Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File:                     GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier:          aXUQsv5zwV56FRXd3xKGpR36MhnZ4bq2rPgr+R+xQls=
Subject key identifier:   35:D1:AA:B5:BC:0F:A4:E8:99:21:37:63:3D:DA:EF:C3:15:44:EF:7B
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer:       /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial:       01A13E26F60EABA38177AEFA4835F6E02F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 06:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:43 +0000
Files and hashes:         1: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: dscWcS0MFiqugbPHdKMHnG7wC9UW3F6l4dwojTlEWhE=)
                          2: ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa (hash: oyYGCSqaAaDI1i5xJfDf0vsTp+UTW82dEmnGT90lSos=)
                          3: aLohr_CjNJaf_OCGCYUirDRs1Mc.roa (hash: BdAfbqtdeH1oK0lMhwivyNJCFGk02pluiC+NvbWmuzc=)
                          4: eye1En_Mp6FRxtfoP5Oj5VBibbo.roa (hash: asGncJIHjRIOGa0QDEKb+Wt6+ba0g195yHdWF434LME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:f6:0e:ab:a3:81:77:ae:fa:48:35:f6:e0:2f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
        Validity
            Not Before: Oct 15 06:01:43 2026 GMT
            Not After : Oct 16 06:01:43 2026 GMT
        Subject: CN=35d1aab5bc0fa4e8992137633ddaefc31544ef7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:81:09:19:3b:78:ea:6a:3f:23:0d:c7:2c:
                    6b:e5:21:79:09:70:77:0c:96:11:42:75:e1:46:3d:
                    15:c6:df:15:0f:9b:8c:52:fe:f8:3f:c2:d7:d3:ab:
                    fa:8a:15:9c:21:70:28:ab:87:09:f4:8e:5d:6a:a9:
                    b2:46:45:a5:59:f3:82:82:c0:f3:99:1e:cb:29:ea:
                    c8:ba:24:5a:a2:da:e7:2a:14:23:86:30:19:df:c9:
                    e8:16:ed:5f:e3:0b:a1:06:15:74:fc:e5:c1:9b:c7:
                    6a:a5:25:97:a2:ab:ab:93:4d:48:cf:ec:17:d6:63:
                    cf:38:05:db:8b:e8:fb:2e:4c:e9:81:12:d0:fe:1f:
                    b1:5e:fc:52:23:e5:93:5b:3b:a3:32:ed:37:2f:ce:
                    d7:25:3f:a7:5d:d6:c4:c4:3d:b5:58:20:05:48:4d:
                    98:84:be:24:27:ac:2a:8a:a3:8f:44:8b:7c:e0:fe:
                    f6:e1:6a:43:29:c9:56:10:83:27:62:c7:18:af:5a:
                    8a:43:16:be:79:a3:08:8f:45:14:d4:fe:6f:4f:c3:
                    c1:9f:87:2e:af:15:7f:ab:3f:5b:b7:b9:90:ab:9a:
                    d4:68:f2:37:23:c0:cf:55:9e:38:96:7c:7a:10:de:
                    10:9e:27:fc:c1:fc:5f:33:6e:95:dc:31:c6:95:eb:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D1:AA:B5:BC:0F:A4:E8:99:21:37:63:3D:DA:EF:C3:15:44:EF:7B
            X509v3 Authority Key Identifier:
                keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ef:1c:b1:ef:40:f3:4a:e0:29:af:0b:51:59:de:53:2b:cb:
         8e:3e:be:bc:a7:5f:89:c8:fe:a6:45:fd:6c:e5:30:8c:e3:c6:
         46:66:4b:53:92:c9:86:46:f2:4a:cc:35:fe:c0:3b:7b:c4:00:
         d4:7f:ab:da:6e:39:ad:3f:84:23:a4:bd:ee:cd:16:48:51:a7:
         0d:5a:5b:76:3c:40:b7:ce:f3:a9:fd:ad:95:5d:0e:27:ad:53:
         9c:5a:30:ee:b2:f6:f8:9d:8d:fa:59:5c:ae:ea:ff:92:c5:35:
         ae:fc:ed:fb:ad:10:b1:fb:65:ac:fa:ba:bd:45:37:54:4c:f9:
         ce:f8:98:af:0c:33:36:e8:da:13:b1:18:b1:8b:ea:65:31:6b:
         20:c8:14:31:ee:e3:d2:5a:63:fa:e7:76:92:14:3f:8d:8f:26:
         f7:6e:37:42:8c:e5:52:11:8c:d8:45:de:90:eb:a2:82:d0:cc:
         bd:42:93:c7:dc:2b:dd:9e:46:9a:b4:27:da:a1:8c:0f:26:57:
         a2:e6:04:ee:56:08:2e:50:2f:c8:25:8d:d5:c8:91:92:75:ec:
         39:4e:82:8f:66:31:ac:ad:24:9a:8f:3b:ea:0a:37:02:93:63:
         e7:05:a8:ad:ca:43:a8:e4:c9:03:a2:59:c2:04:c0:06:7f:20:
         62:de:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:00 2026 by rpki-client