Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          5RHdzOdrCS1cyU2SHA5jPSRSI9re/NtFm8lxm4g8PDE=
Subject key identifier:   70:28:78:F4:14:C3:CA:38:86:68:45:09:20:26:4F:CF:14:0D:86:64
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019D265FDC4C655A8BD45678CF7FBCE5D2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0898
Signing time:             Wed 25 Mar 2026 19:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:49 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: 37wEgrNcE5UD5mpoPEZfjG8Z6A55GdUWb7iERTVX9l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:dc:4c:65:5a:8b:d4:56:78:cf:7f:bc:e5:d2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Mar 25 19:01:49 2026 GMT
            Not After : Mar 26 19:01:49 2026 GMT
        Subject: CN=702878f414c3ca388668450920264fcf140d8664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:be:a2:3f:17:54:9d:1e:9a:67:81:86:b7:
                    6e:6b:8e:77:6c:0e:69:ab:1b:8d:2f:25:ac:51:3d:
                    e6:11:97:75:d1:7f:0c:e8:39:06:d4:4c:ec:9c:c3:
                    6b:5b:bb:62:4f:a9:ad:fb:29:bb:c6:67:70:a6:d8:
                    2c:24:83:72:e5:3a:ce:61:d4:66:2d:17:f3:bb:6c:
                    66:f4:36:06:24:20:c8:f5:40:ce:5a:0f:f0:7f:14:
                    e7:a1:d4:02:1c:e3:29:9a:5a:cc:bc:68:a4:36:6c:
                    75:c3:b9:55:41:04:a4:a6:49:23:d9:fc:f8:5c:25:
                    e7:49:94:2f:9f:e0:fb:33:2c:60:58:ae:65:7a:2c:
                    0a:a8:0a:14:18:b8:74:69:97:4c:a9:d1:4a:1b:32:
                    96:f3:0b:da:09:0c:bc:67:fc:99:9c:3e:4b:65:a7:
                    93:f8:fa:59:43:a9:cd:bf:da:00:2d:a3:e5:14:ea:
                    99:53:b1:0f:71:9d:42:2d:c3:5b:a2:e1:43:3a:bb:
                    02:8e:7f:08:8a:7c:59:24:29:ef:32:12:54:1d:72:
                    cd:1c:39:01:53:1d:a9:eb:ba:09:b0:8b:7b:78:7d:
                    44:f4:6f:83:ef:29:94:a0:31:e0:9b:62:2c:af:f5:
                    71:2f:ed:7c:a4:ff:86:29:67:79:44:65:3d:ba:61:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:28:78:F4:14:C3:CA:38:86:68:45:09:20:26:4F:CF:14:0D:86:64
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:46:91:6f:8d:e2:7c:19:1a:09:2f:16:76:37:4c:4b:db:
         bd:b9:c9:e8:e2:fe:43:64:4a:cf:0a:b3:b3:fa:27:a4:7d:08:
         3e:27:76:e3:ac:65:c9:d5:e2:79:fe:42:7f:cb:58:90:46:12:
         23:49:54:77:c8:6c:78:bf:06:6d:ed:79:cd:69:c8:8b:9a:9b:
         27:dd:94:00:64:90:5c:05:da:44:63:07:7b:c6:68:e9:bc:c8:
         37:d3:a5:3c:df:9f:72:37:67:8c:c9:ed:ee:8b:69:8c:08:72:
         bf:7b:17:71:30:f0:76:a0:92:63:99:f1:f5:4c:dc:01:31:c2:
         28:85:a4:b2:a2:94:f2:97:6f:f3:be:7d:18:26:67:21:0e:57:
         1d:eb:1f:2d:ff:8f:0f:80:ca:fd:5d:27:ce:05:06:84:1c:58:
         9c:3b:70:1a:19:9d:46:ba:da:2f:81:ae:c4:23:48:8b:e2:53:
         65:cc:85:85:b1:cb:b0:27:26:01:39:cf:45:47:3a:f3:0b:aa:
         4f:a1:9d:f8:0d:c5:2e:82:00:34:3f:2d:1b:47:fe:53:54:38:
         0c:67:2e:92:a8:1f:ab:3d:a7:db:0e:25:a6:bf:2c:26:20:9a:
         f0:b4:9a:fc:af:c5:be:fb:4d:71:a4:f0:9c:9f:da:b9:f1:d9:
         cd:7b:c2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9xMZVqL1FZ4z3+85dKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2ZiNWY1Mjg0N2YyMTcwZTY3ZmNjMjVhZGYwYjVkNjg2
ZmZhZmMwHhcNMjYwMzI1MTkwMTQ5WhcNMjYwMzI2MTkwMTQ5WjAzMTEwLwYDVQQD
Eyg3MDI4NzhmNDE0YzNjYTM4ODY2ODQ1MDkyMDI2NGZjZjE0MGQ4NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN++oj8XVJ0emmeBhrdua453bA5p
qxuNLyWsUT3mEZd10X8M6DkG1EzsnMNrW7tiT6mt+ym7xmdwptgsJINy5TrOYdRm
LRfzu2xm9DYGJCDI9UDOWg/wfxTnodQCHOMpmlrMvGikNmx1w7lVQQSkpkkj2fz4
XCXnSZQvn+D7MyxgWK5leiwKqAoUGLh0aZdMqdFKGzKW8wvaCQy8Z/yZnD5LZaeT
+PpZQ6nNv9oALaPlFOqZU7EPcZ1CLcNbouFDOrsCjn8IinxZJCnvMhJUHXLNHDkB
Ux2p67oJsIt7eH1E9G+D7ymUoDHgm2Isr/VxL+18pP+GKWd5RGU9umE+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAoePQUw8o4hmhFCSAmT88UDYZkMB8GA1UdIwQY
MBaAFI5/tfUoR/IXDmf8wlrfC11ob/r8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTIt
MTYxOGQ1ZWVhYWU4LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTItMTYxOGQ1ZWVhYWU4
LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmglGkW+N
4nwZGgkvFnY3TEvbvbnJ6OL+Q2RKzwqzs/onpH0IPid246xlydXief5Cf8tYkEYS
I0lUd8hseL8Gbe15zWnIi5qbJ92UAGSQXAXaRGMHe8Zo6bzIN9OlPN+fcjdnjMnt
7otpjAhyv3sXcTDwdqCSY5nx9UzcATHCKIWksqKU8pdv8759GCZnIQ5XHesfLf+P
D4DK/V0nzgUGhBxYnDtwGhmdRrraL4GuxCNIi+JTZcyFhbHLsCcmATnPRUc68wuq
T6Gd+A3FLoIAND8tG0f+U1Q4DGcukqgfqz2n2w4lpr8sJiCa8LSa/K/FvvtNcaTw
nJ/aufHZzXvCTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:31 2026 by rpki-client