Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File:                     js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier:          6To9/3njK6fjUhYNtUn4Qfyf6+lGDsZ68HSXSDFJ0F8=
Subject key identifier:   35:38:C0:83:2F:51:0E:73:71:F7:9B:08:93:FB:76:E8:AC:82:1D:17
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       019EBD6C5ED774FEA8C6343524F5DF8948BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number:          0B97
Signing time:             Fri 12 Jun 2026 20:00:56 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:56 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:56 +0000
Files and hashes:         1: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (hash: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=)
                          2: LAWT8-8DrVGXo-g5H4GZO3z7fS8.roa (hash: Na6k/8EGssv/5DxPGxpYhkk2M4Z1QcQ+K49dXTrHKUI=)
                          3: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (hash: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y=)
                          4: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: jH7Q3k1q1Ev60NN2TA9Bnq/V7jhCpM+spHRNYCcpdlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:5e:d7:74:fe:a8:c6:34:35:24:f5:df:89:48:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Jun 12 20:00:56 2026 GMT
            Not After : Jun 13 20:00:56 2026 GMT
        Subject: CN=3538c0832f510e7371f79b0893fb76e8ac821d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:a4:43:42:ee:69:bd:99:6f:20:a3:e3:a6:
                    b8:28:d1:c8:23:2f:6f:04:6b:a0:51:e5:c3:a4:44:
                    72:b1:f3:af:a4:44:75:d8:d0:98:46:35:97:98:ab:
                    77:5f:ff:94:88:a1:15:91:d7:7c:02:a4:bc:c8:dd:
                    34:b6:f4:4d:62:be:ab:98:20:ec:04:f1:aa:42:44:
                    de:a0:17:8d:72:af:13:e6:62:fb:ba:ed:f3:6a:96:
                    6f:ff:eb:01:e4:c2:a5:58:e1:7b:c3:c2:5e:ce:fd:
                    5b:a9:e2:5d:4a:60:82:7c:48:11:d3:b1:95:06:b0:
                    b3:99:b5:c6:07:6a:9c:6c:a3:49:ab:24:96:00:55:
                    fb:90:88:dc:ea:b4:44:73:6a:90:de:75:ff:4d:d1:
                    e4:8c:c7:93:4a:57:f1:94:25:a9:32:88:34:d8:e5:
                    c6:f8:31:b1:fd:40:50:2b:bf:ca:35:2a:6c:47:f3:
                    58:a2:6d:b2:c7:41:8f:1a:e2:df:29:15:d1:9c:3a:
                    f8:ee:d0:e3:78:db:0a:93:44:90:d8:70:1c:af:6a:
                    96:02:63:54:f1:73:c2:30:8f:5b:5e:7e:e3:61:d3:
                    39:0f:58:7e:b3:c1:e7:9b:d3:3c:f0:38:36:7a:9b:
                    ca:0f:bd:20:d7:5c:bb:79:1c:c2:cb:a6:1c:6f:d7:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:C0:83:2F:51:0E:73:71:F7:9B:08:93:FB:76:E8:AC:82:1D:17
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:65:40:bf:db:89:9c:80:8b:26:06:4c:7a:2d:e2:92:00:e8:
         f9:58:6f:4f:ab:b1:05:c4:98:49:56:69:7a:89:23:d3:fe:d6:
         4f:b8:5b:6d:b2:2a:e2:57:95:f6:e8:9d:f0:51:0d:f6:e9:64:
         fe:a6:ad:f9:d0:05:0f:90:28:aa:64:f8:16:96:b7:24:d6:8e:
         f5:bb:2c:e6:03:4e:64:d8:08:22:22:c2:f2:9d:18:a7:9b:ae:
         50:d9:db:77:6d:f5:b5:73:53:86:e6:42:43:3b:90:81:99:78:
         98:d9:45:ed:ba:f3:e9:c7:23:02:1b:11:cb:b4:8e:b4:6d:7a:
         45:8c:d5:57:f4:65:43:a1:95:9e:6d:8c:f4:9f:c1:62:4f:0d:
         cd:92:15:11:ff:05:d7:4f:cc:9e:bd:d9:0a:9b:fe:b9:68:9a:
         14:ba:9d:0f:3f:5c:14:65:d8:3f:2c:4f:b6:61:3a:33:92:d9:
         6c:52:59:72:84:c9:69:24:6a:46:7e:8a:80:6f:04:be:73:2a:
         6d:a8:e0:4d:9c:fb:51:75:d8:50:29:1a:0b:59:00:ac:99:58:
         3a:f2:0e:68:34:7e:b3:62:3a:8f:2d:8e:5f:8a:4a:c3:0e:a2:
         d7:f0:23:3a:7f:3a:ae:b4:5a:61:34:cb:d2:80:2d:42:6c:63:
         9d:cf:c2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69bF7XdP6oxjQ1JPXfiUi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz
MDZhMTcwHhcNMjYwNjEyMjAwMDU2WhcNMjYwNjEzMjAwMDU2WjAzMTEwLwYDVQQD
EygzNTM4YzA4MzJmNTEwZTczNzFmNzliMDg5M2ZiNzZlOGFjODIxZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9qkQ0Luab2ZbyCj46a4KNHIIy9v
BGugUeXDpERysfOvpER12NCYRjWXmKt3X/+UiKEVkdd8AqS8yN00tvRNYr6rmCDs
BPGqQkTeoBeNcq8T5mL7uu3zapZv/+sB5MKlWOF7w8Jezv1bqeJdSmCCfEgR07GV
BrCzmbXGB2qcbKNJqySWAFX7kIjc6rREc2qQ3nX/TdHkjMeTSlfxlCWpMog02OXG
+DGx/UBQK7/KNSpsR/NYom2yx0GPGuLfKRXRnDr47tDjeNsKk0SQ2HAcr2qWAmNU
8XPCMI9bXn7jYdM5D1h+s8Hnm9M88Dg2epvKD70g11y7eRzCy6Ycb9cvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU4wIMvUQ5zcfebCJP7duisgh0XMB8GA1UdIwQY
MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt
MmJiZjhmYWEwMGNhLzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh
LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2VAv9uJ
nICLJgZMei3ikgDo+VhvT6uxBcSYSVZpeokj0/7WT7hbbbIq4leV9uid8FEN9ulk
/qat+dAFD5AoqmT4Fpa3JNaO9bss5gNOZNgIIiLC8p0Yp5uuUNnbd231tXNThuZC
QzuQgZl4mNlF7brz6ccjAhsRy7SOtG16RYzVV/RlQ6GVnm2M9J/BYk8NzZIVEf8F
10/Mnr3ZCpv+uWiaFLqdDz9cFGXYPyxPtmE6M5LZbFJZcoTJaSRqRn6KgG8EvnMq
bajgTZz7UXXYUCkaC1kArJlYOvIOaDR+s2I6jy2OX4pKww6i1/AjOn86rrRaYTTL
0oAtQmxjnc/C5w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:03:19 2026 by rpki-client