Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          MdMRuVjCW/4msLovkBLUjtLwwQ1GLn3JCOB6P0U/ZLk=
Subject key identifier:   01:64:C6:06:26:2F:13:D1:F0:6C:43:7E:B1:7C:A2:BA:BC:7B:B3:C8
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       019D26CD5920394FB3516530F569D0631C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0F96
Signing time:             Wed 25 Mar 2026 21:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:25 +0000
Files and hashes:         1: I9uIHyNAZuZvz077ylfXzs2a2u4.roa (hash: HTHulKVM9Nf7ivuW33GQbC8YIjVpn1m5bDuyHdQbDxM=)
                          2: bAcGH9H1K73FpXSxpyLe2c0iBX8.roa (hash: TpsGeeQA3yklbylho+JTjROwnPYe5ku9NUEkM8M/pMk=)
                          3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: u7+BMqMYzN7tiMqWePKD6oQ+fKxeE5HBluDwdV5wn4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:59:20:39:4f:b3:51:65:30:f5:69:d0:63:1c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Mar 25 21:01:25 2026 GMT
            Not After : Mar 26 21:01:25 2026 GMT
        Subject: CN=0164c606262f13d1f06c437eb17ca2babc7bb3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:16:d0:1a:75:f4:ad:03:89:26:60:78:d2:
                    c9:b0:aa:6d:a2:78:a7:1a:12:3f:7a:53:db:88:29:
                    5c:c6:8d:bf:f0:43:e9:ac:9d:8b:ed:e6:d8:58:d3:
                    c9:f6:e3:c9:d7:98:f4:fe:da:8b:f9:05:8e:8d:c1:
                    80:ca:b6:28:04:47:b4:7c:44:4d:96:ee:8b:4b:da:
                    3d:94:5d:5f:95:cd:f2:34:33:3d:55:fd:f9:8c:6c:
                    80:0a:c3:59:7e:fb:39:14:61:8b:59:af:fb:03:a7:
                    a6:30:a3:46:12:ee:ae:a7:19:a4:46:74:68:ed:68:
                    51:13:62:b1:7f:6c:d6:22:7d:63:e1:60:81:14:d9:
                    25:a3:8f:f2:73:f0:6b:48:ce:8a:5b:0c:76:bc:80:
                    d8:bf:24:ea:7c:48:ef:7a:23:21:1a:03:62:f3:56:
                    cc:d9:1f:10:ea:22:da:45:ba:60:00:6e:15:e8:46:
                    b9:60:25:00:ce:ac:f6:d6:81:78:2e:77:4c:37:4c:
                    9e:fd:3e:46:a9:ca:f6:8f:d4:fc:e5:8c:08:0c:f9:
                    bd:05:7b:50:1d:04:3a:74:51:ec:82:84:5e:86:dc:
                    7d:20:12:a8:1c:ff:4e:4c:47:f1:9e:34:d9:e9:5d:
                    c7:15:ad:7a:70:65:2d:ed:ca:de:da:7b:ca:39:8e:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:C6:06:26:2F:13:D1:F0:6C:43:7E:B1:7C:A2:BA:BC:7B:B3:C8
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:8c:36:34:08:08:a3:06:8d:82:ff:d2:7e:a0:c9:c9:cb:
         a7:17:8a:d4:36:50:55:61:9b:11:b5:a9:48:31:45:68:c7:24:
         7c:59:39:74:84:16:da:f6:2b:e0:81:0c:55:45:b6:11:55:ce:
         ee:17:27:e8:64:d1:17:94:3c:bc:37:cd:f6:d1:31:16:35:d5:
         5e:1d:f3:57:d9:28:11:57:d9:c5:f0:03:e1:4e:8d:37:75:5b:
         d5:f6:be:bf:42:8b:cc:4f:de:db:e5:3d:3c:80:d5:2b:38:68:
         d1:af:2d:7f:98:aa:63:33:b2:a8:4a:e9:cb:94:b9:c8:97:3b:
         1e:9a:4b:32:9b:eb:45:01:60:fe:3e:a4:61:84:11:6a:96:54:
         17:e8:8f:fd:62:3b:c3:ed:c5:7a:ca:09:c9:aa:88:78:32:1b:
         fd:57:4a:b9:c5:b5:c4:79:ee:92:ed:e5:08:65:c0:be:b4:14:
         83:5c:f2:ff:11:1d:1d:d1:e0:91:fe:0a:14:86:63:9d:b9:11:
         09:35:18:d0:99:61:f0:85:ee:0a:0b:5a:66:c7:c4:0a:39:ef:
         dc:ce:66:bd:2c:b6:ee:85:ba:6f:2c:f5:44:96:f2:46:bb:e2:
         ae:40:2f:cf:15:69:83:9f:91:90:a8:93:ec:32:d6:5c:7d:15:
         69:ce:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:09 2026 by rpki-client