Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          UFcbozlpk896awsaYHuRyblW5mSsRTiyi+hU4TvpGKU=
Subject key identifier:   95:EA:40:BF:E6:49:1B:D9:25:2B:9D:C3:85:93:F4:DD:BE:51:01:85
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       019EF26CDB9825416BD9E22AB10894F779FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          11A5
Signing time:             Tue 23 Jun 2026 03:01:20 +0000
Manifest this update:     Tue 23 Jun 2026 03:01:20 +0000
Manifest next update:     Wed 24 Jun 2026 03:01:20 +0000
Files and hashes:         1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
                          2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: 3kuoNwZbj5+8o728bY6j0mVFa51NyCwrth0xfBOYBJk=)
                          3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
                          4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
                          5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
                          6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
                          7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
                          8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
                          9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f2:6c:db:98:25:41:6b:d9:e2:2a:b1:08:94:f7:79:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: Jun 23 03:01:20 2026 GMT
            Not After : Jun 24 03:01:20 2026 GMT
        Subject: CN=95ea40bfe6491bd9252b9dc38593f4ddbe510185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:ec:66:82:b7:64:af:8a:57:2c:3b:c6:db:
                    19:5e:90:c7:18:a9:59:aa:cb:e3:6f:0d:48:34:24:
                    18:48:84:ea:96:0f:6d:8f:ba:37:ca:84:9e:56:65:
                    b4:74:4e:77:25:31:2d:47:15:27:f2:75:41:79:0c:
                    04:34:01:63:d2:b0:d2:45:02:5e:aa:06:31:d5:f5:
                    68:75:ec:c1:d9:1c:13:41:e3:b9:d5:30:c4:ca:ba:
                    54:ca:92:88:68:12:ae:29:db:07:03:65:9d:6e:fa:
                    54:f3:9e:8b:a7:31:13:46:e5:ca:3b:e2:26:53:3f:
                    5c:e8:ee:a6:b1:95:45:22:fb:40:2f:e7:98:79:21:
                    25:f1:c7:f4:e7:25:6e:3b:a1:43:cf:8a:e4:36:25:
                    1f:11:28:0e:9a:45:be:c8:79:42:ed:0e:75:7c:84:
                    83:34:71:b1:bc:33:d3:20:69:df:2b:4b:eb:15:93:
                    c9:4a:0c:88:4e:e0:51:d6:29:f3:3d:f8:cb:4b:c2:
                    55:ca:aa:6d:7a:b7:b2:0b:64:d7:04:f3:f3:15:11:
                    87:b0:0f:b7:b7:1b:65:00:1e:13:f6:34:14:28:81:
                    2f:8e:2f:64:e4:d9:56:76:4c:f9:f9:45:8c:6f:f4:
                    c5:76:5d:b3:8c:d0:b0:02:09:60:b2:c4:ee:0d:71:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EA:40:BF:E6:49:1B:D9:25:2B:9D:C3:85:93:F4:DD:BE:51:01:85
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:eb:6c:d1:73:5d:0a:c1:3b:65:3a:4c:a0:80:98:76:45:
         b2:2d:b0:d6:4c:1a:f9:91:e8:88:5c:22:30:ef:8d:6f:fc:40:
         fc:64:b7:ba:2f:20:dc:c3:5c:02:fc:4c:5a:db:e2:ff:b4:05:
         3e:e2:45:8e:f7:9c:eb:8d:c6:16:b4:c8:42:2b:d0:da:46:f2:
         7f:7c:1c:38:53:f8:1c:25:05:49:62:50:78:b1:b0:00:4b:16:
         b0:4b:6d:36:8b:9d:5e:cc:ca:af:37:5f:20:30:ed:7b:cd:c0:
         44:3e:ee:22:61:95:31:c7:fe:f7:ce:2a:ef:d0:6d:1b:81:89:
         63:1e:42:86:77:49:f1:f0:9c:36:20:79:cf:26:fe:81:ae:54:
         36:c6:67:03:5f:46:22:c9:7d:a4:96:fb:25:88:47:8a:43:64:
         84:70:85:de:74:fc:80:68:6c:09:04:b4:14:be:65:e8:5f:1e:
         ea:77:a6:ba:5b:34:76:9d:a4:b0:f3:44:0a:38:b8:3b:89:e2:
         86:9b:d2:e3:23:aa:0f:67:af:5c:37:06:62:04:4f:39:9c:76:
         01:33:66:10:27:8b:3f:05:65:f0:8b:5f:f8:dd:7f:a6:d8:6a:
         60:fb:90:36:9b:97:3f:ff:42:43:92:c3:5a:89:b8:69:49:fe:
         bf:01:3f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ybNuYJUFr2eIqsQiU93n+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz
NDY5YzkwHhcNMjYwNjIzMDMwMTIwWhcNMjYwNjI0MDMwMTIwWjAzMTEwLwYDVQQD
Eyg5NWVhNDBiZmU2NDkxYmQ5MjUyYjlkYzM4NTkzZjRkZGJlNTEwMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSrsZoK3ZK+KVyw7xtsZXpDHGKlZ
qsvjbw1INCQYSITqlg9tj7o3yoSeVmW0dE53JTEtRxUn8nVBeQwENAFj0rDSRQJe
qgYx1fVodezB2RwTQeO51TDEyrpUypKIaBKuKdsHA2WdbvpU856LpzETRuXKO+Im
Uz9c6O6msZVFIvtAL+eYeSEl8cf05yVuO6FDz4rkNiUfESgOmkW+yHlC7Q51fISD
NHGxvDPTIGnfK0vrFZPJSgyITuBR1inzPfjLS8JVyqptereyC2TXBPPzFRGHsA+3
txtlAB4T9jQUKIEvji9k5NlWdkz5+UWMb/TFdl2zjNCwAglgssTuDXHLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXqQL/mSRvZJSudw4WT9N2+UQGFMB8GA1UdIwQY
MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt
M2NlM2NmOGIxYzQ5LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5
LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0/rbNFz
XQrBO2U6TKCAmHZFsi2w1kwa+ZHoiFwiMO+Nb/xA/GS3ui8g3MNcAvxMWtvi/7QF
PuJFjvec643GFrTIQivQ2kbyf3wcOFP4HCUFSWJQeLGwAEsWsEttNoudXszKrzdf
IDDte83ARD7uImGVMcf+984q79BtG4GJYx5ChndJ8fCcNiB5zyb+ga5UNsZnA19G
Isl9pJb7JYhHikNkhHCF3nT8gGhsCQS0FL5l6F8e6nemuls0dp2ksPNECji4O4ni
hpvS4yOqD2evXDcGYgRPOZx2ATNmECeLPwVl8Itf+N1/pthqYPuQNpuXP/9CQ5LD
Wom4aUn+vwE/bg==
-----END CERTIFICATE-----
Generated at Tue Jun 23 11:55:23 2026 by rpki-client