Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          O3WmpRL6JNsr37RZ5hEQ6mn6c7B7Mah50ztFFsfFUb8=
Subject key identifier:   B6:1B:D9:9E:08:FC:70:12:9D:A0:11:8B:64:E2:C2:D2:3C:7C:C1:95
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       019E20C8CAB80AA8A5563F7D4F96F4A58CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          0A9B
Signing time:             Wed 13 May 2026 10:01:30 +0000
Manifest this update:     Wed 13 May 2026 10:01:30 +0000
Manifest next update:     Thu 14 May 2026 10:01:30 +0000
Files and hashes:         1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: gcM0Lg8uCodtwI2TWRMECK7EVxVE4t5oMckZFtZLFig=)
                          2: aOE6ABSZYDrwHqX0GtKP4yVMn4E.roa (hash: hS/lZIFnL6s3O1iQAeU4NIFW/EmeY34qv/wGghzDiNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:ca:b8:0a:a8:a5:56:3f:7d:4f:96:f4:a5:8c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: May 13 10:01:30 2026 GMT
            Not After : May 14 10:01:30 2026 GMT
        Subject: CN=b61bd99e08fc70129da0118b64e2c2d23c7cc195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:03:2f:49:8f:05:db:55:2c:bd:35:a5:92:
                    a7:08:a4:f1:7b:1f:a0:f6:9e:12:fd:7b:41:1f:e0:
                    42:00:5d:ce:39:14:b3:de:e4:fd:b7:c8:63:e2:8c:
                    32:a7:b9:45:37:4c:65:1e:e6:93:d6:f5:da:f8:f2:
                    f8:16:47:4c:c9:29:27:cc:1a:e9:ce:56:96:13:a9:
                    58:51:f1:e3:6d:bc:58:67:29:00:e2:24:aa:80:f8:
                    aa:69:1d:83:a4:6f:bd:52:a0:fe:7d:14:90:75:73:
                    93:40:db:ed:9d:b6:fc:57:b2:b7:30:58:09:fc:6c:
                    5c:d6:07:ff:b2:85:7f:61:ff:0b:3e:1d:90:c0:27:
                    fb:e5:9b:42:46:8a:d4:80:00:72:10:80:76:45:4f:
                    33:02:3e:e3:8c:3a:84:2e:4a:0e:5f:9a:8a:20:94:
                    79:cb:3d:32:ae:17:31:ac:dd:cf:8f:68:a1:ef:93:
                    90:8c:43:47:c9:b9:b7:df:b6:07:c1:bb:bf:42:19:
                    36:88:45:ae:82:08:f1:aa:dc:7d:ab:5b:e8:d8:b9:
                    b6:f1:86:4e:da:d2:1c:e7:d3:97:db:7f:b3:24:75:
                    5f:da:f0:97:54:ce:3e:b0:5b:0e:b2:9d:31:ca:8f:
                    b5:af:4c:80:b5:83:32:ca:92:f6:5e:e2:9e:cc:59:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:D9:9E:08:FC:70:12:9D:A0:11:8B:64:E2:C2:D2:3C:7C:C1:95
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:07:d2:d7:dc:01:2e:3a:7a:74:80:ac:7b:dd:ba:cf:7d:2d:
         7a:07:be:d0:29:93:f1:31:bb:46:d1:91:e8:15:e8:c0:6c:f1:
         23:96:84:68:98:a7:e5:fc:87:23:aa:37:5d:97:ff:35:16:03:
         b4:29:33:f2:7b:23:6b:f1:bb:ae:d6:7a:40:40:61:2d:6a:af:
         40:f6:9c:b5:b7:47:b6:f4:23:87:0f:50:6a:d6:da:ca:68:f3:
         78:bb:76:e8:47:e2:87:2a:e0:53:6c:28:19:66:38:5d:5c:bd:
         df:97:16:48:4a:45:d4:8a:7a:17:c0:87:75:8a:ef:7e:6d:7c:
         a9:8a:ea:74:6e:23:ac:d7:a2:34:bf:ce:24:82:53:f1:bd:74:
         0b:ac:61:47:56:60:26:95:f5:15:4a:2a:db:28:a1:a5:32:8b:
         ee:9d:4e:7d:5f:4b:1c:67:c9:cc:e1:c0:db:5f:85:49:4d:50:
         77:01:d4:72:1a:aa:be:76:98:e3:d8:33:e4:9d:92:5b:c9:00:
         4f:e7:81:09:91:75:5c:60:08:06:96:bc:3a:91:a1:e0:7f:d7:
         50:b2:fa:1b:38:f7:3e:d0:5a:20:fd:f6:f5:42:07:1a:47:17:
         97:60:a5:90:45:6d:52:96:2d:ca:8b:33:ad:a3:d7:3e:05:1c:
         6a:98:33:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyMq4CqilVj99T5b0pYzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj
MDRkNjcwHhcNMjYwNTEzMTAwMTMwWhcNMjYwNTE0MTAwMTMwWjAzMTEwLwYDVQQD
EyhiNjFiZDk5ZTA4ZmM3MDEyOWRhMDExOGI2NGUyYzJkMjNjN2NjMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutADL0mPBdtVLL01pZKnCKTxex+g
9p4S/XtBH+BCAF3OORSz3uT9t8hj4owyp7lFN0xlHuaT1vXa+PL4FkdMySknzBrp
zlaWE6lYUfHjbbxYZykA4iSqgPiqaR2DpG+9UqD+fRSQdXOTQNvtnbb8V7K3MFgJ
/Gxc1gf/soV/Yf8LPh2QwCf75ZtCRorUgAByEIB2RU8zAj7jjDqELkoOX5qKIJR5
yz0yrhcxrN3Pj2ih75OQjENHybm337YHwbu/Qhk2iEWuggjxqtx9q1vo2Lm28YZO
2tIc59OX23+zJHVf2vCXVM4+sFsOsp0xyo+1r0yAtYMyypL2XuKezFmsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYb2Z4I/HASnaARi2TiwtI8fMGVMB8GA1UdIwQY
MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt
Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj
LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQfS19wB
Ljp6dICse926z30tege+0CmT8TG7RtGR6BXowGzxI5aEaJin5fyHI6o3XZf/NRYD
tCkz8nsja/G7rtZ6QEBhLWqvQPactbdHtvQjhw9QatbaymjzeLt26EfihyrgU2wo
GWY4XVy935cWSEpF1Ip6F8CHdYrvfm18qYrqdG4jrNeiNL/OJIJT8b10C6xhR1Zg
JpX1FUoq2yihpTKL7p1OfV9LHGfJzOHA21+FSU1QdwHUchqqvnaY49gz5J2SW8kA
T+eBCZF1XGAIBpa8OpGh4H/XULL6Gzj3PtBaIP329UIHGkcXl2ClkEVtUpYtyosz
raPXPgUcapgzKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:22:36 2026 by rpki-client