Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File:                     Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier:          nIjEUGUeu2vw890cPe3JkPZlAi/FBstyYEUkGyYQ2TE=
Subject key identifier:   B7:B8:4B:CE:91:E9:BA:08:A3:09:F2:40:26:D8:8C:68:20:87:20:64
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer:       /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial:       019D27A9190617A564CD198AD8EB715FB5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number:          083D
Signing time:             Thu 26 Mar 2026 01:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:26 +0000
Files and hashes:         1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
                          2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: p15BLLjOC7iE4DtytC1Dn4II/zJF6SJ/KghWiHe3XlE=)
                          3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:19:06:17:a5:64:cd:19:8a:d8:eb:71:5f:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
        Validity
            Not Before: Mar 26 01:01:26 2026 GMT
            Not After : Mar 27 01:01:26 2026 GMT
        Subject: CN=b7b84bce91e9ba08a309f24026d88c6820872064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:a2:54:6f:c0:d7:f1:1a:9f:94:0f:b4:f8:
                    07:37:34:a6:dc:53:45:95:ce:6e:bd:ec:2f:df:93:
                    2f:36:90:93:6f:cf:ba:0d:41:2a:1c:93:66:ea:3b:
                    3c:0f:7c:35:c1:1b:8d:50:ef:19:8d:77:c5:1c:01:
                    e1:4d:eb:38:c2:74:ff:f7:a8:f7:f2:df:ed:f0:68:
                    e5:97:b3:c2:10:e6:4d:e9:cb:da:53:81:db:d7:9d:
                    36:5a:88:ae:62:15:ed:e9:39:43:f1:17:d1:a7:93:
                    ac:9b:f7:82:8a:f3:3b:a5:92:70:09:9f:ef:ec:33:
                    b0:73:9e:5d:a7:44:65:bb:a8:a3:02:cd:f3:87:3a:
                    80:42:0b:66:60:76:51:37:9a:31:8e:84:ea:02:58:
                    c9:92:05:96:0e:69:25:8c:27:c4:52:e1:a2:3e:c8:
                    bc:c0:81:99:63:59:4a:e7:09:cf:f4:f9:14:17:89:
                    45:25:9d:0a:38:4a:b0:ac:14:6b:13:6f:1c:d6:69:
                    16:cb:1f:38:cc:fb:51:dc:a8:66:4e:1f:2b:f4:77:
                    82:3f:51:b1:f4:b6:ca:15:ab:39:a3:5d:24:48:64:
                    4a:28:36:6a:ed:15:bc:fc:81:ba:3d:cb:1f:be:9a:
                    48:d3:a3:0e:76:a7:4f:b9:55:b4:94:55:63:13:87:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:4B:CE:91:E9:BA:08:A3:09:F2:40:26:D8:8C:68:20:87:20:64
            X509v3 Authority Key Identifier:
                keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:9d:e6:ae:20:eb:9e:8f:7b:2b:0a:fa:02:1f:ff:13:ee:
         34:53:45:8c:1c:e3:04:17:bf:96:d4:dc:5a:a5:0d:2b:b5:91:
         9c:e2:64:9f:dc:32:ec:2b:67:94:cd:1b:af:22:1a:f7:d4:f3:
         e2:e7:21:61:c0:44:a7:2d:11:ba:41:cc:6e:ef:f1:8d:82:57:
         90:df:a7:9c:1d:65:93:b3:4a:34:a6:5d:78:d3:00:eb:ba:2b:
         99:ac:04:49:17:1a:f9:35:08:81:95:c4:b3:77:e1:50:f5:84:
         d4:78:91:26:e9:4d:54:07:7d:58:2b:1a:fe:71:12:ef:24:78:
         ad:7c:ef:77:9a:6e:e9:3a:cd:27:63:22:0a:0e:e9:86:8e:63:
         15:57:8c:60:18:b3:3f:1c:7c:07:97:3f:ee:f8:3a:cc:1f:5e:
         7f:67:e4:bd:57:7c:75:90:19:e6:29:3f:20:c3:50:d7:f3:17:
         44:56:4d:d5:ea:e6:6b:43:29:4e:e6:ce:e6:f3:45:a7:13:32:
         f6:38:1c:7b:37:4d:1b:90:a6:58:14:fe:ac:a7:43:15:c9:97:
         ac:78:84:95:06:b5:f5:93:f9:09:a2:51:d9:1a:24:23:b2:96:
         03:5b:49:6d:8c:6f:a4:a0:6e:50:55:56:dd:69:f1:21:3c:40:
         26:de:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:56 2026 by rpki-client