Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          v9QS5MNMzSauCgRX/dNlCfmQ3zL6ur1Ct/vRMsOnWOo=
Subject key identifier:   30:9F:71:1D:89:80:F7:89:74:E1:6B:3D:AE:0E:55:C0:DF:7E:72:D5
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019EBF238AD179EAAF7AC59901F4005E9A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          1028
Signing time:             Sat 13 Jun 2026 04:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:37 +0000
Files and hashes:         1: 1Frxfbc98CPNBXlvYxNVV4HDdfw.roa (hash: zDjUPNkwFr1cypuN/i7XmbHHkWcY1mRap2kucDPhT9w=)
                          2: 82JWIomOThmW0YMHKxDPuIJNFK0.roa (hash: hC4sRPtPg3GW3YOxAj+I1bNIwfqpwHn+ecr5wb73PWo=)
                          3: GKI0oMGPc_ao96H_Pxppo6dkqjU.roa (hash: zkKvY4dzGqAm86wlj6w2FQOXQJkkmZRclubHEKVhIrs=)
                          4: UbPR__GWgCOIAb3NQc0qlqrppxU.roa (hash: lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=)
                          5: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: FPowKObB9gMpkkkqahVq5JFjlPLKc0AKnb4RUTEZq8c=)
                          6: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (hash: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:8a:d1:79:ea:af:7a:c5:99:01:f4:00:5e:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Jun 13 04:00:37 2026 GMT
            Not After : Jun 14 04:00:37 2026 GMT
        Subject: CN=309f711d8980f78974e16b3dae0e55c0df7e72d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:67:8c:6a:dd:fc:58:b1:6e:0c:2d:15:b0:5c:
                    84:7c:6e:62:3d:01:b7:76:1b:0d:5a:84:7d:3e:6d:
                    be:de:73:b1:a9:a2:f1:76:7b:26:2d:da:03:3b:30:
                    ef:47:d4:74:c6:de:6c:bd:7a:47:1a:53:6d:ae:12:
                    1a:c0:2d:f7:ef:dc:a0:e1:42:c2:3b:54:d7:f9:8f:
                    c7:ad:4e:f9:aa:d1:4f:bb:10:40:6b:6d:2f:13:e3:
                    94:a5:a4:9a:b0:cc:3a:ab:28:1d:e8:59:04:72:6d:
                    e1:81:e0:ff:d2:60:05:24:3b:3d:d5:44:cd:c6:c3:
                    33:91:84:d0:e6:a7:7f:d0:92:ea:49:84:16:cc:81:
                    d8:47:cb:89:f0:73:a3:66:51:74:12:e3:e4:4f:e7:
                    8e:e9:63:6c:1f:75:07:07:76:64:30:c7:06:02:78:
                    3f:34:40:fd:1c:8b:f9:ac:d1:bd:99:0c:f4:2d:ea:
                    ef:c0:9d:2f:b3:fb:3e:74:0a:e3:80:f5:42:b6:f4:
                    e1:51:15:05:95:bd:cd:a1:70:9b:44:7d:58:c6:92:
                    ab:56:11:70:9c:1e:35:14:6a:95:c2:b1:a4:2d:06:
                    f7:64:f2:c5:51:0a:a3:11:49:d2:53:60:9b:64:f8:
                    28:af:58:3f:f7:18:b3:80:76:6f:1e:c5:0f:bc:71:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:71:1D:89:80:F7:89:74:E1:6B:3D:AE:0E:55:C0:DF:7E:72:D5
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:54:85:71:97:37:a1:8f:45:fa:ac:fa:5d:fb:85:30:c1:
         db:e8:fa:15:58:0a:84:1b:8a:65:57:ae:3d:80:43:dc:f1:a7:
         cb:b7:db:b1:07:dd:89:a9:e5:41:68:f5:b6:9a:a8:7c:74:ce:
         b2:6c:35:f8:6a:0e:47:78:1a:9f:44:68:a1:5e:29:13:ef:8a:
         56:53:09:67:4d:53:4d:d5:79:96:44:75:27:0f:ca:16:ea:f5:
         a0:a1:d9:13:d5:79:8e:d4:c3:2e:ce:7a:01:40:9e:48:71:e9:
         28:8c:1a:d1:20:f7:c8:c4:ca:38:66:2d:82:98:ac:ea:9e:bf:
         e7:9d:cf:6f:ad:91:d4:44:11:7a:ca:9b:48:6b:09:62:b4:fe:
         ec:83:dd:3c:92:2e:e1:d8:dd:43:08:0a:60:37:c8:fe:13:52:
         67:77:33:36:5d:63:49:cb:eb:d8:da:e6:b5:b4:99:b2:48:a7:
         80:39:81:19:9c:d9:ae:db:d9:1e:86:96:31:de:ec:b2:ad:3c:
         85:0c:d4:db:39:35:fe:fe:f3:73:8a:4c:d0:7a:fd:5e:09:09:
         fb:a4:a5:e5:fc:b7:56:d4:6c:63:4f:5b:9a:4c:88:ea:b6:66:
         ba:b9:18:17:1f:56:64:72:7b:55:94:e1:26:b3:b3:a8:23:e8:
         ac:ad:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:18 2026 by rpki-client