Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File:                     jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier:          beK8Qu+Qjrktwbo+Q1sFl8X70hVs0eiIM8BlRhQiQEw=
Subject key identifier:   8D:15:10:17:09:3B:F2:24:FD:9F:A4:8B:48:62:40:E2:6D:85:AC:3F
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer:       /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial:       019EB98F59036AA09D3E8DB02C356FA32884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number:          0CEB
Signing time:             Fri 12 Jun 2026 02:00:39 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:39 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:39 +0000
Files and hashes:         1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: W0sexZp6kl1b6RZFBf02Kpf+8FE4YzJoymKkEqubYn0=)
                          2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:59:03:6a:a0:9d:3e:8d:b0:2c:35:6f:a3:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
        Validity
            Not Before: Jun 12 02:00:39 2026 GMT
            Not After : Jun 13 02:00:39 2026 GMT
        Subject: CN=8d151017093bf224fd9fa48b486240e26d85ac3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:fa:13:c6:02:6d:58:a6:19:8c:ff:7b:ae:
                    01:f6:40:26:71:cf:9f:18:be:30:4e:aa:ff:69:b4:
                    c4:93:26:69:30:84:4a:f8:a4:3b:94:9b:39:71:2c:
                    68:56:34:7c:ec:00:f4:10:b6:d5:be:d8:09:b2:89:
                    08:5d:b6:50:50:78:57:80:07:a4:3e:16:66:64:be:
                    71:80:75:8a:eb:f7:45:d5:5f:b0:4b:04:d3:15:f5:
                    64:0c:dd:d0:63:ff:a5:6a:a1:c9:b4:51:6c:85:dd:
                    83:81:95:24:ce:84:1e:38:ed:18:e2:ba:b9:9d:96:
                    64:a3:7f:a9:1e:a1:5a:18:d6:7f:20:c5:c4:42:8d:
                    24:35:39:66:06:34:20:7d:ae:9e:31:a6:02:14:7c:
                    8f:b0:9e:07:3a:41:dd:24:44:08:27:29:4c:5b:99:
                    a3:c2:b5:80:58:2a:4a:0f:3b:db:9c:5a:74:97:74:
                    69:1e:ce:b6:fb:24:41:79:6b:44:4c:74:38:4d:4a:
                    c8:ad:c5:05:01:31:94:42:8e:b9:f4:ba:20:1e:93:
                    0b:50:cd:50:01:ee:db:a1:ac:46:4a:0f:68:8e:64:
                    e1:36:ab:f5:fa:72:4d:02:46:e5:55:3d:18:c3:e8:
                    1b:85:98:a3:9c:ee:8e:d5:97:74:07:b4:93:29:c2:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:10:17:09:3B:F2:24:FD:9F:A4:8B:48:62:40:E2:6D:85:AC:3F
            X509v3 Authority Key Identifier:
                keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:f6:d5:56:9f:c6:08:97:ff:1d:d2:18:8b:b5:e9:18:7a:
         1f:58:61:9a:f5:0a:36:bd:44:d6:44:6b:4c:46:3b:47:96:5d:
         a0:8a:18:d1:32:66:db:4a:37:25:d7:bf:56:66:c2:e5:39:97:
         1a:0d:6b:af:9b:65:c1:de:85:be:70:a6:93:a9:4e:a0:97:d9:
         b1:5a:3e:01:c4:59:63:cd:6b:9d:29:8b:53:63:dc:00:be:7c:
         a9:d5:26:0c:5d:77:14:c2:4f:78:ad:0b:71:a1:bb:09:4a:67:
         94:a8:c4:cd:f2:bb:64:46:fe:ba:a5:4f:f9:b4:84:2e:dc:a6:
         17:b5:ab:8d:e7:5a:f8:88:5f:b4:54:3d:21:f7:23:1f:bb:5b:
         c7:ee:2a:01:65:71:0f:35:ec:15:8e:03:74:3c:05:fa:71:6d:
         ed:f1:30:47:93:a0:d0:48:7b:a0:57:e4:25:d6:ec:a5:a6:52:
         d7:a6:eb:7a:34:0e:a5:f5:aa:7c:42:0a:25:4c:42:6a:ac:5f:
         49:be:df:40:02:76:f5:a3:ac:81:e3:ec:cc:46:00:2f:22:b9:
         96:74:bf:20:98:b0:31:90:fa:65:81:db:33:7d:03:72:39:7b:
         06:5f:f7:05:ae:2c:43:17:85:5e:1c:65:21:49:b2:7b:46:49:
         d6:f0:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:46:38 2026 by rpki-client