Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File:                     js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier:          BNoboW94acKhH6IAPlOCsmLgx+UwrDmqXFB+DQylFls=
Subject key identifier:   B1:D2:71:07:2D:B3:E0:3F:63:B6:C0:E9:5E:7C:D3:52:36:CD:0A:4B
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       019F37186175418781629926B461109F0967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number:          0BD6
Signing time:             Mon 06 Jul 2026 11:02:52 +0000
Manifest this update:     Mon 06 Jul 2026 11:02:52 +0000
Manifest next update:     Tue 07 Jul 2026 11:02:52 +0000
Files and hashes:         1: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (hash: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=)
                          2: LAWT8-8DrVGXo-g5H4GZO3z7fS8.roa (hash: Na6k/8EGssv/5DxPGxpYhkk2M4Z1QcQ+K49dXTrHKUI=)
                          3: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (hash: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y=)
                          4: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: mtopawMBkITzRR3qoyOuh3m0naRnawGXXkIOs1kJfeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 11:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:18:61:75:41:87:81:62:99:26:b4:61:10:9f:09:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Jul  6 11:02:52 2026 GMT
            Not After : Jul  7 11:02:52 2026 GMT
        Subject: CN=b1d271072db3e03f63b6c0e95e7cd35236cd0a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:b7:ed:70:58:83:1a:e0:39:e0:a9:7e:b2:
                    ea:96:c2:1e:3b:d7:b1:2f:87:4c:69:87:4e:7f:f1:
                    1f:27:a6:6e:aa:60:93:1f:64:f0:95:b0:2e:ae:e9:
                    a1:9f:e0:01:f5:b8:34:9f:76:52:c0:b6:23:da:80:
                    99:a1:fe:b4:88:28:67:92:31:83:bd:1a:2f:8d:d1:
                    29:71:bf:ab:51:48:21:a3:60:c9:d8:3b:74:76:97:
                    52:7d:75:a1:6b:6c:a2:c9:71:c4:eb:93:e1:5d:13:
                    9f:7f:5c:7b:ef:95:60:8e:dc:89:9e:34:1d:0d:3e:
                    3b:8f:a6:d1:58:c2:65:28:eb:97:72:63:15:19:a6:
                    7c:ce:84:09:cc:a2:5e:69:6f:e8:59:40:96:1d:48:
                    41:8e:1e:9e:68:70:8b:02:ed:89:f5:19:3b:f1:8c:
                    ee:37:68:37:aa:5e:e0:2c:78:4c:65:37:4e:4a:d1:
                    29:2a:1d:f8:a5:70:e6:96:26:a4:3e:81:fa:3d:c1:
                    2b:ba:e2:c4:10:aa:de:ff:a5:40:66:74:57:10:bf:
                    d0:a2:97:d5:3c:d0:7a:a6:64:bf:6e:24:75:6b:55:
                    49:45:94:ba:99:fe:3e:b6:d5:eb:08:58:d0:09:23:
                    03:30:4c:77:67:99:3d:53:91:20:03:7b:8c:af:33:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:71:07:2D:B3:E0:3F:63:B6:C0:E9:5E:7C:D3:52:36:CD:0A:4B
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:1a:b7:26:2a:0c:54:9f:23:07:f5:07:f4:a4:a5:40:dc:
         a4:f6:08:b5:86:a7:ff:cf:dd:b6:e0:93:98:6b:ba:43:34:76:
         0d:fb:c1:c0:83:8c:8e:d8:a9:e6:62:02:1a:1b:ab:4d:76:63:
         31:20:ce:eb:1f:17:67:2c:84:0b:c5:82:4b:32:1c:bc:68:b1:
         db:d8:d2:70:b3:02:24:f0:ed:19:f4:a2:a4:c1:12:af:e5:9c:
         27:ce:57:41:84:c7:73:98:ab:fc:4f:76:4e:2b:3b:ed:02:14:
         5c:27:e8:02:82:c5:42:74:9f:04:54:25:c0:7f:8c:c9:43:16:
         b7:32:a9:42:87:0d:ca:5c:d4:33:3c:46:ed:a6:5d:3d:e3:9e:
         3c:50:09:57:f7:6a:ad:ae:43:1b:ed:9f:69:4a:b4:a8:70:64:
         86:fe:19:b3:02:3b:3a:69:44:76:39:75:58:61:57:8f:37:f0:
         43:04:06:12:bf:4c:ef:ea:fd:32:44:cb:42:b7:c0:dd:bc:b4:
         2d:33:4b:17:f7:a5:94:d3:e9:39:c7:57:e2:58:af:7d:25:dd:
         b1:af:88:9e:09:3f:cd:08:82:66:c5:62:fe:34:7c:81:e6:c7:
         52:0d:9b:fa:05:ea:7a:c3:b0:66:d5:7f:a7:23:74:a8:c9:e9:
         e3:33:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:13:27 2026 by rpki-client