Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          xHPEtCKlePGCkGOjnPKeYZCVgaQ3j+N0ej7Lzby52tc=
Subject key identifier:   50:89:A7:A2:F0:9E:35:6A:67:FF:60:13:FF:97:4E:BA:02:4A:BD:8C
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       019F0D3F7FCB65FDB03F313B4D42D2103C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0E07
Signing time:             Sun 28 Jun 2026 08:01:32 +0000
Manifest this update:     Sun 28 Jun 2026 08:01:32 +0000
Manifest next update:     Mon 29 Jun 2026 08:01:32 +0000
Files and hashes:         1: 1-UQfPeP2Hp2kHg0OiYvIdbub_7g.roa (hash: I98ISNyguLUFVm8aiR0qBsZTLT8A2B3NKke2YTAXtF0=)
                          2: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: /5lvLJCsU6nWckZ3y4Pr54K8armDxovdUAVyDAPxlCI=)
                          4: KJfyUjYhSbcTj4BqhcYlT-NV3k0.roa (hash: PTxZGqD0eutJIRMtp0zEf920MlkzT2rTXHG1ErOVkNE=)
                          5: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
                          6: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0d:3f:7f:cb:65:fd:b0:3f:31:3b:4d:42:d2:10:3c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Jun 28 08:01:32 2026 GMT
            Not After : Jun 29 08:01:32 2026 GMT
        Subject: CN=5089a7a2f09e356a67ff6013ff974eba024abd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:bd:7c:35:be:51:31:2c:54:67:59:40:18:
                    c1:a6:ad:15:b5:b5:2c:cb:80:85:10:b5:e7:d3:11:
                    c3:24:3a:94:ef:59:64:f4:bb:52:65:e1:00:c7:a4:
                    40:2e:93:9f:3c:61:67:27:ff:14:78:f1:61:46:b8:
                    0d:b9:1d:b7:ae:d9:c2:c9:ac:3d:a5:80:c9:f1:8c:
                    ad:ac:8b:38:fe:b1:da:22:f9:e7:7d:93:22:9e:5d:
                    5d:1e:54:14:91:5f:50:43:ec:f6:1d:27:ec:11:93:
                    82:e6:3f:bf:e5:b1:04:eb:8c:c0:a7:ec:87:a9:07:
                    0b:a2:5a:27:8b:3e:ab:90:ba:d2:ef:6b:c3:1c:9b:
                    ca:02:94:fa:45:8c:f5:b8:89:ed:41:ed:24:f5:01:
                    2f:ab:a5:92:76:78:e8:c2:5a:57:90:fc:ad:88:8e:
                    88:77:88:c4:92:8c:c8:8a:2e:33:e2:c1:9c:da:c7:
                    d2:1f:20:a0:71:91:62:71:fa:8c:0d:30:9a:7a:14:
                    80:e2:74:b0:c6:44:d7:71:59:3b:12:77:b4:52:ec:
                    38:b7:9f:32:ef:74:68:49:31:29:88:18:a8:ea:b0:
                    6a:aa:7a:c7:e3:66:be:e3:67:93:2a:92:bc:90:d8:
                    99:ad:4b:57:72:00:71:28:07:ce:82:4d:a5:28:38:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:A7:A2:F0:9E:35:6A:67:FF:60:13:FF:97:4E:BA:02:4A:BD:8C
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d7:12:34:42:62:7e:52:ce:b1:09:e0:18:9c:d7:87:b4:05:
         d1:d0:54:dc:c0:a7:7f:c1:f6:ff:91:04:47:21:78:0a:68:b1:
         df:81:14:c4:f8:9f:ad:7d:01:3d:99:46:cb:e9:56:e8:25:69:
         29:4f:16:03:81:0e:74:81:18:ed:fa:45:83:27:f1:e8:10:d7:
         9a:d4:a8:94:60:9e:05:5a:20:26:ff:66:66:57:c7:67:43:8e:
         93:b8:22:5e:e3:46:7c:40:03:a1:f7:48:a6:d3:09:43:0d:f5:
         38:fd:d7:87:35:e5:81:b1:c7:8d:32:12:20:dc:1e:fc:91:89:
         ff:52:11:a6:00:04:c5:0c:08:42:f0:e4:42:a3:40:32:a0:2c:
         9b:bd:06:dd:c6:40:ff:66:a0:40:05:54:a4:99:2d:52:a3:5d:
         5d:05:39:af:41:37:2f:d2:c6:2b:02:1f:40:5f:12:8a:ec:41:
         b4:df:73:ca:3f:1c:2c:c1:1b:f5:55:b6:9f:3d:b5:f1:b3:89:
         ba:d8:85:78:4a:dd:0f:66:c1:63:40:37:b4:a9:92:52:83:83:
         21:46:96:8b:80:d3:47:36:62:1d:c3:b9:1d:fd:ba:ba:3b:24:
         5a:a3:e6:04:dc:85:6b:69:36:2d:5c:ee:13:30:8c:63:1e:82:
         30:53:33:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8NP3/LZf2wPzE7TULSEDxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjYwNjI4MDgwMTMyWhcNMjYwNjI5MDgwMTMyWjAzMTEwLwYDVQQD
Eyg1MDg5YTdhMmYwOWUzNTZhNjdmZjYwMTNmZjk3NGViYTAyNGFiZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorC9fDW+UTEsVGdZQBjBpq0VtbUs
y4CFELXn0xHDJDqU71lk9LtSZeEAx6RALpOfPGFnJ/8UePFhRrgNuR23rtnCyaw9
pYDJ8YytrIs4/rHaIvnnfZMinl1dHlQUkV9QQ+z2HSfsEZOC5j+/5bEE64zAp+yH
qQcLoloniz6rkLrS72vDHJvKApT6RYz1uIntQe0k9QEvq6WSdnjowlpXkPytiI6I
d4jEkozIii4z4sGc2sfSHyCgcZFicfqMDTCaehSA4nSwxkTXcVk7Ene0Uuw4t58y
73RoSTEpiBio6rBqqnrH42a+42eTKpK8kNiZrUtXcgBxKAfOgk2lKDi0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCJp6LwnjVqZ/9gE/+XTroCSr2MMB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtcSNEJi
flLOsQngGJzXh7QF0dBU3MCnf8H2/5EERyF4Cmix34EUxPifrX0BPZlGy+lW6CVp
KU8WA4EOdIEY7fpFgyfx6BDXmtSolGCeBVogJv9mZlfHZ0OOk7giXuNGfEADofdI
ptMJQw31OP3XhzXlgbHHjTISINwe/JGJ/1IRpgAExQwIQvDkQqNAMqAsm70G3cZA
/2agQAVUpJktUqNdXQU5r0E3L9LGKwIfQF8SiuxBtN9zyj8cLMEb9VW2nz218bOJ
utiFeErdD2bBY0A3tKmSUoODIUaWi4DTRzZiHcO5Hf26ujskWqPmBNyFa2k2LVzu
EzCMYx6CMFMziA==
-----END CERTIFICATE-----
Generated at Sun Jun 28 11:50:44 2026 by rpki-client