Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          3sur35y8abalYznw0QjVc/NUw0lW92Ji3HGzRysD5r4=
Subject key identifier:   F7:0F:86:B0:6E:BD:0E:A6:AF:DC:9B:64:A0:CC:BD:7B:33:12:1B:30
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       019EBAD91023F06EF238828DEECE07A6C387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          0A1D
Signing time:             Fri 12 Jun 2026 08:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 08:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 08:00:48 +0000
Files and hashes:         1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
                          2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
                          3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: onSQn+QGbOmIPgAlWrmbDha5b1DvEW1DZslF6HRn0II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:d9:10:23:f0:6e:f2:38:82:8d:ee:ce:07:a6:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: Jun 12 08:00:48 2026 GMT
            Not After : Jun 13 08:00:48 2026 GMT
        Subject: CN=f70f86b06ebd0ea6afdc9b64a0ccbd7b33121b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:9c:1f:93:a1:9c:2a:20:91:1d:de:5c:97:
                    04:a8:b8:ae:59:d4:63:f3:7a:13:a0:84:3b:37:b4:
                    0d:fc:73:0c:c0:29:0a:c7:63:4e:25:7e:b6:9a:81:
                    be:5f:8e:c2:86:83:c7:f7:27:0e:b6:c0:33:a6:d2:
                    db:84:38:79:26:b5:5c:7e:dc:13:30:80:51:c4:f1:
                    12:2f:99:9f:c3:4f:2b:e3:38:f7:1a:ed:ce:78:df:
                    05:0a:c9:cf:eb:73:4e:90:76:8d:94:ba:68:1a:5a:
                    be:36:3c:3f:a8:c9:d4:57:18:25:91:f0:9e:8d:91:
                    80:55:f2:35:76:ed:41:ec:1b:71:14:95:62:8b:1c:
                    cf:a9:5a:05:7f:1a:26:cf:d6:ef:91:b1:33:01:6d:
                    92:b8:04:65:27:ef:ff:dc:8f:f5:37:10:72:24:94:
                    ea:4b:a7:7d:e1:11:7f:c3:cb:9b:34:c1:7b:ad:39:
                    e0:21:34:c5:76:5a:a2:c6:2e:db:6f:77:a5:40:04:
                    d4:6a:b6:88:a5:c6:2e:7a:db:dd:ba:c6:9e:91:f6:
                    82:2f:45:1a:d8:ca:0b:e0:e1:fe:91:79:ea:55:33:
                    ca:36:40:52:a7:11:cf:35:ae:f9:07:a8:ae:d4:f8:
                    77:2c:d2:94:64:19:fe:da:b9:2c:3f:cf:69:23:9f:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:86:B0:6E:BD:0E:A6:AF:DC:9B:64:A0:CC:BD:7B:33:12:1B:30
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:17:30:e0:4e:1f:ec:bb:13:b0:14:1d:fb:8c:38:36:a4:
         1c:70:8e:38:81:d1:fe:54:66:0e:09:1e:d5:c3:02:3c:32:c7:
         8c:f8:38:a8:6f:b7:d0:be:5b:66:7b:95:d6:55:7e:46:f9:b3:
         30:fa:0e:bf:5b:93:b0:ca:52:5b:b9:54:c8:9e:c8:94:53:ae:
         34:86:9d:43:f3:b3:80:7b:43:d4:14:02:01:5c:e4:0b:70:dc:
         04:11:69:56:5f:14:b5:bc:7e:db:8d:6d:0e:3f:20:88:c2:b8:
         8f:6f:66:fe:70:be:2c:cf:50:9c:cb:84:f1:03:06:c9:31:a2:
         d1:5f:0f:5e:7e:78:c2:58:b9:f1:5d:24:19:45:dd:9a:a8:e8:
         8b:bc:18:d1:10:f9:0b:94:93:22:7b:46:bb:3a:a5:a4:dd:1b:
         ae:92:c2:da:09:fa:a5:4f:20:9a:74:93:8d:0f:ce:c0:b2:e9:
         f5:2d:e5:a3:13:01:12:ba:ea:17:be:96:32:86:d7:bb:d2:65:
         e1:d1:34:5b:70:8c:77:d5:ce:aa:b3:ba:09:c4:11:eb:fa:a9:
         13:e8:43:2f:79:0a:34:61:d6:20:e4:b6:d3:0f:4c:b9:75:02:
         41:8f:2d:df:28:ec:eb:0d:22:7f:c1:f4:28:4c:d1:2d:5d:39:
         36:75:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:08:58 2026 by rpki-client