Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File:                     sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier:          639PV6Eb62dapaG1Pck3tVzdG0DGQ/jIuUCebGSbR/Y=
Subject key identifier:   57:56:B6:08:48:2E:49:28:E8:FD:8F:3F:80:01:3B:BF:EE:22:6D:F2
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer:       /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial:       019EC0A4337D8D18BDEEDE45805007764210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number:          1965
Signing time:             Sat 13 Jun 2026 11:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:46 +0000
Files and hashes:         1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
                          2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
                          3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: UKN4a47kx+6O4oCm/ILhdJrU4JC+Hgg+4Z/BzxtRL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:33:7d:8d:18:bd:ee:de:45:80:50:07:76:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
        Validity
            Not Before: Jun 13 11:00:46 2026 GMT
            Not After : Jun 14 11:00:46 2026 GMT
        Subject: CN=5756b608482e4928e8fd8f3f80013bbfee226df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:b1:75:f2:17:a4:82:db:87:dd:1e:39:4a:
                    6c:c4:32:dc:8e:2a:f4:b5:40:b5:65:c7:de:a3:ce:
                    fa:9e:00:d1:7a:b8:48:df:23:52:c9:30:79:0a:93:
                    25:99:be:11:31:de:61:2c:c2:2a:e2:17:49:f9:51:
                    14:b2:35:92:d9:da:4f:23:0a:89:ea:5d:75:1f:bb:
                    b3:06:b8:d6:ed:9f:d1:e2:6e:e7:81:52:98:00:6a:
                    30:7b:ca:82:9b:39:15:1a:2e:07:4d:fe:9f:3e:3c:
                    e7:e9:9d:0e:c9:27:39:d4:6d:14:43:b3:41:17:7c:
                    7e:48:b6:c4:09:f0:03:ef:c3:4a:51:47:24:04:8e:
                    24:b3:8f:ef:c0:b3:c8:86:af:76:2f:67:1b:cc:18:
                    0a:22:70:4b:87:c1:5c:87:93:c9:f2:13:d2:c2:d1:
                    63:f0:14:84:f7:d9:69:d6:35:b0:de:b6:6d:1f:0b:
                    9e:8a:70:43:39:51:8a:9e:e7:9f:e7:82:75:47:1e:
                    8a:fc:00:8b:57:36:89:7d:b6:f2:8f:d7:48:d3:3a:
                    e7:e5:86:79:85:f4:94:6c:af:eb:55:4a:e9:66:9e:
                    39:38:9a:75:a2:c7:bf:cf:87:56:2a:3a:07:63:c0:
                    ef:6d:9b:e0:88:10:a4:da:ad:e8:b8:20:9e:de:46:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:B6:08:48:2E:49:28:E8:FD:8F:3F:80:01:3B:BF:EE:22:6D:F2
            X509v3 Authority Key Identifier:
                keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:eb:6e:e0:0e:8e:23:61:68:75:c2:ad:54:31:58:d5:1b:
         e7:9a:14:4d:0c:e3:e8:08:c8:0b:b0:a4:33:c0:39:1a:80:6c:
         d6:6e:e2:cb:83:3f:97:db:17:da:c1:f0:f0:b8:01:69:7e:29:
         44:45:9e:98:ba:d4:9e:06:18:a8:b7:eb:34:98:d8:07:f4:3d:
         0e:68:14:fa:99:0f:0b:ba:93:8b:19:2b:d5:20:e7:fb:5b:c0:
         48:14:8d:81:90:21:c0:0d:4a:a9:6b:85:2e:c3:f7:27:02:aa:
         54:dd:f2:4d:ae:81:31:00:83:8b:25:68:f0:9c:ce:07:c2:0c:
         63:52:7f:58:34:72:8e:b2:f5:85:16:e7:55:9b:10:89:e2:10:
         c6:03:bd:7c:2d:93:e1:5c:52:72:82:1f:80:6c:f2:c8:09:ce:
         c5:ee:7f:0e:f2:49:f3:70:c1:a5:af:fc:fe:b9:d4:ac:e1:d2:
         20:7e:ee:d8:c2:5a:1f:05:2c:fe:51:9f:13:a4:ac:2d:85:42:
         11:b0:b4:57:1f:80:ce:29:7e:69:51:5f:7a:29:b1:e4:0d:09:
         54:21:32:ab:20:9b:d9:16:95:31:f9:95:04:f6:7d:b9:30:18:
         33:c7:d5:23:e0:d3:87:d2:e0:84:cf:a7:09:ce:b4:70:ba:72:
         a1:66:be:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApDN9jRi97t5FgFAHdkIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky
ODFlZjYwHhcNMjYwNjEzMTEwMDQ2WhcNMjYwNjE0MTEwMDQ2WjAzMTEwLwYDVQQD
Eyg1NzU2YjYwODQ4MmU0OTI4ZThmZDhmM2Y4MDAxM2JiZmVlMjI2ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8WxdfIXpILbh90eOUpsxDLcjir0
tUC1Zcfeo876ngDRerhI3yNSyTB5CpMlmb4RMd5hLMIq4hdJ+VEUsjWS2dpPIwqJ
6l11H7uzBrjW7Z/R4m7ngVKYAGowe8qCmzkVGi4HTf6fPjzn6Z0OySc51G0UQ7NB
F3x+SLbECfAD78NKUUckBI4ks4/vwLPIhq92L2cbzBgKInBLh8Fch5PJ8hPSwtFj
8BSE99lp1jWw3rZtHwueinBDOVGKnuef54J1Rx6K/ACLVzaJfbbyj9dI0zrn5YZ5
hfSUbK/rVUrpZp45OJp1ose/z4dWKjoHY8DvbZvgiBCk2q3ouCCe3kZsVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdWtghILkko6P2PP4ABO7/uIm3yMB8GA1UdIwQY
MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt
ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy
LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2vrbuAO
jiNhaHXCrVQxWNUb55oUTQzj6AjIC7CkM8A5GoBs1m7iy4M/l9sX2sHw8LgBaX4p
REWemLrUngYYqLfrNJjYB/Q9DmgU+pkPC7qTixkr1SDn+1vASBSNgZAhwA1KqWuF
LsP3JwKqVN3yTa6BMQCDiyVo8JzOB8IMY1J/WDRyjrL1hRbnVZsQieIQxgO9fC2T
4VxScoIfgGzyyAnOxe5/DvJJ83DBpa/8/rnUrOHSIH7u2MJaHwUs/lGfE6SsLYVC
EbC0Vx+Azil+aVFfeimx5A0JVCEyqyCb2RaVMfmVBPZ9uTAYM8fVI+DTh9LghM+n
Cc60cLpyoWa+zA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:31 2026 by rpki-client