Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File:                     jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier:          dVrVfAj4+Hy6vO4KluYkhClUKIoOzF5JsioelzCXziw=
Subject key identifier:   AD:30:16:36:EA:B7:8D:BB:A7:EF:00:12:7A:CF:FF:32:40:81:F1:C6
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer:       /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial:       019EC0A4015613445AEF5668EC119526B84A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number:          121A
Signing time:             Sat 13 Jun 2026 11:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:33 +0000
Files and hashes:         1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
                          2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: PsiyezuDJhNOCbSFt3IjeXIkQ52XRF2Z6WPIj82T5x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:01:56:13:44:5a:ef:56:68:ec:11:95:26:b8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
        Validity
            Not Before: Jun 13 11:00:33 2026 GMT
            Not After : Jun 14 11:00:33 2026 GMT
        Subject: CN=ad301636eab78dbba7ef00127acfff324081f1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:8a:03:26:85:3f:43:87:ac:b4:f0:a4:80:
                    8f:24:f6:7f:d2:01:22:58:b9:76:5b:5e:53:91:3d:
                    10:fe:f2:91:91:06:b1:ab:ae:30:23:1f:99:be:d3:
                    11:a1:86:e4:05:02:9e:4b:c0:d8:95:87:e0:24:91:
                    63:8e:c0:93:90:27:df:12:f3:2f:ff:c8:41:f4:11:
                    ba:05:01:72:94:78:fb:34:d0:20:4a:4e:06:46:16:
                    80:28:14:4f:13:4c:5f:be:31:e5:50:9f:5d:25:1f:
                    4e:b1:40:c1:41:8c:30:3c:c0:af:90:16:ed:9e:25:
                    53:99:f4:80:d6:cd:01:b9:1a:d5:aa:0c:4b:17:51:
                    d6:48:53:6b:45:f6:a9:e4:50:6b:8a:34:c9:26:10:
                    1d:e3:cb:c9:a9:f7:97:da:a2:b2:60:be:c3:f0:17:
                    b2:ff:60:d3:59:bf:91:0c:ea:eb:15:cf:49:0b:1b:
                    14:ff:f8:3d:89:d4:3e:57:2c:0d:93:9f:c5:ee:47:
                    4c:5f:d5:09:7e:07:5c:3b:bd:7f:8e:b7:e0:61:7b:
                    43:33:d9:9f:5d:87:ef:47:db:4d:04:02:5f:06:fe:
                    75:79:8b:9f:e3:e2:50:13:8d:83:c7:1f:63:4d:2a:
                    46:89:a3:ac:1d:50:e6:4e:80:12:c7:ee:6a:61:15:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:30:16:36:EA:B7:8D:BB:A7:EF:00:12:7A:CF:FF:32:40:81:F1:C6
            X509v3 Authority Key Identifier:
                keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:f0:24:c6:14:50:62:3c:ce:85:f5:ed:39:e5:63:05:3d:
         bb:dc:7f:e7:f8:b2:b2:36:2a:ae:53:44:90:a1:db:2e:ac:49:
         f9:c2:78:94:e7:40:e7:e0:f6:fd:18:b0:a0:86:24:f2:ed:5a:
         7b:43:d7:76:8f:57:11:45:25:cf:7c:ae:03:b8:2d:cd:b6:54:
         6a:c5:30:f4:09:42:08:25:dd:3b:19:4a:ac:55:cc:dd:e6:c1:
         87:e8:8c:d2:40:93:1b:1c:68:22:8b:44:65:4c:7b:69:66:1d:
         9c:20:63:fd:22:3a:1c:bd:20:ec:72:de:b2:88:ed:63:32:71:
         19:1d:d0:43:65:7f:a6:2e:ce:01:ba:65:52:0f:1b:92:4a:55:
         5c:41:7b:2a:bc:9f:28:62:fa:16:73:46:bc:a3:d5:b0:0a:59:
         77:e1:0b:93:66:2b:a3:fd:2e:67:fd:fb:c0:0f:5e:14:a6:96:
         47:d2:8d:06:0c:26:52:86:ff:3c:6a:99:1f:dd:15:e0:41:09:
         1a:05:4a:b3:80:46:c3:39:fe:9f:76:77:16:cd:65:59:0d:93:
         3b:83:d0:42:17:be:b6:62:76:7a:48:6d:31:d1:c5:f4:18:e1:
         38:a4:ee:65:96:fb:f1:72:7c:a4:61:3f:e5:79:62:74:1b:34:
         40:3e:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:48 2026 by rpki-client