Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          5akYwHaGg4mT+NBIDAssv4UbhqMQD+Gpn1U4YmL9+io=
Subject key identifier:   32:76:4E:72:8A:63:44:4E:FD:CB:52:B5:BA:F4:47:1D:D2:19:4E:8A
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       019E916F6C2800FC25D97B2D8479F03D5AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          1941
Signing time:             Thu 04 Jun 2026 07:00:58 +0000
Manifest this update:     Thu 04 Jun 2026 07:00:58 +0000
Manifest next update:     Fri 05 Jun 2026 07:00:58 +0000
Files and hashes:         1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: fP7YHalohXz+BNRtDP9MTCPNDV5U116KNxRqvzwhOos=)
                          2: J5Qtt873sF3C37LKAWbfzw4yFDc.roa (hash: JFU1LgYxS8jjniEo7tgFwuxgms5qkAm/du3uO0+Rez0=)
                          3: ffutk4AzDWbO49BVdt4T-zTCdys.roa (hash: 0WTelKBs5m8Bof1HVTgMBViFv6aqh4aKrjX9Je73vRk=)
                          4: i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa (hash: 0pIJsCnFNnNGfcQdssGDfxgQRG8K8uUqTLzzq6uJaEA=)
                          5: x1mJQHrOX0aX1G3vkC2kyLyI2c4.roa (hash: +6t9XOehZRcRSvRzHT/6Ko6r/wNy+lvfdCUF86I4Zhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:6f:6c:28:00:fc:25:d9:7b:2d:84:79:f0:3d:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Jun  4 07:00:58 2026 GMT
            Not After : Jun  5 07:00:58 2026 GMT
        Subject: CN=32764e728a63444efdcb52b5baf4471dd2194e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:c9:82:d3:73:d0:5f:4e:3b:70:41:7e:07:
                    02:3d:49:b2:80:3b:7a:e6:fa:c2:1a:71:56:c4:d0:
                    59:fc:4c:c8:68:34:3b:b4:1e:d5:bf:42:f7:6e:26:
                    9c:ef:73:b1:00:9a:77:92:d5:99:dc:12:33:2d:fc:
                    96:0e:24:d0:6c:de:77:1d:6d:70:6d:c4:56:9c:ac:
                    49:d8:b0:85:95:b3:c6:45:27:5d:ab:90:f2:cc:1e:
                    b9:e3:ce:5c:4a:cf:8c:d1:d9:02:d3:ca:13:21:fe:
                    57:56:06:b7:f5:66:94:3f:ba:03:03:cd:06:f0:b9:
                    f0:84:a9:7b:92:fc:bf:e9:5e:93:eb:bf:69:43:85:
                    49:36:d3:b8:f1:f6:50:8c:c0:06:46:89:0f:d7:34:
                    95:fc:9b:b7:16:d3:46:d8:b3:90:e3:11:ce:37:90:
                    a2:d3:83:0b:99:1a:fe:75:93:98:73:ab:fa:60:02:
                    40:50:38:65:5b:30:91:08:ef:cb:4b:76:0d:e7:15:
                    36:fa:17:e9:a5:9e:58:41:1e:c9:98:ca:2d:ce:b5:
                    dd:8b:79:de:02:2b:56:7f:c2:63:b1:b0:8f:19:7b:
                    bf:6f:64:f7:9c:1e:94:fc:73:02:20:53:9c:50:0e:
                    20:90:55:b9:0b:4a:1d:da:21:f5:b6:da:8e:d9:34:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:76:4E:72:8A:63:44:4E:FD:CB:52:B5:BA:F4:47:1D:D2:19:4E:8A
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:e7:20:45:13:aa:ef:5b:3d:5c:d2:46:d3:93:ff:dc:03:
         cb:1c:a0:83:b7:48:83:45:f2:f4:46:08:2c:f9:5a:0b:8c:b8:
         e7:2d:4a:56:66:dd:66:71:8f:e9:7c:7c:e0:05:45:05:00:32:
         cc:4c:fe:69:cb:3a:24:97:2c:56:a9:f3:7b:5e:b1:c0:cb:99:
         dd:27:94:51:9f:b8:71:0c:e4:99:fd:90:98:df:5a:0f:f4:ca:
         e0:65:ea:63:e0:27:72:88:41:bb:9a:93:38:d5:f3:ca:5b:28:
         60:91:7b:a8:8e:d8:ee:04:cd:98:89:3a:d1:b6:c9:5d:69:7a:
         41:50:e5:00:99:b4:6a:f3:6b:fc:e9:87:01:6f:f2:a9:4f:96:
         0d:f4:79:b2:6d:88:77:d1:c2:2b:4f:06:83:66:b8:12:10:81:
         87:46:6c:5f:3b:38:d0:56:89:eb:bf:bd:87:f1:3d:50:77:70:
         c6:3d:ce:e8:20:a3:9d:3e:36:10:0d:31:ae:65:a7:55:db:2f:
         29:13:b5:af:f8:4c:81:a3:d1:12:0c:ae:cd:6f:b0:e5:d6:d4:
         d7:a0:c5:7f:7a:86:2b:35:44:5b:ee:24:0b:f2:7f:4f:db:36:
         3c:3d:8e:9f:c8:8a:f2:a6:77:37:99:33:6f:62:4d:ac:f4:e7:
         bb:61:a7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rb2woAPwl2XsthHnwPVrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWUyN2IyOWY2NWEyNGQ5Zjk0MjE1NzE1Y2QzNjcxODI1
YTllYWUwHhcNMjYwNjA0MDcwMDU4WhcNMjYwNjA1MDcwMDU4WjAzMTEwLwYDVQQD
EygzMjc2NGU3MjhhNjM0NDRlZmRjYjUyYjViYWY0NDcxZGQyMTk0ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27DJgtNz0F9OO3BBfgcCPUmygDt6
5vrCGnFWxNBZ/EzIaDQ7tB7Vv0L3biac73OxAJp3ktWZ3BIzLfyWDiTQbN53HW1w
bcRWnKxJ2LCFlbPGRSddq5DyzB65485cSs+M0dkC08oTIf5XVga39WaUP7oDA80G
8LnwhKl7kvy/6V6T679pQ4VJNtO48fZQjMAGRokP1zSV/Ju3FtNG2LOQ4xHON5Ci
04MLmRr+dZOYc6v6YAJAUDhlWzCRCO/LS3YN5xU2+hfppZ5YQR7JmMotzrXdi3ne
AitWf8JjsbCPGXu/b2T3nB6U/HMCIFOcUA4gkFW5C0od2iH1ttqO2TSLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ2TnKKY0RO/ctStbr0Rx3SGU6KMB8GA1UdIwQY
MBaAFBkeJ7KfZaJNn5QhVxXNNnGCWp6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTct
YjhjNjY2ZTZkMzUxLzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTctYjhjNjY2ZTZkMzUx
LzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWTnIEUT
qu9bPVzSRtOT/9wDyxygg7dIg0Xy9EYILPlaC4y45y1KVmbdZnGP6Xx84AVFBQAy
zEz+acs6JJcsVqnze16xwMuZ3SeUUZ+4cQzkmf2QmN9aD/TK4GXqY+AncohBu5qT
ONXzylsoYJF7qI7Y7gTNmIk60bbJXWl6QVDlAJm0avNr/OmHAW/yqU+WDfR5sm2I
d9HCK08Gg2a4EhCBh0ZsXzs40FaJ67+9h/E9UHdwxj3O6CCjnT42EA0xrmWnVdsv
KRO1r/hMgaPREgyuzW+w5dbU16DFf3qGKzVEW+4kC/J/T9s2PD2On8iK8qZ3N5kz
b2JNrPTnu2GnyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:26 2026 by rpki-client