Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          OF+AW88JuYoW+Pm77zcGBP2ha+nECJd3jvtlHnInFbE=
Subject key identifier:   20:87:0E:78:92:3B:D7:F0:D7:07:CF:71:34:89:03:BA:1E:F8:6E:C6
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019EB7330E198697163537A06EEA8AF983CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          1303
Signing time:             Thu 11 Jun 2026 15:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:36 +0000
Files and hashes:         1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
                          2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
                          3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
                          4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
                          5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
                          6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
                          7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
                          8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
                          9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
                          10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
                          11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
                          12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
                          13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
                          14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
                          15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
                          16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
                          17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
                          18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
                          19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
                          20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
                          21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
                          22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: CVwVFm7HrnBjTbltceUeHqA5kugJ2zhxGw7suXntDAQ=)
                          23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
                          24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
                          25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
                          26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
                          27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:0e:19:86:97:16:35:37:a0:6e:ea:8a:f9:83:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Jun 11 15:00:36 2026 GMT
            Not After : Jun 12 15:00:36 2026 GMT
        Subject: CN=20870e78923bd7f0d707cf71348903ba1ef86ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:27:f7:5f:fd:7e:c2:02:62:71:2f:57:54:
                    18:cd:4e:be:53:64:40:6c:c4:a3:0c:43:35:7e:e1:
                    7f:a1:13:5d:53:ae:39:85:54:ec:89:4a:4a:4f:73:
                    b6:1c:b0:1e:78:a3:a9:67:f7:f8:6b:58:1f:3e:ec:
                    ba:d6:e0:c9:e5:fe:8e:05:4d:7a:d2:db:36:ad:af:
                    c6:ef:ed:7f:84:38:c9:af:a5:90:34:0e:a0:a0:24:
                    a1:bd:37:c3:43:e6:62:69:23:24:bc:b9:ef:70:b5:
                    25:ec:10:a2:e4:1d:f0:56:57:dc:d2:81:6d:81:49:
                    57:0c:17:2f:38:05:75:e3:a7:d2:94:df:bb:ff:2b:
                    14:13:fd:f7:29:b6:08:19:6e:ab:ab:db:83:d3:72:
                    a6:68:ce:8d:5f:5e:08:4b:73:81:1d:98:b4:05:97:
                    b3:d1:74:15:4a:9d:e1:34:d5:9e:cd:4b:aa:8d:9e:
                    eb:03:b4:06:2d:69:e0:ae:ec:6c:56:ef:a9:4b:02:
                    7b:07:1a:e9:9e:74:b9:b7:7f:a3:4d:b2:18:42:4a:
                    fe:d9:d9:a4:90:f8:e5:bd:22:e0:a5:3d:9d:1e:4b:
                    e9:6e:58:f4:49:3e:49:ef:f1:a9:51:ab:f6:a9:60:
                    48:a0:fd:cc:85:a3:69:b1:1c:2f:31:ad:5a:1d:c0:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:0E:78:92:3B:D7:F0:D7:07:CF:71:34:89:03:BA:1E:F8:6E:C6
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:db:62:cd:55:90:cb:c1:b1:29:42:f2:79:e6:88:33:18:
         ef:f1:fd:87:dc:ae:41:fb:b7:c9:02:e5:92:4d:07:bd:42:89:
         f5:38:6a:a5:40:18:63:c0:7f:ca:73:f0:50:13:82:3b:b2:0c:
         17:34:c7:c0:55:24:9f:fd:7c:37:e5:d2:95:fb:65:f8:fd:43:
         ef:90:ad:eb:81:47:55:f8:86:50:e6:c0:ec:dc:9b:3b:c2:9b:
         b0:d2:00:52:dd:cd:3c:cc:52:c0:9d:fc:22:cd:26:32:91:4d:
         cf:ee:2e:6f:be:30:94:25:f4:b4:d2:a8:29:19:e3:65:92:dc:
         02:45:6d:2e:b7:0f:fc:af:97:eb:83:33:c3:82:56:a8:45:c3:
         87:6f:75:88:97:54:73:ce:2d:c4:7e:29:61:3b:8d:77:dc:5a:
         f3:50:6a:a2:f7:0d:d2:43:ab:53:dc:9c:12:1e:8d:a1:62:48:
         88:8c:30:69:e4:27:9a:ad:77:f3:11:1a:bb:7c:c4:b4:fb:04:
         2e:02:2c:1c:d6:71:fe:f6:e3:8f:a3:81:99:74:15:d5:23:dc:
         f4:ed:92:87:aa:44:ec:19:3c:d1:c5:46:43:3f:79:7c:33:94:
         52:e2:50:3b:8d:50:a3:8e:09:01:1f:78:81:c3:6c:d3:d4:63:
         83:f6:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:30:54 2026 by rpki-client