Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          KqpeK1x2agBxm8uFydgjcrSCRZDw/XRXeAlkNvcbR78=
Subject key identifier:   86:F7:08:D2:B1:A2:EE:64:0B:D3:58:F0:8B:3E:87:88:E8:06:66:83
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019F9512BDBF9A9CB9F42312A91AD26A5B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          02BF
Signing time:             Fri 24 Jul 2026 17:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 17:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 17:01:01 +0000
Files and hashes:         1: AvzQimXHm05p82wKX1RRrrvCRQ0.roa (hash: 0aajLu9GYqHeehMPQx1KGbuHBSE8/FQmljIwGRD449M=)
                          2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: +FMuHuSjP6IAaEGdQhExqnitwbilMEr9RKbgrXw0o+c=)
                          3: NPPLtydqeRlV2SqgCsZgFx1jLc0.roa (hash: 4vbM/e49hZ5KxAznjysgF0WAFiLvdL1qXyl+41eveFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:bd:bf:9a:9c:b9:f4:23:12:a9:1a:d2:6a:5b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Jul 24 17:01:01 2026 GMT
            Not After : Jul 25 17:01:01 2026 GMT
        Subject: CN=86f708d2b1a2ee640bd358f08b3e8788e8066683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:a5:5e:3e:97:0d:e1:e8:03:8a:e5:d6:ba:
                    4e:47:ab:dc:6e:64:d5:46:38:53:4d:fc:ad:9c:1e:
                    cb:24:10:83:73:c3:ad:6c:bc:cd:61:25:a8:5f:5f:
                    16:f5:0b:8f:e1:c8:3a:89:ab:21:ff:ab:a2:c4:57:
                    ea:8c:10:ab:6a:28:21:cb:c4:a3:91:fd:10:a3:70:
                    22:b7:9a:9f:0a:08:92:d3:77:3d:06:77:f1:a5:82:
                    d2:ff:58:30:00:85:71:04:56:45:3a:3a:41:fe:4d:
                    b1:b1:40:9f:70:0a:78:87:59:79:f4:35:65:17:92:
                    ce:f0:6b:01:48:f4:c5:c1:17:61:c2:1a:3b:b1:0e:
                    cc:90:21:30:36:97:dd:84:8e:c7:35:27:20:42:56:
                    6c:fa:fb:a8:8a:00:60:5a:cc:21:7e:c9:44:68:41:
                    c3:10:79:bf:28:92:ca:3f:6d:1e:da:7b:59:8b:f2:
                    ab:08:e4:04:1b:53:d0:bb:42:a0:92:8e:54:9f:4c:
                    7f:ae:29:c7:45:ba:1e:a6:76:52:79:82:67:81:0e:
                    9b:87:ad:1a:a5:9c:ee:e8:35:47:60:16:46:51:14:
                    12:3d:17:be:1b:9b:e0:dc:2c:b2:44:87:8e:42:d2:
                    7b:e8:29:15:6b:5e:39:2d:6f:d6:76:7f:b8:97:f1:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:08:D2:B1:A2:EE:64:0B:D3:58:F0:8B:3E:87:88:E8:06:66:83
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:de:d2:96:f8:9f:3b:e6:06:3c:4f:df:49:83:ff:32:c3:
         3c:49:43:a0:98:5b:c8:69:6c:71:07:28:e7:6b:8a:4b:46:f4:
         0a:71:91:36:48:ba:c8:11:59:3c:d4:d5:62:ee:83:11:44:42:
         87:9d:85:13:5a:2a:c3:6d:96:ad:f9:f9:c8:9f:81:20:1e:94:
         22:84:97:c3:e2:b2:6a:03:8a:10:03:a2:f9:74:68:8e:cf:c5:
         d3:47:cf:4e:a5:3a:f1:11:e4:d1:d7:84:a8:4a:61:49:2c:43:
         cd:c4:44:0d:bd:4a:d5:21:56:e0:21:cb:09:53:cc:0b:cc:c5:
         a6:14:a1:94:16:a9:c1:7d:e8:a1:6b:e5:47:06:49:56:d1:1e:
         6d:84:5a:5e:d2:01:d0:4f:66:be:9d:1c:08:c8:4f:db:ef:7f:
         e3:c9:14:4b:b2:49:f7:52:7e:8d:92:d3:12:6b:e7:64:69:79:
         d2:84:a5:80:0a:3b:56:8e:44:17:52:9f:cf:70:46:ca:91:04:
         b1:49:43:f5:fe:7e:b6:09:86:4a:85:31:36:b4:0b:c2:89:f7:
         2c:96:bc:e2:f5:18:41:12:15:4b:28:e1:20:1e:64:16:af:e5:
         09:ad:14:23:c2:df:60:79:8c:1d:30:5d:dc:ae:1a:63:86:38:
         ea:7f:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:57 2026 by rpki-client