Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          QUiNT8uu9U7bZRNPYG14yQZyAhoFBsBcNzwFLBF/fac=
Subject key identifier:   CB:78:F6:C0:A6:E9:6B:68:16:C7:C6:01:46:76:49:54:92:4F:1A:23
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       019D37C0A20E2045EECB509838A39B51500C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 04:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:04 +0000
Files and hashes:         1: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: IcjiBfhAbYoUagNNNICCSuFDCaFcGK6le2toLz33j7M=)
                          2: laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa (hash: /wFzciiClGguyVDotQvNMJ7uLZC1BigJCYVP4cmqfI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:a2:0e:20:45:ee:cb:50:98:38:a3:9b:51:50:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Mar 29 04:01:04 2026 GMT
            Not After : Mar 30 04:01:04 2026 GMT
        Subject: CN=cb78f6c0a6e96b6816c7c60146764954924f1a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:79:42:09:3c:39:1e:1a:3b:18:a6:63:87:
                    26:14:d4:11:e9:d6:33:fd:47:4d:2f:2a:db:c2:37:
                    a1:6e:c3:44:eb:53:9d:a3:e6:da:e8:f0:bf:e6:60:
                    9d:da:0b:57:f7:74:25:6c:39:b9:81:9d:50:cf:1b:
                    7d:92:00:20:62:07:28:67:ce:6e:71:df:33:1a:8f:
                    79:1b:50:e6:49:aa:9c:1e:02:6b:4c:f5:53:02:e9:
                    2c:96:db:15:a1:02:0f:b6:3e:fa:2f:eb:4a:2c:d5:
                    4d:14:34:12:30:9b:4b:4f:6c:27:00:38:b2:f7:5b:
                    6a:38:db:9c:c2:96:88:ca:2c:37:61:10:9f:d6:5e:
                    86:1b:8e:bf:df:cf:66:8d:6f:cd:d1:4a:6f:d7:e0:
                    a5:49:3f:5c:8a:34:08:93:55:bd:c5:85:49:3f:1f:
                    23:c2:70:a6:c4:8e:64:55:82:5a:a1:96:7c:ea:ee:
                    0d:ef:e8:96:9b:9a:9c:bb:d5:e3:ee:cc:37:46:6d:
                    af:33:27:38:39:8f:7f:91:3a:70:d1:a1:1e:42:28:
                    37:96:ee:e6:5f:49:51:4d:d1:6d:85:b6:b5:ee:b3:
                    b7:27:54:85:ee:cc:88:20:71:8f:6f:2e:0d:48:f7:
                    f7:57:81:07:89:67:11:17:70:1b:85:fb:6c:44:24:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:F6:C0:A6:E9:6B:68:16:C7:C6:01:46:76:49:54:92:4F:1A:23
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:34:0a:6f:c4:ce:b9:56:01:b1:9c:87:65:c8:63:65:a9:0c:
         e7:88:7e:d6:66:58:a3:46:72:d6:05:2c:aa:d4:5f:c8:a5:ca:
         d5:19:09:c0:93:57:cd:a6:12:b0:db:c8:49:66:b5:fe:a6:6f:
         01:e4:d4:01:52:7f:ac:6b:a9:d0:99:50:0c:a5:f1:dd:c1:68:
         27:f8:33:72:0a:34:65:ad:81:e9:df:5b:c5:fb:54:5c:30:af:
         f3:a7:29:ef:49:42:dd:0b:a8:94:00:2c:e5:88:d7:6c:32:71:
         27:77:45:2b:8c:f6:d6:f9:4f:8c:ce:e6:6d:f7:0e:e1:a6:78:
         5e:ef:cc:5a:0c:82:3d:04:15:3d:b0:0e:a6:ea:e2:05:f4:80:
         92:ff:a1:90:99:33:64:d7:85:74:65:f4:3e:eb:c9:20:f9:b6:
         26:f4:2d:33:7f:be:e0:33:a7:f5:c1:12:eb:a3:42:5e:2e:64:
         2a:e0:cf:ac:23:96:60:fd:94:d9:e5:94:b0:86:40:1a:91:38:
         e8:73:7d:70:98:08:1f:52:45:43:fd:7a:e5:01:18:90:86:67:
         29:fb:c1:9e:9a:c4:ce:f5:85:50:f7:02:84:14:34:45:93:4a:
         ba:8d:2e:74:55:d1:4e:fd:e4:37:d7:79:49:99:aa:33:9f:55:
         12:9f:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:17 2026 by rpki-client