Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          1IslqrE7kku7HAdq0NYkeusjLGjMsz8MJ0se5hMYxhw=
Subject key identifier:   79:41:3C:68:BE:3E:12:79:67:81:C0:13:82:17:A1:AD:16:A5:CC:47
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019EC11278CCD805B044C8924E57AE74D3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0647
Signing time:             Sat 13 Jun 2026 13:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:13 +0000
Files and hashes:         1: VnEaX5mEUnAqL58iO3BaPk6yzNM.roa (hash: ZWHoAuzzQVQpRM0/xRGctWUOCAv8SSA9CMTEvmewTtk=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: lvrlPdXVqYe/ZF4BM0Yhdk3eKJI79lLyKlXsJLFfU3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:78:cc:d8:05:b0:44:c8:92:4e:57:ae:74:d3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Jun 13 13:01:13 2026 GMT
            Not After : Jun 14 13:01:13 2026 GMT
        Subject: CN=79413c68be3e12796781c0138217a1ad16a5cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:b6:d6:8e:ba:13:9d:9c:9f:fd:2c:f9:c8:
                    9b:b3:d6:90:b9:5a:86:89:43:d8:42:b3:36:cb:ab:
                    35:12:1e:b2:dc:9c:a2:d6:52:39:25:8d:88:88:8c:
                    d7:62:3b:a4:57:26:0d:02:df:6c:97:fb:e1:e7:15:
                    86:35:7f:7e:96:09:75:8d:a3:cc:19:b5:cc:40:89:
                    6c:d4:05:4c:65:d1:28:77:c2:32:61:71:1c:8d:c8:
                    82:c2:6d:d0:42:ea:64:4d:6d:87:34:58:56:c7:23:
                    0f:9b:5f:35:30:67:e6:08:67:34:3e:32:82:d4:24:
                    c8:05:87:76:15:d8:b1:a7:c0:e8:ff:7a:28:13:e0:
                    3f:0d:33:6a:e9:fd:b3:96:77:2c:45:5a:f7:f0:40:
                    7d:2a:0d:f8:f7:0d:28:1e:ef:dc:5c:ee:56:13:a9:
                    40:5b:2d:07:f7:7a:9b:2f:6a:08:0a:ab:18:33:a0:
                    67:32:3f:a7:25:08:c0:6c:4e:95:52:ef:46:c0:c7:
                    2b:13:3b:27:be:28:77:b2:d0:a7:c1:40:8f:df:24:
                    d9:42:b4:74:38:4f:05:78:de:88:c6:18:9a:34:29:
                    6d:ea:50:61:ce:8f:7c:b1:b0:3c:54:90:63:33:f4:
                    5c:64:c5:c4:a0:4b:41:93:06:d1:5a:66:49:62:60:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:3C:68:BE:3E:12:79:67:81:C0:13:82:17:A1:AD:16:A5:CC:47
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:67:97:b1:2c:40:ac:6f:0e:9e:a1:83:ed:51:81:28:9a:60:
         4b:2f:fe:b0:f2:2d:3f:8f:72:79:e2:6c:b0:4e:d4:18:7a:ae:
         38:8d:97:45:d0:c3:ff:a5:28:74:02:78:3c:40:8e:a0:c6:69:
         9f:33:12:d0:3f:8c:7f:63:76:0d:4e:48:77:2c:8f:c4:c6:71:
         d2:fb:7e:45:ff:53:25:79:93:e5:de:13:a1:6c:72:ae:92:41:
         47:15:34:12:bc:26:87:77:96:c8:2d:1e:60:31:fe:18:51:22:
         3e:8b:4c:93:33:4b:02:57:40:d0:de:a8:b8:5b:fa:92:f7:bc:
         a5:5a:68:a6:ae:2f:10:62:c0:80:87:63:55:06:7f:24:2d:dc:
         0f:ba:d1:a5:1a:9e:1f:46:32:49:9e:67:25:8b:42:34:e8:7d:
         9a:0b:14:27:f0:b2:c7:19:46:37:1f:05:55:52:d2:ab:11:dd:
         5e:70:10:23:d5:9d:b0:b9:70:58:5b:a3:eb:25:3a:af:0a:ff:
         4f:61:57:b6:4f:91:1c:65:99:6d:0b:c2:f4:7d:03:22:1e:33:
         bc:a9:b8:43:a6:51:8c:ef:ce:a9:58:b0:b1:f3:2e:67:e8:69:
         3e:f2:d8:e1:88:05:85:8f:8f:a6:d6:d3:7d:4c:44:de:7c:07:
         3c:89:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:23 2026 by rpki-client