Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          NjWT+H+0lZqzBZNXTIUxlIvFN5Z0LnPxmIUxZE59WmI=
Subject key identifier:   F8:C2:58:46:E7:02:E0:EF:2A:75:E3:CF:7B:95:BD:B8:38:06:DF:8A
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019D29293AC8E0490E7F919588FFD7B3A69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0EDF
Signing time:             Thu 26 Mar 2026 08:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:01 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: DawgmbF4zRjsfVe4a4FzN8y0mQA.roa (hash: afn5hxUejct66tT0JGmr4cEMo/gnTzzdfUoke9AjNOU=)
                          3: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (hash: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=)
                          4: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: rOwOfHydM4J+xnVg/OoS7bcDhLTVPeAJyId+yXQg+T8=)
                          5: aEOGpbTLeZeKtP10UdCeuyLhhGg.roa (hash: gFYjAGRRdgqK1jIMXsjbfXy74cazPesmYDJ2bTsi2bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:3a:c8:e0:49:0e:7f:91:95:88:ff:d7:b3:a6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Mar 26 08:01:01 2026 GMT
            Not After : Mar 27 08:01:01 2026 GMT
        Subject: CN=f8c25846e702e0ef2a75e3cf7b95bdb83806df8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:6b:4d:57:08:f2:20:10:fc:d8:c2:b2:f0:
                    6b:5a:fc:24:31:10:69:79:9f:1f:db:6c:43:dd:1e:
                    55:af:54:67:94:34:77:5a:be:1a:05:6a:a9:f9:cd:
                    6a:84:0e:4d:b4:ed:da:d6:ea:22:ba:fe:a3:9d:e8:
                    a4:92:7b:0e:2b:75:34:7a:7e:c3:ba:d2:a0:97:b7:
                    48:c2:b7:1e:f0:aa:99:07:1e:07:ec:3c:b9:5e:19:
                    89:29:60:6c:f9:96:2a:4c:f9:cf:e8:ac:f4:10:72:
                    15:bc:c8:24:56:62:8b:45:f6:60:ca:55:3b:b5:ef:
                    97:da:69:ea:92:74:bd:61:bd:50:5c:08:a7:09:02:
                    57:f3:b9:f3:9d:6f:9d:99:2f:05:1d:f9:32:db:85:
                    fe:38:9a:7c:4a:8a:fb:05:ac:67:d8:12:ca:60:2b:
                    39:1d:65:a6:24:45:64:ce:d3:3d:e0:d6:e5:10:34:
                    6f:cc:00:14:82:55:45:87:14:fd:f6:c7:e4:06:08:
                    fd:49:28:c3:cf:74:bb:55:e9:3a:67:ab:f6:57:2e:
                    18:cd:ad:fe:9b:91:bd:88:09:ca:06:1c:8f:be:17:
                    85:89:86:57:24:ec:0b:f9:eb:ca:78:8e:7d:c8:eb:
                    54:ba:4e:d2:ad:f2:39:a1:e0:11:f8:d9:1d:31:d7:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C2:58:46:E7:02:E0:EF:2A:75:E3:CF:7B:95:BD:B8:38:06:DF:8A
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:ad:3c:4f:00:89:35:bb:87:93:67:5a:62:99:30:86:07:
         bc:b4:76:cb:a1:ca:f7:89:5e:17:69:f3:3a:7c:d8:06:00:52:
         53:79:0f:9f:bf:32:dd:6a:5b:8a:c2:45:72:90:d6:ac:4c:fe:
         03:4b:4a:42:a7:b0:f5:e1:c6:46:1e:9c:33:d0:25:17:f6:c5:
         8d:90:aa:f9:4c:13:22:35:83:83:70:e4:f9:8a:4d:59:08:ea:
         16:69:80:6d:b5:2d:85:07:f6:96:33:25:c6:01:48:e3:0c:50:
         29:59:1f:c3:c6:4f:23:68:6a:f9:ee:4a:32:53:97:f5:b7:cb:
         ac:19:40:21:1f:94:64:00:d7:36:8c:d4:a8:77:ab:0a:bb:91:
         1c:dc:1a:c1:5f:13:fa:a6:be:94:37:dc:a8:35:f3:29:03:a5:
         9c:4e:70:2e:8f:2b:4c:f0:9a:4c:c5:02:60:fd:b1:d2:c0:8b:
         7b:5d:af:89:9d:fb:e4:78:75:92:ea:61:da:fc:cd:1a:20:85:
         96:da:2f:38:4c:57:61:6c:dd:80:aa:05:14:4d:c2:40:26:8c:
         c0:fc:27:68:ab:48:e2:ba:4b:d4:36:9d:2e:f9:6f:7c:02:44:
         77:93:da:27:13:68:86:21:d2:44:45:79:71:3a:60:be:7f:22:
         ca:bc:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:36 2026 by rpki-client