Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          6o7H+WYBB1k6mYILB0k5OOgjv+m37DYrbOtSNz87Jic=
Subject key identifier:   DE:3A:C6:7E:EF:61:BD:B9:E6:EE:8E:79:5B:B3:34:83:DD:7B:AB:47
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019F1D57D12FAC9596B61EE9867E7D4B33AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0FE3
Signing time:             Wed 01 Jul 2026 11:02:02 +0000
Manifest this update:     Wed 01 Jul 2026 11:02:02 +0000
Manifest next update:     Thu 02 Jul 2026 11:02:02 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: 8pVMYoaIxdbH5KaRu0tkcOE3/RY986LPPUMx0tu4BrA=)
                          4: UD_UfIwnl4qo5veFnawz_Py7oWs.roa (hash: u88NE0IUz/QnbzvXpzch8LU+f6UUm6bGqPLgZP1ycBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1d:57:d1:2f:ac:95:96:b6:1e:e9:86:7e:7d:4b:33:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Jul  1 11:02:02 2026 GMT
            Not After : Jul  2 11:02:02 2026 GMT
        Subject: CN=de3ac67eef61bdb9e6ee8e795bb33483dd7bab47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:03:18:32:b6:26:1f:5c:4a:c7:0a:58:c2:
                    1d:21:e9:7b:b4:17:c5:c7:5a:36:fa:72:3d:a0:16:
                    71:42:e6:d5:71:0f:f5:78:4b:81:f9:36:4a:9c:b8:
                    f7:e4:a3:a0:9b:b3:17:50:59:76:d5:71:dc:af:0b:
                    77:62:2b:7e:1c:b6:9e:3c:f7:bb:06:55:e3:ca:be:
                    81:ef:1f:2a:64:02:7b:ca:97:90:51:96:c3:25:f3:
                    ce:87:23:11:cc:65:4f:c0:08:1c:29:b6:0c:23:57:
                    ed:5a:57:87:9f:9e:f8:d5:96:46:2c:0c:83:fc:ab:
                    26:25:bf:d6:e5:c4:68:9d:4c:b9:ae:64:0b:02:eb:
                    87:2a:0a:70:25:6c:3a:53:9b:03:69:b6:e5:ac:a6:
                    aa:75:be:db:d8:43:61:c6:a9:2b:9f:00:7c:4c:9d:
                    c8:83:45:34:a8:fc:71:f5:89:e2:9e:c5:91:01:e6:
                    70:b0:2b:f3:b2:70:d4:be:7f:1a:b6:ad:b4:e1:cd:
                    3e:0a:f1:50:0f:58:2c:3f:1d:34:99:cc:bb:51:3e:
                    6c:46:de:31:26:a7:37:e3:ec:5f:67:6f:bb:58:53:
                    d2:d0:5e:fe:7a:cf:38:c6:2e:82:61:cd:fc:96:db:
                    e1:8d:af:31:ea:ee:ce:fe:b9:b3:20:43:07:8b:76:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:C6:7E:EF:61:BD:B9:E6:EE:8E:79:5B:B3:34:83:DD:7B:AB:47
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:77:83:24:ce:bf:3a:80:b9:52:6a:1e:46:4b:50:bb:4f:
         7c:04:a2:0a:76:60:5a:f4:d0:1f:57:75:61:64:03:b7:50:40:
         98:a6:fe:94:ba:55:d6:1d:a4:bf:a3:67:d9:29:3e:a0:a7:9d:
         52:30:88:cb:06:f1:3e:06:80:f8:23:e3:30:ca:69:cb:7f:e4:
         f7:88:cc:e7:9d:f0:c9:cd:e8:e5:30:3b:4c:37:5e:d5:cf:6a:
         26:20:2c:13:b1:61:40:7e:ae:89:50:f5:06:b8:81:2d:98:dd:
         ec:98:25:8d:86:d2:63:80:2d:4f:cd:4d:da:cf:15:19:8c:06:
         a2:37:fb:3a:3e:55:5f:5e:b8:85:6b:1a:7b:b4:e4:17:7f:96:
         58:45:0f:4c:54:ee:43:05:ac:49:25:52:6d:6b:93:87:80:73:
         15:a0:db:6a:78:39:59:b7:69:7e:5c:78:46:f3:cf:82:f9:80:
         05:f4:3b:8a:75:99:0b:04:74:5d:ee:fb:42:48:8d:c2:be:dd:
         51:e2:c3:ba:b4:d3:49:13:30:b3:f5:41:3d:fa:ca:2c:64:b1:
         8f:8d:5e:ab:c6:e9:9d:e1:47:91:21:b6:2f:a0:d3:9b:4e:29:
         b1:59:9d:05:72:f5:4a:4b:90:7f:05:47:fe:4b:50:2d:9c:7c:
         81:3e:84:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8dV9EvrJWWth7phn59SzOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjYwNzAxMTEwMjAyWhcNMjYwNzAyMTEwMjAyWjAzMTEwLwYDVQQD
EyhkZTNhYzY3ZWVmNjFiZGI5ZTZlZThlNzk1YmIzMzQ4M2RkN2JhYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSIDGDK2Jh9cSscKWMIdIel7tBfF
x1o2+nI9oBZxQubVcQ/1eEuB+TZKnLj35KOgm7MXUFl21XHcrwt3Yit+HLaePPe7
BlXjyr6B7x8qZAJ7ypeQUZbDJfPOhyMRzGVPwAgcKbYMI1ftWleHn5741ZZGLAyD
/KsmJb/W5cRonUy5rmQLAuuHKgpwJWw6U5sDabblrKaqdb7b2ENhxqkrnwB8TJ3I
g0U0qPxx9YninsWRAeZwsCvzsnDUvn8atq204c0+CvFQD1gsPx00mcy7UT5sRt4x
Jqc34+xfZ2+7WFPS0F7+es84xi6CYc38ltvhja8x6u7O/rmzIEMHi3aSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN46xn7vYb255u6OeVuzNIPde6tHMB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg13gyTO
vzqAuVJqHkZLULtPfASiCnZgWvTQH1d1YWQDt1BAmKb+lLpV1h2kv6Nn2Sk+oKed
UjCIywbxPgaA+CPjMMppy3/k94jM553wyc3o5TA7TDde1c9qJiAsE7FhQH6uiVD1
BriBLZjd7JgljYbSY4AtT81N2s8VGYwGojf7Oj5VX164hWsae7TkF3+WWEUPTFTu
QwWsSSVSbWuTh4BzFaDbang5Wbdpflx4RvPPgvmABfQ7inWZCwR0Xe77QkiNwr7d
UeLDurTTSRMws/VBPfrKLGSxj41eq8bpneFHkSG2L6DTm04psVmdBXL1SkuQfwVH
/ktQLZx8gT6EYw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 14:52:21 2026 by rpki-client