Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          pu4vUGeqZlN7XCqWwZAP6OV7klpcKHOH1mKUeNuJzhs=
Subject key identifier:   03:CF:93:34:7F:C8:7E:73:E5:DE:C3:ED:87:B8:EF:12:CD:10:26:50
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       019EBFC8306DE4B058E74C7039CF9BAFED62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          19A5
Signing time:             Sat 13 Jun 2026 07:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:28 +0000
Files and hashes:         1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
                          2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
                          3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
                          4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
                          5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 0J+T5J9PaUHUmsYb5ZHuua8Am/gHN9pIZGzgYerdE8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:30:6d:e4:b0:58:e7:4c:70:39:cf:9b:af:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Jun 13 07:00:28 2026 GMT
            Not After : Jun 14 07:00:28 2026 GMT
        Subject: CN=03cf93347fc87e73e5dec3ed87b8ef12cd102650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:a6:05:f6:98:3d:83:82:7d:9e:59:59:16:
                    ef:1b:cf:dc:cb:4b:55:35:fd:db:35:8d:50:8d:fc:
                    35:0b:ae:00:a2:48:99:9b:3d:ca:9e:1c:47:5f:db:
                    5f:9b:04:56:0d:04:6b:9b:5b:bc:2b:c7:49:25:1b:
                    bb:28:cf:09:b3:ec:5a:fa:a2:d4:38:7c:e0:cf:cc:
                    f2:ad:f0:eb:52:b8:71:d6:cf:3f:38:c7:65:77:79:
                    f0:d0:e0:6b:2e:b1:87:34:40:f0:e5:b3:93:2d:b4:
                    2f:54:32:d2:c2:e4:ac:42:c1:cb:95:f6:90:9c:3f:
                    1b:ec:b9:07:2d:b4:b9:14:61:21:ac:d1:bc:f0:2a:
                    24:f6:43:b1:3d:64:49:66:86:5f:7b:71:21:fc:df:
                    56:38:df:ec:9d:bd:cb:cf:95:84:b5:d0:ed:0f:c7:
                    95:3d:85:e5:e2:47:45:98:6d:c2:f9:47:47:a9:b8:
                    02:23:99:59:1f:3e:00:bb:5e:e3:70:e3:01:26:da:
                    c1:fd:a4:2b:fe:ce:d9:4f:e0:29:c1:1d:84:6e:f5:
                    46:97:82:ef:60:d2:93:f3:39:da:3e:a4:eb:c0:31:
                    f1:c5:d3:c3:ef:ef:98:9d:bc:9c:54:8c:1f:a5:68:
                    54:bb:38:c9:e6:1c:7a:f9:13:c0:ec:65:37:1f:0e:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CF:93:34:7F:C8:7E:73:E5:DE:C3:ED:87:B8:EF:12:CD:10:26:50
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:19:46:a3:72:5b:c3:d9:99:63:80:fd:5b:5b:73:56:3d:
         08:68:a6:f6:b6:d3:a1:c0:d1:28:02:ea:31:3f:53:37:7e:33:
         81:ac:e1:28:d0:c0:74:55:65:bf:ce:31:c9:b9:96:13:df:02:
         ab:68:e5:0a:cd:2c:f1:c2:a9:1b:7f:f6:94:bb:5a:59:f5:7d:
         86:ee:e1:35:b2:9c:04:a6:da:72:77:dc:0d:5d:14:85:53:d3:
         fc:d4:30:47:e1:ad:2c:10:d4:d0:6e:00:06:ab:24:cb:b2:54:
         2a:c6:85:96:c8:c6:0c:d0:b3:de:e4:5e:f7:85:9b:59:69:72:
         67:42:0e:4a:78:ce:a6:75:76:7d:ab:cc:f4:0c:3e:c8:07:14:
         21:96:52:b3:5d:b6:41:07:a8:2f:b1:c1:f6:27:b8:a6:d7:c0:
         60:1d:ab:44:fa:66:d1:99:23:fa:7a:a3:f4:de:13:d1:12:44:
         84:08:32:67:16:69:a1:a5:16:2d:08:6a:e9:01:85:c7:7b:fb:
         92:3a:e6:51:d6:4c:b1:08:43:69:32:85:be:66:67:6a:9e:18:
         33:7a:71:ad:02:ab:9b:91:11:80:36:7b:90:95:60:2f:f7:58:
         0d:d3:a7:a8:d8:b9:e4:fd:1b:37:bd:f0:5f:2b:06:b0:05:cf:
         fc:6c:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:42:09 2026 by rpki-client