Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File:                     jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier:          go2LKegtxSwizE9zMzgY3TiWomFTCQb0SHrXi33wSMg=
Subject key identifier:   62:DC:47:E3:36:E5:6F:FD:FE:5A:31:53:64:39:2F:AB:3D:05:96:B3
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer:       /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial:       01A1DE39CD06BDC48A6789E8489FD64F4377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number:          13B7
Signing time:             Sun 15 Nov 2026 08:01:32 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:32 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:32 +0000
Files and hashes:         1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=)
                          2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: B/fgiNcLeO+R0IhLa3qrtiCc+qJb0JPvmbsKYcVIpTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:cd:06:bd:c4:8a:67:89:e8:48:9f:d6:4f:43:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
        Validity
            Not Before: Nov 15 08:01:32 2026 GMT
            Not After : Nov 16 08:01:32 2026 GMT
        Subject: CN=62dc47e336e56ffdfe5a315364392fab3d0596b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:2e:fb:fa:6a:c1:54:93:24:95:67:ee:19:
                    c4:07:55:89:b9:7b:ec:ef:14:29:5a:7f:a6:5a:ea:
                    41:6b:16:4b:fe:2b:40:da:47:f9:e4:53:03:dd:73:
                    92:2d:b6:ac:9c:5f:69:9d:28:b1:9b:77:58:c7:da:
                    a9:5f:a5:e9:54:29:df:13:c6:0a:75:de:29:f3:71:
                    54:97:12:0b:45:cf:e5:e2:82:73:82:1f:e7:08:4b:
                    8a:16:65:68:17:99:d8:55:5f:1d:46:c8:03:db:ff:
                    e3:93:fa:25:ed:b5:81:29:a7:ac:6c:22:e4:07:30:
                    54:29:86:96:47:e7:a8:d7:52:a7:48:ca:f7:4d:c1:
                    e9:2c:5c:b0:80:be:9e:94:e1:4c:4e:ea:32:60:3d:
                    d9:72:71:52:83:24:58:d7:11:4c:ac:0f:b7:99:1c:
                    db:d4:fd:00:c8:cf:b7:3b:b7:1e:d2:08:cb:18:de:
                    c6:57:ff:a0:5a:cc:4e:43:54:9d:84:2f:45:3a:27:
                    e7:62:8c:3e:00:9b:e4:e9:35:14:2b:01:5a:57:dc:
                    f2:9e:f6:7b:32:59:bd:30:ca:7f:ab:88:dd:55:c1:
                    2d:f0:f7:19:b6:4b:07:73:e6:43:5b:9a:a8:b3:86:
                    5b:a9:15:6f:0d:9b:21:6b:e8:b1:08:1b:08:08:52:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:47:E3:36:E5:6F:FD:FE:5A:31:53:64:39:2F:AB:3D:05:96:B3
            X509v3 Authority Key Identifier:
                keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:4e:e9:16:6f:a3:5e:b4:5d:0d:97:0d:a8:98:b6:8b:fa:
         7b:b2:2a:76:e2:98:59:3b:e5:60:99:1b:4a:49:49:b1:ad:b4:
         ba:31:62:7e:e3:0c:4e:95:11:69:54:86:70:3b:08:83:5a:38:
         8f:7d:5e:ab:12:43:4d:bb:d4:3c:a4:61:a4:33:cf:76:c1:9d:
         2e:f6:5d:13:18:c0:ef:c1:e3:eb:cd:ec:fe:dd:8f:43:66:5d:
         f5:10:d6:21:d3:a8:2d:da:39:39:60:72:19:f0:5a:ff:60:8f:
         04:3d:6e:4f:0e:76:b1:93:9f:d8:6f:fe:23:d2:4b:c6:76:f8:
         9b:e4:02:2d:21:f8:a8:ae:e8:32:c4:66:4c:9e:f6:fb:fe:52:
         e4:72:40:13:32:57:f1:72:24:7f:38:89:97:b4:88:ac:98:65:
         65:99:af:c9:13:b8:90:a1:d9:10:fe:93:e6:39:cd:ac:76:98:
         01:ca:32:5c:12:44:9f:4b:64:b2:ca:ce:85:7b:c7:d2:fe:46:
         1b:b2:5f:7d:06:28:a8:61:c4:42:1b:4b:f4:2d:2f:4a:4e:a8:
         18:77:96:3a:3a:01:31:7c:49:e2:a5:12:37:9a:60:0f:e8:1a:
         ac:42:18:87:44:7f:aa:66:26:c7:9a:ff:a2:41:c5:dd:90:67:
         e9:14:eb:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOc0GvcSKZ4noSJ/WT0N3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjYxMTE1MDgwMTMyWhcNMjYxMTE2MDgwMTMyWjAzMTEwLwYDVQQD
Eyg2MmRjNDdlMzM2ZTU2ZmZkZmU1YTMxNTM2NDM5MmZhYjNkMDU5NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAku+/pqwVSTJJVn7hnEB1WJuXvs
7xQpWn+mWupBaxZL/itA2kf55FMD3XOSLbasnF9pnSixm3dYx9qpX6XpVCnfE8YK
dd4p83FUlxILRc/l4oJzgh/nCEuKFmVoF5nYVV8dRsgD2//jk/ol7bWBKaesbCLk
BzBUKYaWR+eo11KnSMr3TcHpLFywgL6elOFMTuoyYD3ZcnFSgyRY1xFMrA+3mRzb
1P0AyM+3O7ce0gjLGN7GV/+gWsxOQ1SdhC9FOifnYow+AJvk6TUUKwFaV9zynvZ7
Mlm9MMp/q4jdVcEt8PcZtksHc+ZDW5qos4ZbqRVvDZsha+ixCBsICFKAVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLcR+M25W/9/loxU2Q5L6s9BZazMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9BO6RZv
o160XQ2XDaiYtov6e7IqduKYWTvlYJkbSklJsa20ujFifuMMTpURaVSGcDsIg1o4
j31eqxJDTbvUPKRhpDPPdsGdLvZdExjA78Hj683s/t2PQ2Zd9RDWIdOoLdo5OWBy
GfBa/2CPBD1uTw52sZOf2G/+I9JLxnb4m+QCLSH4qK7oMsRmTJ72+/5S5HJAEzJX
8XIkfziJl7SIrJhlZZmvyRO4kKHZEP6T5jnNrHaYAcoyXBJEn0tkssrOhXvH0v5G
G7JffQYoqGHEQhtL9C0vSk6oGHeWOjoBMXxJ4qUSN5pgD+garEIYh0R/qmYmx5r/
okHF3ZBn6RTreA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:15:52 2026 by rpki-client