Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          PoTAEfn3Ygj8GEIdsqLqPFYqs8VWh/UCH0Xo8Wzxvk4=
Subject key identifier:   B4:B6:16:CA:8F:D6:EE:ED:18:15:8E:B1:B9:3F:9F:49:E3:01:7E:6B
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019DA6B048A04EB6D6FBAEB031F4937E175A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0F20
Signing time:             Sun 19 Apr 2026 17:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 17:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 17:01:03 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: DawgmbF4zRjsfVe4a4FzN8y0mQA.roa (hash: afn5hxUejct66tT0JGmr4cEMo/gnTzzdfUoke9AjNOU=)
                          3: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          4: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: WwgYzNM+FVXUG+axYRArlFipG05l5/ovcgB6KiAq7Ik=)
                          5: aEOGpbTLeZeKtP10UdCeuyLhhGg.roa (hash: gFYjAGRRdgqK1jIMXsjbfXy74cazPesmYDJ2bTsi2bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:b0:48:a0:4e:b6:d6:fb:ae:b0:31:f4:93:7e:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Apr 19 17:01:03 2026 GMT
            Not After : Apr 20 17:01:03 2026 GMT
        Subject: CN=b4b616ca8fd6eeed18158eb1b93f9f49e3017e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:b1:18:ab:3b:8b:f6:a6:a9:71:59:e3:67:
                    19:82:5b:98:1e:9f:56:19:70:0e:1b:71:7c:2d:3e:
                    15:73:4b:56:4a:c2:91:00:f5:c3:21:80:4e:a6:43:
                    1b:37:54:87:a1:32:26:b2:aa:e1:db:51:0f:ee:bc:
                    44:e4:71:23:f0:08:80:c5:e5:8d:64:2a:db:d4:1f:
                    d5:20:a6:d4:b9:f5:14:25:8c:0c:b4:d1:7c:10:a7:
                    5d:9a:ae:45:a2:3a:18:36:64:c4:af:ec:ca:fd:c3:
                    e6:c0:85:f2:8c:ac:22:58:96:1b:0b:43:d1:c9:06:
                    cb:57:4d:d6:5a:aa:91:bb:6e:80:bb:c5:5a:2d:68:
                    2a:67:4b:41:93:5f:e0:3e:cd:01:13:92:e0:c5:03:
                    15:d7:e4:84:a9:42:5a:84:f7:ab:05:6b:1c:66:48:
                    1f:cf:91:02:8f:91:26:d1:41:68:a6:b8:89:8a:01:
                    72:1c:11:92:b5:62:68:96:83:7e:6e:e1:33:89:74:
                    2e:32:70:6b:e4:4d:8a:4c:5b:fc:a2:6c:dc:1e:d4:
                    63:7b:7b:b3:34:7c:8d:a4:be:77:78:44:6e:c9:a4:
                    5d:1b:90:15:76:6e:72:65:67:2a:dc:29:46:dd:4d:
                    9d:c6:31:a8:e3:1e:8d:98:eb:7d:19:31:e9:35:d6:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B6:16:CA:8F:D6:EE:ED:18:15:8E:B1:B9:3F:9F:49:E3:01:7E:6B
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:00:75:c1:01:2d:b6:12:40:19:69:22:4f:52:c0:53:1f:8b:
         e1:53:61:22:45:d5:a6:b1:45:11:a5:5d:d2:50:23:06:9a:e8:
         ca:27:f4:6d:d7:7e:aa:66:48:54:d2:27:64:c6:63:e3:d3:15:
         4d:7f:08:d8:35:7f:ac:fe:7a:93:f4:c7:19:b1:6d:5f:50:9b:
         9d:ed:d2:71:9a:6f:f6:1c:a5:bf:79:d3:80:7c:9c:ff:18:40:
         7f:70:c8:33:39:a8:29:1b:93:f3:18:b2:36:b5:fe:97:08:81:
         74:53:33:70:16:cd:4b:79:b5:b9:ad:f7:35:14:7d:61:c1:c7:
         ab:9a:61:07:ee:bb:63:74:d6:b0:10:c2:11:23:52:dd:1b:e2:
         9d:4f:ee:2f:ca:45:a0:d2:58:09:dd:fb:c5:5d:ea:7b:c8:88:
         0b:a1:8e:24:11:42:18:05:4e:8a:8b:26:2c:e2:75:7b:63:9a:
         5b:9d:9e:8a:f1:79:17:96:de:8b:73:3d:14:83:4e:d7:e5:ec:
         16:04:df:34:90:c5:b2:cb:46:7e:0f:d9:97:c0:55:a7:0b:81:
         50:2a:d1:a6:5e:c7:9e:e4:8b:aa:7f:cb:88:94:8e:dc:f9:d6:
         6b:d7:5f:61:57:3e:34:83:f7:bd:f2:0e:b0:e6:fe:16:87:ca:
         b1:31:61:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2msEigTrbW+66wMfSTfhdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjYwNDE5MTcwMTAzWhcNMjYwNDIwMTcwMTAzWjAzMTEwLwYDVQQD
EyhiNGI2MTZjYThmZDZlZWVkMTgxNThlYjFiOTNmOWY0OWUzMDE3ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AKxGKs7i/amqXFZ42cZgluYHp9W
GXAOG3F8LT4Vc0tWSsKRAPXDIYBOpkMbN1SHoTImsqrh21EP7rxE5HEj8AiAxeWN
ZCrb1B/VIKbUufUUJYwMtNF8EKddmq5FojoYNmTEr+zK/cPmwIXyjKwiWJYbC0PR
yQbLV03WWqqRu26Au8VaLWgqZ0tBk1/gPs0BE5LgxQMV1+SEqUJahPerBWscZkgf
z5ECj5Em0UFopriJigFyHBGStWJoloN+buEziXQuMnBr5E2KTFv8omzcHtRje3uz
NHyNpL53eERuyaRdG5AVdm5yZWcq3ClG3U2dxjGo4x6NmOt9GTHpNdY12QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS2FsqP1u7tGBWOsbk/n0njAX5rMB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAB1wQEt
thJAGWkiT1LAUx+L4VNhIkXVprFFEaVd0lAjBproyif0bdd+qmZIVNInZMZj49MV
TX8I2DV/rP56k/THGbFtX1Cbne3ScZpv9hylv3nTgHyc/xhAf3DIMzmoKRuT8xiy
NrX+lwiBdFMzcBbNS3m1ua33NRR9YcHHq5phB+67Y3TWsBDCESNS3RvinU/uL8pF
oNJYCd37xV3qe8iIC6GOJBFCGAVOiosmLOJ1e2OaW52eivF5F5bei3M9FINO1+Xs
FgTfNJDFsstGfg/Zl8BVpwuBUCrRpl7HnuSLqn/LiJSO3PnWa9dfYVc+NIP3vfIO
sOb+FofKsTFhEw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:29:41 2026 by rpki-client