Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File:                     jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier:          EcG7gKUiwd1LHjgoHLa8l8fsHSlWR2Ug/WmmDfs47SI=
Subject key identifier:   56:B9:50:90:F2:8C:32:B5:B1:75:89:D1:90:70:86:BB:2A:B0:2E:E5
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer:       /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial:       01A00326D8CF10BBA6D8B73249D3814C697D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number:          12C1
Signing time:             Sat 15 Aug 2026 02:01:12 +0000
Manifest this update:     Sat 15 Aug 2026 02:01:12 +0000
Manifest next update:     Sun 16 Aug 2026 02:01:12 +0000
Files and hashes:         1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
                          2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: kLEu5v3Gc8tZa6TyR0BvIUeW0ia1003ESCsVGtEkaIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:d8:cf:10:bb:a6:d8:b7:32:49:d3:81:4c:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
        Validity
            Not Before: Aug 15 02:01:12 2026 GMT
            Not After : Aug 16 02:01:12 2026 GMT
        Subject: CN=56b95090f28c32b5b17589d1907086bb2ab02ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:06:43:93:c2:5d:46:2a:e4:50:76:e4:d0:
                    52:74:ad:1c:ad:1a:8a:cc:22:e8:58:bd:1d:e5:c9:
                    dd:a7:09:b1:ae:6e:24:f0:24:17:81:0a:54:21:bd:
                    b7:99:b0:06:73:94:4d:dd:e2:48:a4:0e:b1:cf:55:
                    1c:af:a6:3e:9f:cf:ed:b5:6f:b6:04:84:b3:52:95:
                    0f:81:4f:aa:0d:d0:de:15:a6:77:98:ff:ed:8b:10:
                    88:5b:09:48:90:c6:b1:99:b6:dd:f9:1a:68:26:9f:
                    58:4d:12:64:6c:86:06:96:10:b6:80:e8:d9:11:5c:
                    8b:56:f1:87:8c:19:11:4d:6f:48:66:fb:d1:1c:86:
                    10:4e:42:22:a3:ca:9d:5e:9e:60:70:73:02:87:9a:
                    50:8e:a9:39:34:84:74:aa:26:d8:3c:d5:b0:58:8d:
                    ac:1a:df:fb:7b:65:6b:fd:03:d3:d8:c6:a7:a1:66:
                    ed:cc:a7:53:25:35:88:47:29:bd:e5:fc:98:74:3d:
                    74:1f:6d:36:69:e3:e8:9a:d8:6d:5a:35:5a:07:bf:
                    e5:3d:16:0a:fc:28:3f:2b:3a:05:56:5f:90:6a:dd:
                    32:9e:7d:49:be:14:8e:20:69:0f:bf:0c:b0:6c:99:
                    55:50:d4:58:6c:02:8e:b8:53:dd:35:51:70:69:43:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:50:90:F2:8C:32:B5:B1:75:89:D1:90:70:86:BB:2A:B0:2E:E5
            X509v3 Authority Key Identifier:
                keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:04:2e:d2:8e:8e:58:53:ba:24:32:a2:60:e6:6e:83:27:
         3c:94:8b:aa:97:9e:7e:4f:e0:a7:fb:60:a2:08:63:c3:e4:f3:
         2e:f3:0d:04:8d:45:69:1f:13:5b:05:20:9f:3a:5e:c9:4a:09:
         5b:d6:ba:a0:dd:cb:aa:f7:f7:b8:89:99:f8:e3:cc:8f:69:ea:
         f0:e1:5a:4f:c5:f9:c4:d3:00:aa:3b:a3:5c:d4:7b:e0:07:45:
         94:98:ea:8e:e2:7d:6c:d5:62:7c:d3:2d:1c:7a:b1:3a:92:24:
         5a:66:91:58:b6:7f:e9:38:09:a2:db:93:98:e1:f3:e1:5b:ec:
         a9:67:be:bd:ca:9a:6d:80:ce:4f:f4:0b:93:3f:24:20:41:36:
         80:f1:a4:24:2e:d7:46:84:f5:71:fb:bb:32:f4:d8:87:9e:91:
         e4:64:91:f1:0d:e2:e0:e7:d6:a6:8a:27:72:da:81:81:25:22:
         95:f1:df:ed:89:58:ee:b8:f5:78:5e:b0:7c:04:a4:49:34:ca:
         66:8d:e6:b2:f3:6c:aa:5f:10:31:92:44:37:55:3b:f7:18:89:
         91:7e:e0:cf:62:5e:65:51:39:15:7c:f6:76:08:6e:04:55:a4:
         25:4b:0e:60:bd:a4:73:33:a6:de:45:a8:f1:1d:bc:35:3c:a0:
         08:11:ea:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJtjPELum2LcySdOBTGl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjYwODE1MDIwMTEyWhcNMjYwODE2MDIwMTEyWjAzMTEwLwYDVQQD
Eyg1NmI5NTA5MGYyOGMzMmI1YjE3NTg5ZDE5MDcwODZiYjJhYjAyZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0oGQ5PCXUYq5FB25NBSdK0crRqK
zCLoWL0d5cndpwmxrm4k8CQXgQpUIb23mbAGc5RN3eJIpA6xz1Ucr6Y+n8/ttW+2
BISzUpUPgU+qDdDeFaZ3mP/tixCIWwlIkMaxmbbd+RpoJp9YTRJkbIYGlhC2gOjZ
EVyLVvGHjBkRTW9IZvvRHIYQTkIio8qdXp5gcHMCh5pQjqk5NIR0qibYPNWwWI2s
Gt/7e2Vr/QPT2ManoWbtzKdTJTWIRym95fyYdD10H202aePomthtWjVaB7/lPRYK
/Cg/KzoFVl+Qat0ynn1JvhSOIGkPvwywbJlVUNRYbAKOuFPdNVFwaUMRXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa5UJDyjDK1sXWJ0ZBwhrsqsC7lMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi8ELtKO
jlhTuiQyomDmboMnPJSLqpeefk/gp/tgoghjw+TzLvMNBI1FaR8TWwUgnzpeyUoJ
W9a6oN3Lqvf3uImZ+OPMj2nq8OFaT8X5xNMAqjujXNR74AdFlJjqjuJ9bNVifNMt
HHqxOpIkWmaRWLZ/6TgJotuTmOHz4VvsqWe+vcqabYDOT/QLkz8kIEE2gPGkJC7X
RoT1cfu7MvTYh56R5GSR8Q3i4OfWpoonctqBgSUilfHf7YlY7rj1eF6wfASkSTTK
Zo3msvNsql8QMZJEN1U79xiJkX7gz2JeZVE5FXz2dghuBFWkJUsOYL2kczOm3kWo
8R28NTygCBHqWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:40 2026 by rpki-client