Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          w1HVUF7XuHtxCji/zOmXv8M9nxgPkzlJOd+puRJW57s=
Subject key identifier:   E0:CC:09:10:82:1D:1F:3C:BF:EA:B8:DB:B0:D6:D3:1A:91:35:FF:38
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       019DA4540F997F216F13B79F475C0BE3C940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0FD7
Signing time:             Sun 19 Apr 2026 06:01:05 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:05 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:05 +0000
Files and hashes:         1: I9uIHyNAZuZvz077ylfXzs2a2u4.roa (hash: HTHulKVM9Nf7ivuW33GQbC8YIjVpn1m5bDuyHdQbDxM=)
                          2: bAcGH9H1K73FpXSxpyLe2c0iBX8.roa (hash: TpsGeeQA3yklbylho+JTjROwnPYe5ku9NUEkM8M/pMk=)
                          3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: W1g8OJdSXRgDiqV6VcBH2cu8tbFDN9EG7PPjZolwuwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:0f:99:7f:21:6f:13:b7:9f:47:5c:0b:e3:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Apr 19 06:01:05 2026 GMT
            Not After : Apr 20 06:01:05 2026 GMT
        Subject: CN=e0cc0910821d1f3cbfeab8dbb0d6d31a9135ff38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:a0:26:67:a8:4b:10:62:2c:fd:22:f7:30:
                    c9:4c:bd:ba:18:e7:0b:7d:25:82:16:e4:c9:4f:59:
                    b9:5e:6c:60:cd:ff:50:6f:4b:69:df:46:97:9d:74:
                    94:de:7b:aa:14:18:6f:94:b8:61:45:77:e2:c5:b0:
                    a3:14:df:44:25:9f:d0:2e:57:b3:b1:60:77:55:b6:
                    f6:2f:e0:16:5a:77:cf:ec:7a:75:62:31:cc:18:ba:
                    18:e6:0f:23:7f:12:6a:97:a7:5f:c4:e2:bc:97:0c:
                    a5:59:23:62:38:fc:a1:89:ab:98:b3:8f:37:84:c0:
                    c0:ef:1b:1e:67:03:a7:e2:ce:30:2b:0c:67:de:c3:
                    35:49:29:60:b6:a2:a0:07:9e:30:7b:fe:00:01:7f:
                    8f:42:31:ee:ab:ba:74:51:c1:95:9f:1d:68:c8:f0:
                    21:d2:d8:76:8e:d3:f8:94:a7:74:04:aa:06:a0:85:
                    b5:fc:fb:84:ed:74:49:7f:54:4a:12:c0:64:c5:f1:
                    aa:47:b4:47:f5:3b:14:0a:03:a7:86:1c:f6:02:7e:
                    f4:f6:d5:6d:71:6e:a2:8d:01:e3:d8:16:f3:e3:cc:
                    20:dc:0a:32:6b:ea:25:d7:ec:2d:55:27:07:b2:12:
                    44:7d:88:45:70:f5:c8:95:f0:7e:b6:8a:3b:ba:a2:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:09:10:82:1D:1F:3C:BF:EA:B8:DB:B0:D6:D3:1A:91:35:FF:38
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:07:17:92:e3:ac:73:32:72:8f:23:15:75:b5:1e:ca:75:
         32:92:08:b4:fe:bd:75:21:4c:ab:f7:f8:22:30:9a:b4:5c:de:
         73:b3:4f:d0:53:cc:e3:13:e8:b6:52:64:e9:78:1a:3a:a1:f0:
         01:da:4f:05:ef:f7:34:6d:9e:1b:12:85:32:d5:96:6e:4a:f9:
         5a:c2:d0:85:2a:f8:3c:be:8a:ea:7f:eb:8b:26:cd:ae:9d:2c:
         85:e3:d4:aa:b7:72:ea:82:e7:c2:33:a6:23:40:e5:90:17:ac:
         42:31:4e:c6:c5:77:c7:45:a5:3c:5c:49:2b:10:74:b1:8a:40:
         10:71:f3:fe:86:f7:a7:cf:c6:38:c4:d4:f5:2d:13:27:2f:8d:
         fd:c2:f2:1d:69:ef:3d:49:42:ac:d2:cb:55:91:6b:75:48:cb:
         fb:b2:6e:a3:e6:01:f1:d9:f1:93:37:90:db:2c:f8:96:8a:df:
         fe:08:cb:50:cf:58:cf:6b:68:c3:37:31:40:61:ff:0e:f4:c2:
         a0:73:cd:5c:89:98:bc:c5:9e:47:7b:38:2b:37:c4:af:e1:f6:
         b6:7b:31:2c:e0:d5:08:c6:da:c2:96:51:65:63:08:3d:7b:d4:
         51:c6:cd:5c:e7:01:97:8a:ab:c7:ac:ea:f6:d0:6e:a9:fb:43:
         b2:6c:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:22 2026 by rpki-client