Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          KvZZqZR0oUry7m495B/N2Tqsx3PfwkkrMVb1npsoXJ0=
Subject key identifier:   BF:39:3A:A2:4D:42:32:3A:38:7C:EA:61:18:3C:0B:DB:2A:03:71:6B
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019D9D07C50E8EE23A401D3F03EF9B8D002E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0F1B
Signing time:             Fri 17 Apr 2026 20:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:25 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: DawgmbF4zRjsfVe4a4FzN8y0mQA.roa (hash: afn5hxUejct66tT0JGmr4cEMo/gnTzzdfUoke9AjNOU=)
                          3: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          4: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: VdT+JSdv1FDZIJNRgfMfEDgtuYWwMr6qf6HbHS9vAm0=)
                          5: aEOGpbTLeZeKtP10UdCeuyLhhGg.roa (hash: gFYjAGRRdgqK1jIMXsjbfXy74cazPesmYDJ2bTsi2bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:07:c5:0e:8e:e2:3a:40:1d:3f:03:ef:9b:8d:00:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Apr 17 20:00:25 2026 GMT
            Not After : Apr 18 20:00:25 2026 GMT
        Subject: CN=bf393aa24d42323a387cea61183c0bdb2a03716b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:7b:db:80:0c:ee:98:34:02:75:8f:c8:56:
                    c6:8b:4a:ac:c4:22:89:a2:ee:3f:9a:c3:1f:49:06:
                    45:f0:e7:4f:a1:c9:32:ea:63:8c:2b:45:fe:6c:c4:
                    46:bd:59:1d:7c:a0:09:a8:bf:bc:a8:ed:94:90:af:
                    f0:f5:0c:62:90:ed:0e:f7:4d:55:2b:38:f6:fc:20:
                    9a:1e:fa:76:73:3c:30:be:73:84:54:81:bb:c2:18:
                    c7:4b:aa:42:a6:1d:29:f1:22:63:22:9d:7c:ba:c3:
                    b8:86:5b:4e:d0:2f:89:92:21:4c:41:a4:a4:e7:d3:
                    11:c0:07:49:b9:b5:92:0a:54:21:38:25:84:d1:23:
                    c0:80:f1:2a:ca:87:a0:cd:00:31:2d:b1:14:18:f3:
                    6e:48:9d:57:d3:ad:4d:a9:d0:76:75:51:b0:59:d9:
                    0f:72:51:62:71:02:8e:74:5f:0c:ce:9e:89:b2:e8:
                    bb:1f:7e:2f:04:a6:e6:94:50:fd:42:c3:bb:9c:45:
                    b4:86:5b:0d:78:6a:b5:c3:4a:fd:4f:d7:b8:cf:d8:
                    c9:98:e0:19:51:5b:81:37:6f:64:8c:30:83:17:28:
                    60:b7:06:34:94:d8:c4:04:b7:da:be:8c:c5:59:af:
                    63:3b:3f:33:be:b1:da:19:d9:80:18:42:a5:ed:fa:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:3A:A2:4D:42:32:3A:38:7C:EA:61:18:3C:0B:DB:2A:03:71:6B
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:99:5b:96:32:65:49:3b:01:fe:d8:56:fe:20:ba:c8:f3:
         ab:f2:94:6b:49:9f:8a:10:d9:1d:ca:62:57:2a:da:01:9d:ad:
         99:5e:37:a5:25:98:ca:df:25:81:57:64:22:1e:60:c6:44:fa:
         c4:1f:f3:ed:01:a2:b4:53:f3:b4:87:ad:65:b3:7d:ed:8d:aa:
         61:1e:db:02:e7:78:d0:76:b8:23:b8:85:eb:0b:2f:c0:db:dd:
         3e:5a:52:43:35:57:d7:9e:de:7d:22:31:42:b5:f2:bf:93:a0:
         44:5c:25:69:7c:01:08:11:a3:3b:22:26:4b:9a:05:68:c4:2b:
         11:fe:cb:0a:5a:08:93:fd:18:6f:7e:a4:b9:a8:fc:6d:51:60:
         ad:f7:8a:82:9a:5f:be:5c:02:bc:bf:6f:9a:23:aa:f0:cc:c1:
         44:6b:0e:e0:19:f1:d0:c7:ad:52:6d:6a:42:b4:ab:a2:9f:7d:
         62:b9:a8:48:a7:23:35:64:20:58:e7:4f:83:00:71:75:6e:ca:
         87:2a:d7:6c:54:11:5a:7b:6a:fa:3d:42:91:b8:a2:aa:1c:b3:
         4b:39:6d:c8:c9:72:7d:43:37:fa:6e:5b:29:c0:26:8c:5a:bf:
         c3:54:33:a4:24:f7:71:09:e7:8e:01:88:ea:ea:55:8c:c6:54:
         ae:9f:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:11 2026 by rpki-client