Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          tjiRbv1yw8KUackJBaV2Ar57NQHquffZ804Q/jkNRfM=
Subject key identifier:   34:21:C5:FE:AC:07:EA:A2:47:76:0F:DA:65:CF:99:C3:85:FD:FF:FC
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       019EBF5A55A89D2BE432CB90F0A266779450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:28 +0000
Files and hashes:         1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: Fqh2QFyOxnWCxjVJjJ8CrepKgsaDto8oVXyKE3YLGro=)
                          2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:55:a8:9d:2b:e4:32:cb:90:f0:a2:66:77:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Jun 13 05:00:28 2026 GMT
            Not After : Jun 14 05:00:28 2026 GMT
        Subject: CN=3421c5feac07eaa247760fda65cf99c385fdfffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:1c:07:eb:8f:3e:1d:02:8e:e0:17:13:64:
                    1d:42:18:27:e9:09:6c:4a:55:5e:88:4b:94:40:11:
                    2b:7a:00:c5:7d:ff:88:b0:f3:e9:f9:98:0b:89:b1:
                    73:c6:62:59:c4:4e:8f:e0:ef:ea:22:ae:08:c8:84:
                    70:1c:f9:59:1b:f6:8f:9b:10:0e:34:54:37:43:14:
                    f5:23:51:80:e1:11:98:39:96:c9:1d:63:73:86:e9:
                    51:89:05:88:cc:9b:37:71:9b:cb:ab:a7:98:81:2b:
                    a1:c3:7e:8e:7f:fe:02:ab:62:d2:42:e8:d2:0e:78:
                    47:d5:0c:64:56:55:40:65:f7:df:ec:3a:67:75:41:
                    23:cd:30:9f:23:58:e3:98:f4:28:88:ff:b5:43:ea:
                    e5:36:6e:96:5e:79:50:d6:e1:13:ed:58:42:8d:81:
                    18:e9:a3:eb:b2:c1:43:a4:3a:21:34:b9:90:ad:9b:
                    03:07:6d:9d:66:aa:99:65:e8:23:d3:d1:10:c1:d2:
                    89:5b:c8:09:d7:b1:40:4a:4d:b6:dc:ac:fd:78:a1:
                    b0:8d:3a:e5:d5:fb:07:87:d5:cb:20:14:5d:9a:96:
                    ff:c9:91:7b:88:1a:4b:7a:23:a8:39:ad:11:53:c8:
                    37:26:71:77:8c:a6:77:75:ab:a5:98:e4:a3:7f:a1:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:21:C5:FE:AC:07:EA:A2:47:76:0F:DA:65:CF:99:C3:85:FD:FF:FC
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:ab:af:b0:6a:43:d8:ad:a1:4c:b7:3f:d6:34:c0:d3:e3:
         48:26:dd:6b:da:96:b8:d3:f8:ef:0b:eb:e8:9f:05:4d:2a:bb:
         1f:79:d6:cf:03:37:16:bb:b7:fe:85:94:7a:d8:b3:d8:dc:59:
         7f:05:fa:57:e6:77:e8:1a:42:2c:45:41:0a:5b:fd:f2:11:66:
         52:fe:d9:c6:03:22:ee:75:24:7a:c3:ca:66:41:bd:8d:52:28:
         0a:cd:df:68:ea:7b:fb:c5:fe:dc:a0:38:23:eb:4b:c1:49:e2:
         21:40:ed:76:46:b5:73:a6:38:c1:8f:b0:2a:1e:1b:63:dd:59:
         d3:ae:a5:9b:6d:f2:68:0f:69:8f:03:78:da:4e:4f:24:e1:55:
         5c:4d:cf:8f:29:5f:5b:c4:ba:ae:bb:fc:d4:b9:cf:a7:ab:ed:
         ad:b9:47:2e:00:7d:dd:28:92:bb:45:20:3a:40:b9:e5:c0:bd:
         cf:4a:63:dd:b2:68:0f:c4:61:61:3f:45:a4:52:27:33:94:28:
         bb:80:52:10:de:ac:ca:54:a8:04:79:75:48:48:63:eb:45:8e:
         b7:51:4f:78:75:74:b5:c4:10:5e:f4:0c:5b:ca:ee:d5:83:10:
         88:cb:6b:b1:b9:f3:2a:fc:3d:f3:bc:df:39:55:7b:3f:01:5a:
         fe:7a:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:12 2026 by rpki-client