Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File:                     jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier:          s8+3nV+s8k9jLxoTmubJZ+cF0Zh1RC+FQvtyYrqDyKI=
Subject key identifier:   BE:F8:A2:10:E4:25:A4:84:76:55:DA:59:F7:A9:67:5E:AD:4F:D5:FE
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer:       /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial:       019EBE7FC5B972E176C455386CC42883D3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number:          0516
Signing time:             Sat 13 Jun 2026 01:01:45 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:45 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:45 +0000
Files and hashes:         1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
                          2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: RN48k1H6MrRtKHBP21manIZygZ6EBa0hmYVOLa5YzXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:c5:b9:72:e1:76:c4:55:38:6c:c4:28:83:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
        Validity
            Not Before: Jun 13 01:01:45 2026 GMT
            Not After : Jun 14 01:01:45 2026 GMT
        Subject: CN=bef8a210e425a4847655da59f7a9675ead4fd5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:aa:ad:27:fc:56:8b:18:59:08:e9:01:31:
                    9d:41:da:ed:59:02:30:c0:b7:cc:27:6e:0a:90:db:
                    22:01:43:f8:fe:f5:22:63:c8:46:b1:8f:8f:c3:b4:
                    7c:ba:41:79:ab:bf:6c:f3:5b:bf:f0:bf:cc:a6:cf:
                    6a:63:cf:00:68:57:d6:75:70:46:e7:af:3f:64:fb:
                    20:d3:36:d4:22:7d:88:b0:a4:a1:11:ab:60:93:bd:
                    b9:77:9d:36:bb:7c:79:b6:22:f3:02:51:96:de:2f:
                    8e:4e:03:d3:e2:69:be:f3:11:23:7c:c6:77:3f:79:
                    80:fe:cf:cc:fd:37:ad:e0:49:2f:3e:dc:67:00:6f:
                    3e:82:a1:06:f5:e6:28:1f:94:9a:78:d5:22:2c:15:
                    eb:6c:2c:34:18:98:ba:eb:e3:25:4e:97:e4:20:3e:
                    83:56:dd:9d:dc:56:13:b1:82:2d:e7:5d:bb:cf:92:
                    59:3e:c8:7a:dd:18:fa:6c:23:8e:87:06:3d:71:ac:
                    99:49:a1:11:7f:95:9d:2e:ac:9d:07:8a:6b:0d:02:
                    6a:ff:c6:ce:c0:ca:09:e4:93:84:c4:d2:22:99:28:
                    1c:11:22:57:86:27:d0:46:01:2d:12:60:04:56:0a:
                    76:46:74:00:fe:6f:2c:9f:ae:84:34:7a:72:f3:fc:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:A2:10:E4:25:A4:84:76:55:DA:59:F7:A9:67:5E:AD:4F:D5:FE
            X509v3 Authority Key Identifier:
                keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:81:e3:03:f2:b0:f0:80:a5:cc:f9:f2:b2:24:8e:d7:fd:fc:
         62:e5:b4:69:70:fb:4f:0f:74:d8:9f:e1:83:3a:fc:e8:13:78:
         a5:ef:ce:32:46:ce:e2:38:21:85:3f:86:ea:f2:cc:69:38:29:
         95:1d:9b:cd:00:2f:53:6c:f8:cd:09:f5:35:aa:74:da:ba:b7:
         21:f3:66:47:7d:87:d8:92:c7:17:1b:e4:c5:0b:25:29:f3:52:
         ef:be:4c:0f:7a:78:10:66:4d:b2:2b:08:34:9f:1b:5f:91:cf:
         62:8f:61:39:93:c2:b4:5a:fc:ac:d6:a4:d7:3a:0f:5e:c5:b3:
         d5:5e:e2:e3:06:6d:16:4e:fc:a9:8b:8a:9a:ec:d5:f3:c6:da:
         5e:3b:d4:c8:6f:dd:24:4c:7b:4d:87:23:9e:ff:b6:d3:08:ca:
         e7:2a:66:5b:b9:4b:9a:b7:40:ee:59:80:3f:e4:7c:df:3e:4e:
         a3:d1:eb:97:2c:a5:9d:e7:9a:6c:ea:47:82:6d:1f:ac:09:e3:
         7d:b2:3a:cf:b4:78:56:14:75:a7:4b:53:90:e1:65:1d:54:6d:
         1f:e1:60:df:2d:68:54:3d:ff:76:32:a6:78:c2:50:1a:1a:6c:
         c5:08:01:58:37:2c:12:7a:dc:bb:ec:d2:db:ff:78:03:ea:cd:
         44:97:c9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f8W5cuF2xFU4bMQog9P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi
YmM5NmQwHhcNMjYwNjEzMDEwMTQ1WhcNMjYwNjE0MDEwMTQ1WjAzMTEwLwYDVQQD
EyhiZWY4YTIxMGU0MjVhNDg0NzY1NWRhNTlmN2E5Njc1ZWFkNGZkNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GuqrSf8VosYWQjpATGdQdrtWQIw
wLfMJ24KkNsiAUP4/vUiY8hGsY+Pw7R8ukF5q79s81u/8L/Mps9qY88AaFfWdXBG
568/ZPsg0zbUIn2IsKShEatgk725d502u3x5tiLzAlGW3i+OTgPT4mm+8xEjfMZ3
P3mA/s/M/Tet4EkvPtxnAG8+gqEG9eYoH5SaeNUiLBXrbCw0GJi66+MlTpfkID6D
Vt2d3FYTsYIt5127z5JZPsh63Rj6bCOOhwY9cayZSaERf5WdLqydB4prDQJq/8bO
wMoJ5JOExNIimSgcESJXhifQRgEtEmAEVgp2RnQA/m8sn66ENHpy8/yAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL74ohDkJaSEdlXaWfepZ16tT9X+MB8GA1UdIwQY
MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt
MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0
LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4HjA/Kw
8IClzPnysiSO1/38YuW0aXD7Tw902J/hgzr86BN4pe/OMkbO4jghhT+G6vLMaTgp
lR2bzQAvU2z4zQn1Nap02rq3IfNmR32H2JLHFxvkxQslKfNS775MD3p4EGZNsisI
NJ8bX5HPYo9hOZPCtFr8rNak1zoPXsWz1V7i4wZtFk78qYuKmuzV88baXjvUyG/d
JEx7TYcjnv+20wjK5ypmW7lLmrdA7lmAP+R83z5Oo9HrlyylneeabOpHgm0frAnj
fbI6z7R4VhR1p0tTkOFlHVRtH+Fg3y1oVD3/djKmeMJQGhpsxQgBWDcsEnrcu+zS
2/94A+rNRJfJkA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:44 2026 by rpki-client