Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          JsrbwOcgYgUg75zbpZCHxSK5RIVL7eGbvmB0WsnLKgE=
Subject key identifier:   9A:9F:2C:C6:88:D3:3A:7E:F0:13:20:74:AC:FB:9B:E3:30:CE:09:6A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       019EBEED5BBB2CA67CD80B933982EC9E83DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          1697
Signing time:             Sat 13 Jun 2026 03:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:26 +0000
Files and hashes:         1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=)
                          2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=)
                          3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=)
                          4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=)
                          5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: hFqiXNVomXNp5z17V0m2Y0SDKyXjxxbEIRJUkaxvJRM=)
                          6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=)
                          7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=)
                          8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=)
                          9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=)
                          10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=)
                          11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=)
                          12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=)
                          13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=)
                          14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=)
                          15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=)
                          16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=)
                          17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:5b:bb:2c:a6:7c:d8:0b:93:39:82:ec:9e:83:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jun 13 03:01:26 2026 GMT
            Not After : Jun 14 03:01:26 2026 GMT
        Subject: CN=9a9f2cc688d33a7ef0132074acfb9be330ce096a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:30:3c:cb:94:2a:6e:c6:50:3a:de:ea:2d:
                    f4:06:25:d7:29:81:c8:be:75:d3:36:66:b2:79:5f:
                    69:f1:2d:d0:ed:a9:8e:eb:8f:8f:fd:b6:a1:fa:01:
                    35:90:c1:8d:98:80:4d:b8:18:0a:cd:ee:67:50:7e:
                    17:e4:96:e4:8c:89:b3:db:b6:c8:5f:39:7e:5b:08:
                    8a:01:20:2d:d3:7e:b4:b6:7c:ee:db:ea:3c:64:d3:
                    46:7e:73:ef:9f:cd:2a:3e:56:7b:d9:bd:c3:eb:04:
                    58:c0:aa:6d:42:24:01:60:19:50:e5:e6:a8:c8:21:
                    cb:a6:1c:d7:3c:8c:87:43:f4:1c:ec:f7:1c:a3:b3:
                    d7:a4:58:a6:03:1e:e4:95:5b:ed:d7:38:2d:b9:d9:
                    28:2a:04:6c:e4:7f:40:df:dc:24:69:20:cf:d9:7d:
                    5b:7a:81:4c:1b:cf:ce:fd:6c:f5:84:3e:de:3d:0e:
                    59:ad:ee:57:4c:2b:8c:af:d0:2f:c8:df:80:4f:cf:
                    ea:fe:0f:6b:5c:af:c7:eb:51:7c:f7:84:3d:30:28:
                    1c:c2:86:6a:d6:76:50:0c:b4:a9:b0:21:56:65:49:
                    c0:ac:ff:6e:a7:b5:ed:7a:59:17:e9:76:b3:94:25:
                    e5:97:73:a2:c6:8e:ad:a1:17:27:ae:8e:ba:57:c7:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:2C:C6:88:D3:3A:7E:F0:13:20:74:AC:FB:9B:E3:30:CE:09:6A
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:01:80:cd:b0:34:0a:ad:93:fe:f7:9f:80:94:c9:e9:ad:
         d1:70:d4:03:4d:9b:89:46:69:1f:9a:3b:ca:7d:b5:a4:44:d4:
         18:2a:c2:f5:f3:42:cf:9d:91:30:4e:79:26:14:e5:0c:fb:e5:
         bb:b6:47:eb:a2:1f:e5:f7:36:8e:4b:c6:3c:0e:28:0b:51:59:
         67:f0:17:82:a7:92:f5:f9:38:a6:a7:d6:1f:19:b4:b5:67:e8:
         40:59:11:97:1c:6c:f0:00:55:a6:4d:a9:6c:73:f4:e7:1e:5b:
         64:83:dd:7b:42:7c:fc:51:a7:d7:db:97:2f:6e:b5:c6:30:14:
         cf:03:bb:23:33:89:e9:4e:7f:40:54:97:5e:2f:ec:77:c4:30:
         e2:d6:87:c5:01:1c:ca:55:92:52:76:57:5d:d6:ac:dd:63:31:
         11:06:20:33:1b:d8:a6:ba:e6:68:47:06:e0:5e:97:77:ca:5e:
         f3:da:40:8f:d8:8a:ac:90:62:e6:de:ee:11:89:b8:fd:ce:a0:
         4e:92:29:8a:89:5b:ce:e0:d3:0d:c7:e9:e1:fd:a8:8e:22:57:
         06:6a:ca:ee:42:22:ef:39:eb:24:33:8b:f6:1b:52:9b:91:79:
         a9:e4:94:48:5d:78:b1:11:06:ca:6c:99:e2:77:f3:bc:3b:96:
         fa:8c:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:20 2026 by rpki-client