Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
File:                     jwo9-IOM805fpjnIbdD9WNo5D8o.mft (raw, json)
Hash identifier:          xTbbhirMN1SKEBZPTeM+N8xaXqLdCvw491yQtYvD6Vg=
Subject key identifier:   2E:18:CC:69:BC:84:23:A8:27:06:D3:C4:D3:A7:5B:D1:4E:24:1A:C6
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Certificate issuer:       /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial:       019FA0E12167BEB5B81E1FFE0245849F10AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:02:16 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:16 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:16 +0000
Files and hashes:         1: E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa (hash: SWyR5eHmyCP1QW40YbfgTf5cb8LLIQWxMpE2tBwF6Tc=)
                          2: THWvySghUHmtrptMQRBn5rEysj4.roa (hash: D9lZw9BCfeYu5a1lRT+qhCzudaLFTH5A4DFPYnADY6o=)
                          3: UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa (hash: uFaGUNwRr3rUdcztpsTcVQC4D2nmfv7IJ6nyqJNEfF8=)
                          4: jwo9-IOM805fpjnIbdD9WNo5D8o.crl (hash: i62gqiwdBsgAx9xZBP0jB4RuBnJYOVIkYboAZ6wRnjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:21:67:be:b5:b8:1e:1f:fe:02:45:84:9f:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
        Validity
            Not Before: Jul 27 00:02:16 2026 GMT
            Not After : Jul 28 00:02:16 2026 GMT
        Subject: CN=2e18cc69bc8423a82706d3c4d3a75bd14e241ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:0b:89:5d:13:e6:2a:e0:76:63:55:3b:62:
                    96:c6:8a:a4:03:99:4f:07:39:52:95:41:ee:f3:fe:
                    27:de:7d:36:53:28:14:ac:50:cc:b9:b1:4a:98:e1:
                    ee:94:3b:73:ee:f7:d1:db:46:3f:47:02:36:4d:c4:
                    a7:68:55:46:d4:a8:7e:6d:1b:a1:24:b8:fa:9e:66:
                    6e:68:ef:3d:83:35:69:b7:c7:53:aa:ec:00:b1:1b:
                    23:ad:67:10:62:43:51:e7:5f:c2:dc:4f:e3:77:bd:
                    a3:d0:bd:87:56:55:86:d7:a8:3f:50:41:b1:53:19:
                    c3:ae:22:fd:f2:5e:46:ad:b5:70:bc:89:ba:9b:5b:
                    2d:ef:e0:9a:fa:dc:17:66:06:c9:3a:c2:c4:2c:78:
                    62:66:05:83:b3:1c:ca:b3:89:a3:04:03:e8:de:d8:
                    74:96:43:47:01:fc:4d:62:a6:14:cf:4e:44:87:44:
                    2e:4a:24:45:88:db:77:88:e3:32:2e:8d:81:63:7f:
                    35:c4:26:6e:fe:2e:28:26:10:18:b6:48:0e:8f:b2:
                    b6:d0:f1:a5:e1:6e:b4:5f:f4:13:0d:75:c8:75:fc:
                    8c:dd:7b:92:00:d2:80:bf:c0:b3:7a:74:b7:5e:00:
                    bf:fd:a6:5c:7b:a2:0e:30:2e:bc:c2:a6:c6:5b:5e:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:18:CC:69:BC:84:23:A8:27:06:D3:C4:D3:A7:5B:D1:4E:24:1A:C6
            X509v3 Authority Key Identifier:
                keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:7f:eb:22:df:11:73:57:93:90:f1:f4:c4:14:98:2a:d3:
         e8:f8:df:e7:d0:cb:94:ab:1a:49:64:9a:79:65:72:2c:a8:ab:
         f3:ab:a9:bc:e9:2e:2b:36:5f:64:e2:0d:10:85:b9:c1:18:a8:
         9c:15:64:ff:ad:cd:27:e6:cc:11:5d:70:d6:64:4f:d2:09:c6:
         43:ce:ee:73:5f:8b:ef:ee:4e:de:97:8a:16:6b:40:ca:9a:ea:
         6a:d7:f1:7f:c4:d2:b0:7a:51:2a:ec:0d:e7:b0:ed:62:65:d7:
         4d:fa:21:3a:31:66:d7:53:a9:d1:67:44:7e:14:57:0f:82:9b:
         66:8e:39:8b:33:f8:b7:0a:00:79:42:43:48:c1:82:56:02:0b:
         69:da:f5:3b:f6:5f:80:c7:39:43:02:e6:34:86:8a:d0:36:41:
         bd:4d:8e:8c:d5:b7:86:de:38:bb:5a:8f:5b:9d:bf:bd:9c:c1:
         9f:3d:1c:e6:21:57:17:c2:f1:99:0d:eb:73:91:47:52:6d:e3:
         11:a9:3c:ed:20:cb:c1:ed:8a:a1:f1:ad:34:16:67:57:dd:b2:
         69:6e:6c:ca:fa:4d:9e:25:ce:cc:0b:b6:99:e6:09:c3:19:04:
         ff:84:3e:01:0c:5d:a2:d7:39:70:69:0b:dd:e5:66:60:6f:ac:
         2a:64:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:30 2026 by rpki-client