:90:5d:39:9f:e7:fc:1e:c4:af:e3:81:b4:6c:f3:
         6f:62:6e:50:33:36:af:5e:25:52:89:e2:7f:51:31:be:cb:6b:
         a2:f7:b1:c1:e8:82:3d:d1:b9:b9:9e:0f:26:e6:db:dc:d7:3c:
         0f:06:02:e9:2e:f4:a0:cc:f6:52:32:0a:aa:f8:56:e2:56:df:
         62:2e:69:d0:2e:fa:80:e1:fc:0c:c0:0c:d3:c3:55:02:94:4d:
         fe:65:7f:ac:b3:40:c4:43:c0:f4:18:8f:9d:99:8e:3e:c2:e8:
         78:8a:96:7c:6c:f3:8e:4b:78:05:1e:f6:aa:52:6b:ba:53:73:
         ae:b0:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 06:33:31 2026 by rpki-client