Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File:                     GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier:          mx/NWXWe42uLnZczegyBblKO3WN1omXAjmXncp2e5D0=
Subject key identifier:   73:8E:A1:CD:21:55:D2:3B:0E:BA:3C:47:72:D5:08:67:CE:75:D9:14
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       01A128B1065652DC0423818BB283D2D2F155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number:          0390
Signing time:             Sun 11 Oct 2026 02:00:52 +0000
Manifest this update:     Sun 11 Oct 2026 02:00:52 +0000
Manifest next update:     Mon 12 Oct 2026 02:00:52 +0000
Files and hashes:         1: AvzQimXHm05p82wKX1RRrrvCRQ0.roa (hash: 0aajLu9GYqHeehMPQx1KGbuHBSE8/FQmljIwGRD449M=)
                          2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: ZtOKX5+VLMbN/VCKUf0ZrkeCrlNdRPJ5r9Quw2jGSDI=)
                          3: NPPLtydqeRlV2SqgCsZgFx1jLc0.roa (hash: 4vbM/e49hZ5KxAznjysgF0WAFiLvdL1qXyl+41eveFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:06:56:52:dc:04:23:81:8b:b2:83:d2:d2:f1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Oct 11 02:00:52 2026 GMT
            Not After : Oct 12 02:00:52 2026 GMT
        Subject: CN=738ea1cd2155d23b0eba3c4772d50867ce75d914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:aa:1a:66:3a:54:89:b6:9c:f6:21:ce:e4:
                    5d:95:03:b5:76:d9:b7:0e:3a:1c:0b:65:48:ce:17:
                    89:26:c5:29:92:5b:bd:c4:90:19:a4:1a:e7:2d:f0:
                    74:f2:7a:89:e0:54:9f:98:5a:f4:34:96:62:00:3b:
                    44:83:8f:d6:28:b6:4a:90:bb:4e:ff:27:63:a9:8f:
                    46:5c:35:af:af:67:d8:28:42:50:4b:86:fb:0d:7e:
                    54:02:86:bc:0e:ef:d1:96:1f:88:37:17:5f:9b:60:
                    f1:4c:5f:b7:b2:2f:1b:3c:6e:5b:1e:85:dd:7f:c8:
                    d9:f4:9d:dd:62:83:1d:20:23:9c:8b:9a:2a:fb:aa:
                    d2:1f:86:2e:22:d7:c6:cd:1a:48:98:a0:83:b5:04:
                    9a:c7:8b:2b:e2:47:a1:8d:29:65:a7:0e:81:77:45:
                    3e:6f:35:fe:d6:d0:43:5a:a5:3d:4f:fb:e3:c4:73:
                    d8:9a:0b:8f:11:f2:35:01:98:03:df:6c:fc:59:dd:
                    29:d5:ef:e4:f5:01:f2:66:36:81:ec:31:62:4e:a9:
                    9a:e3:8f:fe:e6:71:22:59:5f:14:62:07:75:ba:fe:
                    8e:1f:05:69:88:95:87:f6:91:f8:fa:74:c3:c1:97:
                    98:93:2b:ad:d3:d2:e6:2d:b8:23:e9:12:38:52:ab:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8E:A1:CD:21:55:D2:3B:0E:BA:3C:47:72:D5:08:67:CE:75:D9:14
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:22:a6:be:07:fe:32:03:a2:9b:a3:bd:77:c7:c1:df:39:
         bb:85:84:03:31:49:0f:de:2a:df:cb:c8:24:31:d1:3f:2d:0f:
         24:75:fe:e3:26:e4:35:b7:54:cb:fc:4b:f1:71:cf:29:c4:d2:
         17:c5:5e:85:d2:23:76:97:1b:ce:08:3e:f0:72:af:5a:8f:ef:
         64:bf:80:e0:0f:36:a5:84:e3:0b:31:e6:a9:c5:b8:ce:ea:8b:
         13:a4:ec:1e:27:e4:62:26:2c:a1:c4:6d:fb:5e:ea:70:d4:1c:
         ba:f3:02:16:d2:d3:a7:07:8e:14:54:bf:cd:25:a8:a9:92:34:
         10:dc:14:d7:91:a0:aa:40:a4:07:c0:a2:66:c0:50:bc:8f:91:
         ea:43:3b:98:64:88:c0:53:c8:96:d3:70:bb:71:40:b1:58:82:
         a3:3e:8b:0b:30:65:d0:68:42:8c:b0:01:13:92:be:36:de:48:
         35:7b:ba:25:b3:31:9c:a0:be:ae:33:09:40:af:78:97:49:51:
         f4:c2:49:02:e2:18:55:2b:3f:10:b9:8e:60:ed:8c:58:58:6a:
         f4:29:cf:64:e9:b7:83:f1:04:c0:34:c2:81:39:ca:1e:13:b5:
         07:bb:5d:56:52:c7:9e:4d:e8:5e:b0:bd:26:bf:4d:ff:c7:e0:
         30:c5:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:37:34 2026 by rpki-client