Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          9xOaYCIqOIWmvmC4614dIUJB5do1fJBRoHD6CHzBGm4=
Subject key identifier:   3D:4C:7B:58:7E:9C:DF:CE:66:33:02:EF:F3:94:C3:2C:0D:45:46:2B
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019D9B19644CF2DC0CE0254F1BF3BD3C601D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0F1A
Signing time:             Fri 17 Apr 2026 11:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:25 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: DawgmbF4zRjsfVe4a4FzN8y0mQA.roa (hash: afn5hxUejct66tT0JGmr4cEMo/gnTzzdfUoke9AjNOU=)
                          3: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          4: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: a/qjRq0Jm5BsOjb6dQun9KyUxLvLHzFQ48Xccn1dpVc=)
                          5: aEOGpbTLeZeKtP10UdCeuyLhhGg.roa (hash: gFYjAGRRdgqK1jIMXsjbfXy74cazPesmYDJ2bTsi2bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:64:4c:f2:dc:0c:e0:25:4f:1b:f3:bd:3c:60:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Apr 17 11:00:25 2026 GMT
            Not After : Apr 18 11:00:25 2026 GMT
        Subject: CN=3d4c7b587e9cdfce663302eff394c32c0d45462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:b8:9c:38:5e:b1:0e:0b:1a:ac:09:0f:9d:
                    38:45:ff:06:2f:bc:83:7b:ce:b6:ca:50:f4:0b:9c:
                    ee:59:39:88:bd:bc:ff:21:39:d6:7b:7c:32:bb:45:
                    1a:f4:20:0e:76:11:fa:89:8f:1e:ad:c3:61:50:a0:
                    88:7b:7f:bd:1b:5b:d8:62:bd:d7:17:d8:f2:7e:51:
                    d6:e9:cb:0a:38:be:ae:bf:18:3f:bb:50:a6:47:d6:
                    df:8f:8c:de:8d:bc:54:b8:a1:81:e7:38:56:b8:9c:
                    54:57:3c:5e:a5:7d:6f:9c:77:32:e1:62:4b:72:b0:
                    f6:3f:90:f6:f0:93:5f:cb:df:dd:57:7d:cf:e9:8d:
                    2e:44:0e:57:4b:00:e4:a8:96:79:9a:4b:aa:64:4e:
                    5b:71:d0:b8:13:5e:2b:75:55:de:30:ac:cf:34:87:
                    0f:22:78:4d:fc:08:b0:1d:62:22:17:56:aa:91:89:
                    3d:06:8f:55:82:ba:a5:7e:f8:51:97:62:2f:89:d1:
                    31:79:44:43:a1:20:6d:75:76:80:8e:41:2a:47:75:
                    29:d2:d1:08:5e:1f:48:b4:0f:f9:6c:dd:16:ef:fd:
                    4a:f3:64:24:8f:e5:b1:f0:6f:1e:2c:26:67:da:d7:
                    5b:3e:b9:51:3c:73:76:f6:2c:46:2b:47:e2:35:46:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4C:7B:58:7E:9C:DF:CE:66:33:02:EF:F3:94:C3:2C:0D:45:46:2B
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:54:07:38:bd:aa:71:13:1c:01:c5:8f:c1:44:f8:92:15:
         25:1d:16:7b:36:60:84:ff:20:d8:83:9d:bf:e3:1f:de:aa:cd:
         ca:7a:6f:37:ae:17:dc:a0:3a:1e:a7:f9:93:1e:8c:91:31:01:
         ae:6e:37:57:85:d0:ba:b3:b5:c6:4d:ac:84:c5:1a:a2:26:ca:
         ae:da:8c:50:e4:55:dd:a1:9c:20:9b:8f:37:d3:e8:ab:b5:f1:
         52:be:3f:41:70:f7:f1:fd:2d:5b:78:7d:12:4a:db:92:46:16:
         f7:f0:52:69:6f:a4:35:2f:d5:f6:6a:f4:39:8e:1a:64:9e:64:
         cd:56:1f:80:aa:d2:89:d9:13:dc:41:bd:7a:63:d5:97:79:fc:
         30:eb:ec:cb:81:ea:22:8f:d8:84:26:69:b6:54:e4:54:b7:6b:
         39:90:35:5e:1a:36:d0:d5:24:76:87:9e:a8:67:31:fc:ae:69:
         e7:53:ce:d3:74:2a:57:75:29:84:2f:08:47:45:10:35:ee:41:
         bb:ab:97:8c:89:03:0a:ba:59:b3:4b:a0:67:1d:af:b0:fd:df:
         ae:fe:19:50:e9:b2:e5:8b:e2:06:49:ba:e0:d2:8d:28:ac:fe:
         3b:6e:fc:41:f4:5e:80:41:0c:be:2b:ed:75:3f:78:36:44:3c:
         6f:af:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:03:54 2026 by rpki-client