Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          JglwWLIhQV/VdhBudTRtbUB86MPUZTDPUcFVTKdANIc=
Subject key identifier:   CE:BB:86:B7:0B:B8:92:30:C4:1F:25:68:B1:CF:42:93:AD:47:C0:32
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       019E1E6C0F93C8C013EE0CA9710759FDF5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          09CC
Signing time:             Tue 12 May 2026 23:00:58 +0000
Manifest this update:     Tue 12 May 2026 23:00:58 +0000
Manifest next update:     Wed 13 May 2026 23:00:58 +0000
Files and hashes:         1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
                          2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
                          3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: rtPMji5D71/Z/Sx+2tG/wRRarc6q6/byd0glUO7UBeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:0f:93:c8:c0:13:ee:0c:a9:71:07:59:fd:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: May 12 23:00:58 2026 GMT
            Not After : May 13 23:00:58 2026 GMT
        Subject: CN=cebb86b70bb89230c41f2568b1cf4293ad47c032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:c5:70:38:46:36:35:d0:8f:e3:fd:76:9c:
                    14:1a:ad:34:4a:54:ee:e0:cc:c7:1f:54:e0:9f:82:
                    0e:59:cb:51:c0:33:7b:95:6d:b7:7b:6f:ec:83:93:
                    71:87:b6:3a:60:ad:66:46:6f:e1:af:66:4f:bd:28:
                    b1:23:5e:d7:ab:0c:eb:86:e4:01:7d:78:fc:8f:ef:
                    c0:ed:3d:1d:c9:d2:55:dd:82:01:09:e0:d9:fe:f1:
                    82:5c:8e:d7:73:5b:28:64:4d:af:4c:07:a5:44:c3:
                    97:b6:a2:a6:b6:7a:90:23:38:68:96:00:cf:ba:1c:
                    f2:11:dd:07:c1:e1:9d:7c:a2:b1:73:be:7c:b2:3a:
                    bd:6a:0a:e9:17:b0:2a:3d:0a:b7:42:1d:48:42:54:
                    d8:84:48:68:8c:e2:cd:ef:02:cf:8c:1f:51:70:6b:
                    77:08:b3:c4:61:be:00:28:87:e4:cf:aa:34:e2:9b:
                    4c:df:f7:e9:1a:23:2d:72:23:c9:f4:62:a2:5e:e5:
                    24:1c:42:12:83:15:aa:52:4d:d0:1c:66:a1:6b:02:
                    2f:77:2b:b8:b4:38:85:14:78:b9:b7:61:6d:df:be:
                    a1:25:ab:0e:08:01:79:22:8c:67:18:71:79:29:6b:
                    db:01:06:ea:dc:86:0d:fd:5c:88:16:71:dd:4f:7f:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BB:86:B7:0B:B8:92:30:C4:1F:25:68:B1:CF:42:93:AD:47:C0:32
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:82:54:e2:e4:c6:e7:54:b4:1e:f4:ab:07:46:29:55:05:
         5b:a7:33:59:78:96:33:3d:aa:5a:1d:a2:92:28:23:7e:15:59:
         eb:13:ba:de:b5:96:74:0c:d6:94:81:81:ea:70:02:f2:6f:56:
         1a:e9:98:77:35:d4:a7:6f:ac:31:19:ba:1c:a6:ff:44:e8:55:
         fe:2d:49:76:6b:10:94:f1:4b:35:93:34:29:07:03:c3:d1:cc:
         64:e0:7a:dc:24:ec:4b:99:4f:ea:48:39:91:21:11:14:6f:6c:
         00:9b:04:3c:a6:f7:a4:3d:c7:82:7d:a5:e6:16:16:d5:25:16:
         e3:a1:e2:8a:af:99:4c:1b:12:a2:93:28:49:57:50:9e:bc:e9:
         63:64:91:91:99:20:a4:46:29:dd:ab:53:52:ae:69:b5:01:92:
         a8:5e:26:fb:b9:d3:86:84:8e:f9:c4:b4:f5:13:b7:95:13:2a:
         da:5b:26:64:fa:78:17:59:d1:28:3d:e6:4d:4b:ee:04:51:d4:
         5a:00:98:b7:c0:66:a6:93:69:38:b7:c8:5b:5e:27:28:e8:c2:
         cb:87:de:e6:72:7a:cc:ae:41:1a:04:b1:4d:27:d5:35:59:2a:
         b7:ec:c4:ff:cc:c8:85:59:3d:ca:04:a1:69:52:22:e4:85:15:
         83:c4:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:21 2026 by rpki-client