Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          u0/oB78z3N7JAMj1tJdZvPnKH1KT/mOtByggRurCB9U=
Subject key identifier:   17:8B:80:FB:E6:4F:AC:E8:DD:E1:BE:26:CC:2E:E8:A8:74:19:9E:34
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019D389C0153F1D41F11B7A7E30475A15362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          0182
Signing time:             Sun 29 Mar 2026 08:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:41 +0000
Files and hashes:         1: AlIwiuWjQieywSsyw5heSRNGmSw.roa (hash: h4MIxkZlOYU3Vy7sGgEQPdGyZXemU35nFw7qReQJEwg=)
                          2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: j4R9TG2BTLFL9/3aIkZFTflESdNZgOXl7ls2qnhUsfI=)
                          3: GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa (hash: DAgo4WMqo3pLDUsoNChESltTlxv9QRhL0wN0wC0e+gs=)
                          4: IxXflTOYaqu2atUQyoZopJz_6zE.roa (hash: b2hBbiqm9aa0JPxjxue6zQnoyQqQ8vw/9BwAsbxquNU=)
                          5: mzLCvR2XwN9trvePy6DYDH4SGj8.roa (hash: 2otDoB3rukTHefo5z2hH2i54uian2qbUKeVhc+WhRLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:01:53:f1:d4:1f:11:b7:a7:e3:04:75:a1:53:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Mar 29 08:00:41 2026 GMT
            Not After : Mar 30 08:00:41 2026 GMT
        Subject: CN=178b80fbe64face8dde1be26cc2ee8a874199e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:3b:ba:0b:40:33:70:ce:65:23:ec:57:da:
                    8b:d6:85:c1:ce:58:bf:48:7c:a6:5b:cf:d6:f6:48:
                    51:bf:d6:b4:a8:51:ce:7d:1b:84:f4:cc:99:82:71:
                    e1:4b:5d:e5:6e:38:74:8e:21:10:c9:f9:d1:e1:5f:
                    7b:64:55:89:d7:49:8d:99:ea:43:e0:97:13:a3:68:
                    14:52:db:f7:89:9d:d1:9b:ff:ad:ac:c8:88:0c:1e:
                    6c:a3:06:ae:b5:e2:93:a9:9c:91:c4:83:f6:5d:7f:
                    1d:62:2f:34:55:e7:77:ab:f7:78:b9:82:47:f3:56:
                    30:64:82:c2:af:a6:b7:2f:dd:65:2d:72:b7:1b:71:
                    cc:04:74:5f:4b:27:d8:57:31:7e:24:53:ea:bf:bf:
                    98:bf:b5:c4:d9:e3:24:c9:6c:c8:05:76:4d:ff:0e:
                    e6:3d:c8:31:1c:ec:62:ed:48:ff:f6:81:8a:76:24:
                    f8:b7:fc:86:11:f8:18:73:aa:a2:ba:6d:38:d1:63:
                    dd:6b:d8:d1:98:3e:ee:30:cb:f5:ff:8b:7b:ce:64:
                    25:b9:96:98:8d:4c:d8:32:1e:25:28:20:03:e5:43:
                    ff:2b:ae:df:f8:8c:fb:86:1c:48:a6:ae:b5:08:60:
                    81:52:77:14:6d:09:e8:e1:53:af:51:b0:14:6a:20:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:80:FB:E6:4F:AC:E8:DD:E1:BE:26:CC:2E:E8:A8:74:19:9E:34
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:f1:a3:a8:44:a7:3a:2a:fc:40:df:a3:79:5a:5a:2d:51:
         56:cb:b8:87:61:d5:66:53:6a:05:0a:54:2c:29:fd:7f:35:fc:
         0c:ed:a4:1c:e1:cd:cb:bb:47:0c:87:99:ec:09:b6:98:43:d1:
         38:e2:b0:c1:65:2d:13:67:ba:ed:98:87:24:00:2a:d2:fc:d6:
         02:7b:9e:a3:6e:7c:e1:3a:74:0c:13:1a:eb:12:13:31:b0:62:
         66:65:c3:a2:44:b9:ec:23:8c:c0:e0:de:b2:11:ef:ff:e8:a1:
         9f:00:03:82:2e:04:34:ca:52:e5:3f:2c:86:ca:21:f6:6f:0e:
         9a:f5:b8:3e:71:e6:af:58:52:78:a7:2d:4f:95:09:5e:e1:30:
         39:eb:be:2b:56:3d:ca:7b:5b:1a:52:63:2d:6c:90:af:69:0f:
         fa:5c:71:a6:9b:cf:45:ec:8f:12:74:de:20:c3:2f:6b:04:8b:
         0e:7d:16:94:a0:06:f4:6c:53:8d:43:52:17:9b:10:4a:d0:6f:
         99:2c:2a:7a:a6:97:31:05:7a:93:e6:8b:75:0d:3e:ff:14:62:
         18:6f:37:43:27:f6:43:a7:5d:74:03:74:dd:8b:a4:9d:b6:83:
         8e:ea:58:1e:8b:dd:01:79:57:23:d5:b6:25:b4:0a:f4:54:45:
         43:6b:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:56 2026 by rpki-client