Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          K8VUSziWhRhJVcw3M3GRGls9klIbppx9aBp2P89ARjk=
Subject key identifier:   93:42:30:AA:54:5C:9C:72:DB:98:EB:21:14:4F:14:01:19:E0:6F:1D
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       019CAB344846AD084EE3EB12B520688431E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0F56
Signing time:             Sun 01 Mar 2026 21:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:56 +0000
Files and hashes:         1: I9uIHyNAZuZvz077ylfXzs2a2u4.roa (hash: HTHulKVM9Nf7ivuW33GQbC8YIjVpn1m5bDuyHdQbDxM=)
                          2: bAcGH9H1K73FpXSxpyLe2c0iBX8.roa (hash: TpsGeeQA3yklbylho+JTjROwnPYe5ku9NUEkM8M/pMk=)
                          3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: q7QfWkjZ+PXxb/r1Rc1GAfD55N8t+ip2TcVQqWeh2jE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:48:46:ad:08:4e:e3:eb:12:b5:20:68:84:31:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Mar  1 21:00:56 2026 GMT
            Not After : Mar  2 21:00:56 2026 GMT
        Subject: CN=934230aa545c9c72db98eb21144f140119e06f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:b5:12:50:5e:d0:91:1f:c5:5f:c5:cc:dd:
                    7d:00:5c:af:96:69:68:3d:0c:80:42:09:ea:b7:72:
                    86:49:61:61:0c:02:74:87:32:0e:b3:ed:4c:39:4e:
                    19:68:db:c9:a0:d0:a4:1d:fa:f3:31:ac:16:8d:ae:
                    65:2e:99:41:00:55:a3:ec:d0:e1:80:d7:bb:66:15:
                    34:89:85:f8:ea:c7:7e:f3:16:cf:23:53:c6:b0:e2:
                    1b:60:74:13:60:fb:47:9a:12:7c:17:5a:a4:a4:79:
                    1f:ef:f4:c8:6d:af:db:33:90:80:86:e6:f0:a8:d7:
                    16:b1:c6:c1:39:d9:3f:84:8c:45:41:75:e3:06:3e:
                    b0:0b:4e:2c:b6:c4:fd:ee:15:11:7a:ed:78:2e:43:
                    a1:3f:fe:00:4c:61:7b:4e:a8:05:a0:1c:5e:41:8e:
                    c1:c9:c4:ca:ce:fb:be:6a:74:e3:d9:c9:2c:47:e6:
                    84:ce:ec:fa:7b:a7:86:f4:15:37:c9:97:a2:79:d7:
                    5b:c6:7c:77:f3:9c:5a:cf:b3:85:02:1f:10:5d:d1:
                    b5:2f:b6:8d:b5:62:48:10:08:ab:f1:a6:b9:ac:87:
                    20:0d:ff:75:af:6b:5c:22:1e:32:9a:df:4f:10:99:
                    43:55:0d:8c:86:66:e7:12:72:00:9b:9d:80:34:2b:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:42:30:AA:54:5C:9C:72:DB:98:EB:21:14:4F:14:01:19:E0:6F:1D
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:0d:75:a4:16:e5:b9:87:90:92:e9:f4:7c:40:45:33:c7:
         bc:fd:fe:e2:f2:65:c0:a2:a1:2f:a4:88:3d:2a:16:d1:7a:fa:
         5d:69:f8:51:e5:e4:6e:5e:4b:12:99:d9:26:a0:42:74:12:16:
         99:6a:28:67:5f:03:6b:af:13:8b:0f:9e:a3:9d:5b:fc:2e:d3:
         5d:01:43:2c:b3:13:cf:b5:bd:2d:ec:dc:1b:71:88:69:08:a6:
         58:f8:73:45:da:51:e0:e6:23:42:97:a7:07:f9:00:10:1b:06:
         bb:9e:c0:2b:50:d4:85:f0:7c:c5:dc:23:68:2a:ea:3c:23:f1:
         af:b3:06:d7:75:1b:5e:a8:d9:c3:f3:aa:75:4b:92:31:07:1a:
         b2:96:a4:53:0d:f0:ba:9c:90:22:b1:e1:13:39:29:b6:27:b9:
         ae:17:ec:21:88:89:b3:9a:7b:5f:17:c1:16:74:2b:3e:2a:e3:
         a1:53:6e:ba:f5:77:1a:9f:47:f5:23:c2:aa:e4:d2:6f:aa:fb:
         9d:54:da:a0:69:ab:bf:2b:04:e7:96:15:51:bc:36:7f:1b:9d:
         8c:88:77:72:97:c3:f5:73:ac:26:ca:cf:ff:18:18:d7:7f:b8:
         83:60:3d:5d:b9:d9:f1:53:6a:3d:c2:60:03:f1:fb:c3:0e:ec:
         df:23:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:41 2026 by rpki-client