Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          FAsR0IDFauNfy1bABH63mfq7dK412rFLUymsZS8doXQ=
Subject key identifier:   8E:B8:B4:C5:3C:3B:3A:1F:82:DB:B3:82:E4:5D:D8:BB:B1:7E:A9:69
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       019DDD6843460A00067F01DF1E975F13186D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          035C
Signing time:             Thu 30 Apr 2026 08:01:30 +0000
Manifest this update:     Thu 30 Apr 2026 08:01:30 +0000
Manifest next update:     Fri 01 May 2026 08:01:30 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: EPQdAKu/hVr/7IslTy0hGGqaXOhJjEOhmq6dX+2TbfU=)
                          2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:68:43:46:0a:00:06:7f:01:df:1e:97:5f:13:18:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Apr 30 08:01:30 2026 GMT
            Not After : May  1 08:01:30 2026 GMT
        Subject: CN=8eb8b4c53c3b3a1f82dbb382e45dd8bbb17ea969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:49:1b:4c:83:73:cf:d9:67:92:36:28:9c:
                    91:d2:0d:c3:28:cb:5d:b2:29:57:c6:35:7c:11:73:
                    43:15:87:7f:36:02:b7:e6:a2:93:de:f3:82:12:b5:
                    68:27:a7:62:a9:44:78:fa:76:4f:99:1a:20:03:80:
                    41:e6:7d:ed:12:7a:80:db:2f:00:ce:84:4f:1d:da:
                    27:76:0f:11:e0:74:c1:3c:d7:b9:cd:81:75:b5:e3:
                    5d:e8:58:11:c5:26:eb:0b:95:1e:85:bf:28:8c:02:
                    f2:ef:7d:13:a4:1d:06:11:05:98:d4:d3:80:01:1e:
                    3c:85:ed:bc:23:07:ef:3d:c5:2f:83:f9:79:78:b4:
                    ec:34:3d:46:e9:cc:68:9b:d2:1b:f7:cf:a0:42:15:
                    fa:17:5a:64:56:2d:5f:b3:bf:18:b8:3c:1b:25:e0:
                    0b:e0:46:96:a9:d7:a3:91:2f:67:5a:87:04:17:e9:
                    a7:83:c7:3d:03:c4:ff:48:cf:d0:11:17:ec:1b:6a:
                    27:9a:96:20:32:64:49:f1:9e:d9:1b:33:3b:ff:cb:
                    c0:68:8c:b8:38:dd:47:fb:ea:ef:be:26:07:dc:ac:
                    b5:32:2d:27:bd:73:71:52:11:7a:87:47:f6:ac:9b:
                    2e:f5:5b:77:93:72:21:5a:69:b1:30:2c:00:83:07:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:B4:C5:3C:3B:3A:1F:82:DB:B3:82:E4:5D:D8:BB:B1:7E:A9:69
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:a9:53:8d:57:fe:c1:02:2e:8d:d3:29:ea:11:59:6a:3b:
         df:c2:df:da:b8:2f:42:9d:8f:92:9b:e3:86:24:53:c3:9c:3a:
         c4:01:ac:e4:6b:c5:2d:66:e8:9d:64:90:93:0f:2a:16:c7:d2:
         28:a1:7d:70:40:88:37:e4:5d:0b:97:56:f4:22:97:54:27:98:
         58:4b:c1:d9:47:3d:c5:b9:a0:42:2d:c6:e3:cc:fd:c5:07:32:
         10:ca:a7:ee:2f:f7:ec:f8:e1:f5:4f:54:9c:ad:eb:4e:26:f8:
         38:6e:2b:e0:1b:04:a0:e7:32:66:3b:9d:1b:1f:8a:c9:96:25:
         ab:eb:de:96:c9:54:3b:0d:ef:bb:6a:83:3a:2b:a8:44:98:2d:
         33:53:dd:b5:73:e9:8d:3f:c4:46:40:84:06:7f:07:3a:b3:d0:
         cd:83:46:9c:02:d0:ec:5b:ad:c4:16:67:ff:f6:86:7b:a2:79:
         5e:59:9a:b5:31:c2:a1:b7:e0:51:65:1d:5c:75:dd:0e:d2:70:
         a4:49:38:c2:7b:eb:4c:78:5e:f2:57:36:c7:76:64:27:d8:6e:
         41:89:f4:bf:41:2f:50:57:27:f8:77:e7:2e:4b:9d:a4:af:0d:
         ba:19:f8:2e:1c:c4:1e:b0:9d:a9:d6:35:3d:01:ad:92:30:75:
         d1:d8:27:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daENGCgAGfwHfHpdfExhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz
Y2U1ZDIwHhcNMjYwNDMwMDgwMTMwWhcNMjYwNTAxMDgwMTMwWjAzMTEwLwYDVQQD
Eyg4ZWI4YjRjNTNjM2IzYTFmODJkYmIzODJlNDVkZDhiYmIxN2VhOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNJG0yDc8/ZZ5I2KJyR0g3DKMtd
silXxjV8EXNDFYd/NgK35qKT3vOCErVoJ6diqUR4+nZPmRogA4BB5n3tEnqA2y8A
zoRPHdondg8R4HTBPNe5zYF1teNd6FgRxSbrC5Uehb8ojALy730TpB0GEQWY1NOA
AR48he28IwfvPcUvg/l5eLTsND1G6cxom9Ib98+gQhX6F1pkVi1fs78YuDwbJeAL
4EaWqdejkS9nWocEF+mng8c9A8T/SM/QERfsG2onmpYgMmRJ8Z7ZGzM7/8vAaIy4
ON1H++rvviYH3Ky1Mi0nvXNxUhF6h0f2rJsu9Vt3k3IhWmmxMCwAgwfl1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI64tMU8OzofgtuzguRd2LuxfqlpMB8GA1UdIwQY
MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt
MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1
LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7mpU41X
/sECLo3TKeoRWWo738Lf2rgvQp2PkpvjhiRTw5w6xAGs5GvFLWbonWSQkw8qFsfS
KKF9cECIN+RdC5dW9CKXVCeYWEvB2Uc9xbmgQi3G48z9xQcyEMqn7i/37Pjh9U9U
nK3rTib4OG4r4BsEoOcyZjudGx+KyZYlq+velslUOw3vu2qDOiuoRJgtM1PdtXPp
jT/ERkCEBn8HOrPQzYNGnALQ7FutxBZn//aGe6J5XlmatTHCobfgUWUdXHXdDtJw
pEk4wnvrTHhe8lc2x3ZkJ9huQYn0v0EvUFcn+HfnLkudpK8Nuhn4LhzEHrCdqdY1
PQGtkjB10dgngQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 18:11:11 2026 by rpki-client