Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          fr31yTKOxL34++q0fuwSECKZwwFKlGFcKOE88bilapk=
Subject key identifier:   CD:0D:2C:90:67:C6:90:8B:20:93:98:E7:DD:DD:80:0F:EC:F0:9C:9F
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019F90C7ED804E642B08C23D8B114D326331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0AA6
Signing time:             Thu 23 Jul 2026 21:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:49 +0000
Files and hashes:         1: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          2: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: XyP7N/cUO+PNAFmvC8qPe6SZUSngtHIOzbmVB5hb3mI=)
                          4: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          5: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          6: gEzZUlWbAQcOnetalzOMXX46Me4.roa (hash: nbjAHqL/ZXv7+M3ySmn6VCPxArgAI/byxBtrbJxgrpo=)
                          7: q8SJpLXKAHXaFMNj32h3gHAkuhI.roa (hash: pnGsg6QVulEcKBptf5RFCwNqFUz6hr2u8dhV7GIOEe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:ed:80:4e:64:2b:08:c2:3d:8b:11:4d:32:63:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Jul 23 21:00:49 2026 GMT
            Not After : Jul 24 21:00:49 2026 GMT
        Subject: CN=cd0d2c9067c6908b209398e7dddd800fecf09c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:98:90:18:a4:82:e6:d1:2d:a7:3d:4f:45:
                    20:92:30:2b:6f:95:a7:7a:ff:fb:27:b5:05:f5:f3:
                    a4:84:25:8c:44:2d:88:a6:5f:20:7a:bf:10:ea:d9:
                    7d:f8:f8:3c:e1:dd:e3:f4:7c:f7:04:77:7b:76:77:
                    b5:da:a5:47:b0:97:a3:a7:92:62:f2:87:45:9e:67:
                    18:d0:87:49:5f:79:5c:02:89:9c:28:60:37:e8:be:
                    74:93:ef:a8:f3:6e:3a:4e:b4:4d:c6:9b:5e:54:16:
                    63:1f:36:88:9d:9a:2c:b7:d0:51:38:2e:3d:a1:56:
                    4c:ce:ac:6b:0e:a8:c9:a2:ee:79:5a:71:46:09:2d:
                    ed:64:99:11:43:80:54:b1:92:39:dc:a8:e2:06:50:
                    0e:00:e7:8a:4c:0f:32:9f:4d:07:4e:dc:c5:30:56:
                    96:d3:a4:3d:ab:98:b8:88:96:49:ba:28:52:99:1d:
                    f8:92:17:2b:dc:14:3c:e1:10:5c:bf:ae:06:5f:46:
                    8a:a5:cf:a9:14:bd:11:c9:22:9c:10:e9:95:2c:b9:
                    b7:a2:94:3d:41:aa:7d:a3:89:8f:e6:b4:a1:be:74:
                    2e:00:1c:22:37:1a:d1:03:71:87:4b:91:a6:6e:73:
                    ad:37:61:b2:d2:60:b9:f4:17:01:47:ce:7a:b5:6e:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0D:2C:90:67:C6:90:8B:20:93:98:E7:DD:DD:80:0F:EC:F0:9C:9F
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:68:47:9e:8a:26:7a:28:d6:22:91:e2:a7:6a:27:5d:6b:6b:
         10:8d:5b:97:49:55:04:f8:c5:55:80:a6:1a:98:ab:b0:ad:69:
         53:70:8c:f3:f0:5c:14:a6:3c:d3:61:90:fe:86:4f:25:54:79:
         de:98:3c:c9:6d:20:0a:27:e0:ca:25:1d:68:ea:2a:29:71:77:
         27:7a:8e:d5:4a:4a:59:9b:b5:14:d4:5c:63:ed:65:c8:b0:ba:
         a3:dc:67:3f:60:f9:61:d1:ed:f8:39:4e:1f:ed:77:eb:b0:61:
         43:5e:6c:14:63:92:44:f7:7a:40:01:09:9d:40:6a:36:58:d0:
         53:46:b3:f7:b4:8f:94:d8:6a:da:9b:7a:ea:d4:bd:77:78:c5:
         c3:7b:3d:9b:95:8f:7e:10:7e:03:4c:3f:95:72:63:36:87:3b:
         11:ce:1d:bc:ea:29:18:be:17:aa:5c:54:df:92:b7:2b:e4:12:
         6a:be:ea:12:23:2d:4b:42:01:a3:c0:38:21:a7:b8:7f:96:35:
         2e:e7:1d:9b:f6:aa:0f:5a:95:9d:7d:69:a2:07:5d:c2:13:a6:
         b9:11:cb:92:f8:5e:0e:01:ff:e1:00:49:8f:43:b2:bc:8b:fa:
         55:c7:79:50:0e:88:3c:2b:c4:b2:52:55:23:d1:f2:24:0c:b9:
         e6:b2:be:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx+2ATmQrCMI9ixFNMmMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm
MDIxOTYwHhcNMjYwNzIzMjEwMDQ5WhcNMjYwNzI0MjEwMDQ5WjAzMTEwLwYDVQQD
EyhjZDBkMmM5MDY3YzY5MDhiMjA5Mzk4ZTdkZGRkODAwZmVjZjA5YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWiYkBikgubRLac9T0UgkjArb5Wn
ev/7J7UF9fOkhCWMRC2Ipl8ger8Q6tl9+Pg84d3j9Hz3BHd7dne12qVHsJejp5Ji
8odFnmcY0IdJX3lcAomcKGA36L50k++o8246TrRNxpteVBZjHzaInZost9BROC49
oVZMzqxrDqjJou55WnFGCS3tZJkRQ4BUsZI53KjiBlAOAOeKTA8yn00HTtzFMFaW
06Q9q5i4iJZJuihSmR34khcr3BQ84RBcv64GX0aKpc+pFL0RySKcEOmVLLm3opQ9
Qap9o4mP5rShvnQuABwiNxrRA3GHS5GmbnOtN2Gy0mC59BcBR856tW59gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0NLJBnxpCLIJOY593dgA/s8JyfMB8GA1UdIwQY
MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt
NTIwMWEyM2Q3YTQ5LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5
LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2hHnoom
eijWIpHip2onXWtrEI1bl0lVBPjFVYCmGpirsK1pU3CM8/BcFKY802GQ/oZPJVR5
3pg8yW0gCifgyiUdaOoqKXF3J3qO1UpKWZu1FNRcY+1lyLC6o9xnP2D5YdHt+DlO
H+1367BhQ15sFGOSRPd6QAEJnUBqNljQU0az97SPlNhq2pt66tS9d3jFw3s9m5WP
fhB+A0w/lXJjNoc7Ec4dvOopGL4XqlxU35K3K+QSar7qEiMtS0IBo8A4Iae4f5Y1
Lucdm/aqD1qVnX1pogddwhOmuRHLkvheDgH/4QBJj0OyvIv6Vcd5UA6IPCvEslJV
I9HyJAy55rK+uw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:17 2026 by rpki-client