Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          4QJSRMcbRhnTQ+oz6qlCtBf3XL2+y35Nae2LuRvZZd8=
Subject key identifier:   9F:A3:45:B6:A5:F8:20:EF:0E:18:9E:01:16:4B:CE:79:53:CA:CF:12
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019D251579FCE77EA0488CC0758782FFAAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          056E
Signing time:             Wed 25 Mar 2026 13:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 13:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 13:00:57 +0000
Files and hashes:         1: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: Z127eAn5x5d11RC5VAVYEvNsCtlxW+orjYl08dQJX2g=)
                          2: nF8yI8NNVENhHdHHvHfxB5fTyr0.roa (hash: AfN6nha/IBNGq2xnGy6mK5P8OpY736OmmEpMEcSaRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:15:79:fc:e7:7e:a0:48:8c:c0:75:87:82:ff:aa:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Mar 25 13:00:57 2026 GMT
            Not After : Mar 26 13:00:57 2026 GMT
        Subject: CN=9fa345b6a5f820ef0e189e01164bce7953cacf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:a5:06:69:39:f3:c4:04:94:c4:ac:99:60:
                    6e:c9:1b:b4:67:a1:40:ed:d2:13:06:2d:da:54:9a:
                    9d:86:4f:40:ec:c6:c9:1b:a4:2c:a2:ed:5d:04:f9:
                    dd:f9:26:8f:f7:88:2a:90:b4:44:7a:49:6a:68:c9:
                    f7:35:bd:79:f7:3e:5b:00:c5:a6:57:c5:78:e7:f9:
                    e6:fe:bc:3f:93:ee:3b:83:4b:1b:a9:b4:c1:8f:e7:
                    98:b2:4b:25:d3:d1:de:33:a7:fa:e4:46:3b:b5:92:
                    e4:3c:10:8f:18:43:87:0a:a1:cb:07:18:5c:0a:7d:
                    61:92:38:34:40:7e:7a:79:84:e4:e1:ca:75:44:67:
                    2f:4c:a4:ec:b9:ca:b9:56:0e:7e:38:12:a7:10:b6:
                    db:2b:1a:05:f1:67:91:77:a0:b0:be:e3:d6:84:16:
                    3e:0c:77:9e:de:99:92:24:35:23:97:64:a9:82:d0:
                    fa:33:ce:6b:c9:8c:65:79:65:da:4d:9b:c0:78:58:
                    3e:ed:21:e9:71:3c:0c:9d:42:c1:ff:89:22:5b:7f:
                    e6:a7:fb:9c:fc:a9:c4:5c:bb:42:d9:aa:e2:94:86:
                    fb:ec:a8:c0:98:5b:f0:2f:9a:89:4d:e6:ca:38:99:
                    53:33:9c:99:82:3e:11:c5:c5:b5:66:77:6b:3c:bd:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:45:B6:A5:F8:20:EF:0E:18:9E:01:16:4B:CE:79:53:CA:CF:12
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:08:27:fd:c9:81:04:cb:33:1a:9b:fd:08:04:b1:88:18:67:
         84:c2:74:ba:1e:15:e2:5f:e5:a9:32:11:57:92:48:a7:ca:f1:
         d4:f9:2f:07:4e:4a:e6:cf:67:ce:26:29:be:47:63:f9:9e:2c:
         30:7d:52:5a:ce:67:55:56:e4:b1:d4:83:8c:95:6b:30:1e:f0:
         e4:20:8d:bd:4f:48:4a:d9:e8:04:eb:fb:e5:9b:0a:a0:c4:eb:
         91:5b:07:b3:9f:cb:21:fb:c2:bb:28:df:1c:f5:c5:f9:32:ef:
         1c:fd:2a:ff:cd:13:19:e2:75:f5:98:b7:97:4c:b1:02:d8:d3:
         dc:f1:97:89:4c:84:aa:ed:07:0a:fc:ac:8c:a2:cd:ba:8a:4c:
         75:dc:7c:58:1f:dc:99:b4:fc:04:13:08:bb:af:fe:ab:92:ea:
         8a:a7:7f:cd:58:8e:2e:6d:e0:60:c1:71:55:13:b8:c0:03:dd:
         b8:43:34:f8:d8:15:89:bd:3b:02:8b:32:79:a3:a9:07:40:90:
         52:77:6d:e9:75:3e:c7:8d:cc:65:fb:95:67:d3:98:b5:f3:f8:
         cf:6c:e3:69:65:e6:34:9a:05:bf:18:d7:c6:6d:d4:3a:09:d0:
         68:1b:e6:48:4c:b5:65:39:57:0c:11:21:36:17:20:04:b2:11:
         d8:64:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:25 2026 by rpki-client