Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          sC9OZzY/LcmzK2DvHDxnmlK8p94bqhP0jwQTk7vSJyc=
Subject key identifier:   35:8E:7B:B3:C2:64:7D:25:83:6F:11:5C:18:D7:5B:DF:3D:49:36:FC
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019EBE10E5731F70446A84B2C58C75A8AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          18FB
Signing time:             Fri 12 Jun 2026 23:00:38 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:38 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:38 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=)
                          11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: vtZnfNjbeYf39cA8TPhpsDC7YhePq425HUc/RR6QwN8=)
                          14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:e5:73:1f:70:44:6a:84:b2:c5:8c:75:a8:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Jun 12 23:00:38 2026 GMT
            Not After : Jun 13 23:00:38 2026 GMT
        Subject: CN=358e7bb3c2647d25836f115c18d75bdf3d4936fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:69:b5:11:77:7d:9f:36:e7:1d:68:a8:63:
                    9c:af:26:f8:1e:e4:2d:e7:a1:5a:a9:13:25:e6:8b:
                    80:ee:7c:0b:9b:31:66:c8:0c:d6:63:d9:5b:bb:1f:
                    b3:ab:77:11:2b:57:f9:be:c8:29:56:a4:34:fb:73:
                    e5:a7:7b:f8:c0:91:05:8d:32:b8:d8:ec:3d:49:e9:
                    92:64:36:f8:40:56:66:6a:8a:94:b2:31:f7:3f:e3:
                    0e:b9:19:ea:6e:48:29:e7:c9:9e:46:95:b1:7d:67:
                    4b:b6:eb:d6:c7:42:49:15:13:3d:ff:5e:0c:4f:f1:
                    4a:90:56:f6:ef:a5:09:06:bb:38:61:fb:d8:47:bf:
                    82:a4:f7:0f:fd:a0:0a:f5:e3:1e:2c:ea:a2:51:51:
                    d5:89:08:62:c6:7e:af:2d:87:30:db:1b:43:0e:c0:
                    8f:e1:3c:c9:ed:c7:4a:56:b6:6b:7f:e2:08:63:91:
                    bc:b0:9d:9f:ae:8f:ad:5e:82:cb:8e:ae:df:6d:a9:
                    8b:ed:be:e5:d8:c3:01:e8:00:30:2d:2f:b4:8b:a8:
                    22:83:ff:92:7a:f7:59:4f:8c:3b:c1:f1:f8:af:84:
                    73:c5:d2:f8:a3:9c:d0:d2:a3:23:21:eb:c4:d3:29:
                    45:76:f5:a4:78:07:e1:05:df:d7:42:23:49:5e:7e:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:7B:B3:C2:64:7D:25:83:6F:11:5C:18:D7:5B:DF:3D:49:36:FC
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:95:6a:28:9c:ce:99:d9:5c:87:5d:96:22:30:b1:3c:cf:
         52:77:e1:46:48:56:7b:03:ae:08:b6:b1:40:70:87:89:8f:d5:
         ed:97:49:96:be:70:63:0f:b5:78:27:de:94:d4:a1:dc:a1:4f:
         7f:18:06:4d:48:d9:f6:70:24:b5:cf:2b:1c:03:dd:71:33:20:
         06:3a:5a:b7:3c:f9:dd:be:93:dc:96:df:af:c5:39:8e:d0:b8:
         e1:d1:dc:6a:b8:49:16:b6:68:8a:2b:36:d3:8b:ca:4e:06:ab:
         01:48:28:a1:f4:b9:ae:a0:ba:db:1d:bc:9a:a1:e1:38:b5:b1:
         3e:dc:16:76:07:cf:b0:0f:b8:e9:b1:c3:84:a1:bf:67:ee:86:
         3d:72:26:04:ba:a5:a3:9d:43:10:08:14:58:06:0e:de:b4:a7:
         9a:d4:c1:56:fb:df:0c:5c:6c:15:a3:3e:37:7a:ac:11:5d:db:
         10:db:7e:06:4f:8f:48:b7:de:aa:01:10:72:9f:28:69:9d:22:
         f5:45:67:9c:31:15:f6:b8:14:37:e3:db:cf:43:82:9a:53:cd:
         80:6e:6c:05:b6:af:de:49:41:0a:0a:83:9d:15:2b:06:2f:68:
         5d:fe:e6:44:af:58:f9:37:9e:ae:c9:ba:bc:46:03:1a:72:fa:
         af:6d:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:41 2026 by rpki-client