Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          AkpRkyZNDYPGtIb2Dr2AzqPX41CWjHuTGWoHwdRmO8U=
Subject key identifier:   95:CB:4A:D8:D1:53:13:9B:8B:74:30:A2:BC:36:6A:6C:EA:76:69:49
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019E1E351977C5A8EF50058011B8FB7BB436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          05F1
Signing time:             Tue 12 May 2026 22:00:56 +0000
Manifest this update:     Tue 12 May 2026 22:00:56 +0000
Manifest next update:     Wed 13 May 2026 22:00:56 +0000
Files and hashes:         1: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: PgpVOe9VF+ynUEKGU5MsC4JlKQAS78heTfyT9qvfW6g=)
                          2: pyRkARiKCkIXPYlPRj_rOTQQ9a4.roa (hash: h2efLu5KonOiNOQgW9a8c8YZcQFNyVf6O72dyiarVWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:19:77:c5:a8:ef:50:05:80:11:b8:fb:7b:b4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: May 12 22:00:56 2026 GMT
            Not After : May 13 22:00:56 2026 GMT
        Subject: CN=95cb4ad8d153139b8b7430a2bc366a6cea766949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:f4:39:07:ea:15:7c:f3:ce:17:de:af:cf:
                    2b:42:fd:07:1f:6b:1a:96:bf:ac:8a:06:05:dc:1b:
                    ea:5a:5b:bf:a5:8c:02:4f:d5:23:59:0e:fd:eb:13:
                    22:36:71:89:78:c3:58:49:be:9a:28:22:19:19:ca:
                    25:8f:b9:19:52:f9:bc:ff:36:3c:42:6e:49:77:26:
                    54:57:c4:f0:9c:30:7f:5e:f5:0c:c2:b4:48:44:a3:
                    63:ac:fb:15:be:57:0e:e5:33:80:81:b8:4c:d3:25:
                    6f:da:94:45:e0:ed:dc:01:4b:9f:36:8e:cc:d4:90:
                    fc:74:d2:1d:29:5b:a8:e7:56:b2:6d:20:80:41:cd:
                    35:8b:91:19:84:8f:fc:64:70:69:98:92:db:02:7b:
                    7d:9d:15:c1:9c:bd:cd:9a:d5:a3:66:14:a8:d8:6f:
                    1e:3f:c9:f5:ac:18:c1:27:2a:be:68:a9:43:03:50:
                    60:0b:5c:e2:cf:af:30:85:f5:30:85:91:58:7d:95:
                    93:ba:20:ec:4a:46:71:35:3b:d8:bf:46:77:39:8a:
                    b3:6f:0a:ca:8c:cd:bb:a5:cf:ba:06:81:1b:5b:b3:
                    b5:de:2f:88:2c:81:3f:a2:2a:c9:bf:ec:c1:e9:10:
                    e2:66:01:79:7d:58:86:d6:61:a5:e2:db:42:2a:8f:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:4A:D8:D1:53:13:9B:8B:74:30:A2:BC:36:6A:6C:EA:76:69:49
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:ee:0b:f5:a8:d6:e2:90:1f:40:0c:1e:54:d1:8c:11:78:
         a2:5c:e1:dd:87:4a:f3:a6:f7:35:c5:dd:36:65:fd:92:6d:6c:
         ed:c2:25:75:3e:82:0c:18:83:7d:ca:50:2a:c3:55:5a:a0:15:
         53:68:a6:89:53:ad:28:47:47:1a:6b:d5:e4:45:c8:4b:91:a2:
         ed:f0:40:e1:dd:dc:e1:36:27:f5:28:78:93:58:a5:a8:27:02:
         20:5d:89:19:fe:98:95:0e:c7:b0:d8:9a:89:79:6f:7f:0f:1d:
         04:33:e8:75:99:da:e4:cc:39:cb:ac:fd:3d:bd:1d:39:5f:ba:
         b2:39:a9:d8:53:19:11:9c:5d:81:07:87:82:a5:26:c4:a1:be:
         3d:62:63:dd:78:d9:a6:9d:bc:49:9c:a7:85:fd:2e:a9:ed:61:
         17:cb:29:36:8c:26:a8:4f:50:3a:fe:81:67:61:16:b0:c7:9e:
         92:2e:45:51:95:b0:52:b1:18:25:d7:ce:e3:c2:c1:39:8e:69:
         6f:ad:64:f9:84:a1:d9:5e:4b:19:72:c9:a0:de:75:4d:ee:d8:
         30:8f:1c:b9:72:c4:68:31:15:ce:24:11:bf:04:ae:67:c5:68:
         b5:b0:3c:de:3c:6e:4e:91:c4:14:08:27:3e:8d:f6:ad:07:4b:
         2e:92:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:53 2026 by rpki-client