Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          u+lyTBvSC2kmwNKqTUCDZ6pBbMOUgWc4Rp+uAG9eGc8=
Subject key identifier:   3C:92:9E:2D:41:13:EE:65:FB:D9:A3:63:0D:B2:DA:03:DB:F9:4B:5D
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019D3865512C3028F067F984BAFE88A10EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0579
Signing time:             Sun 29 Mar 2026 07:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 07:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 07:00:57 +0000
Files and hashes:         1: C-XaE9dqtHBAODieGng-OSrCwTw.roa (hash: lr3glDSlYyZfIe4TZT7LhTSj6JInYiVBUhnNr+wrieA=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: wj6sbnRvAifNXPU5zK7cmbIZDf+KhijKhWvFCt62TNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:51:2c:30:28:f0:67:f9:84:ba:fe:88:a1:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Mar 29 07:00:57 2026 GMT
            Not After : Mar 30 07:00:57 2026 GMT
        Subject: CN=3c929e2d4113ee65fbd9a3630db2da03dbf94b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:88:2e:bc:01:49:06:23:d6:05:cd:8c:14:
                    ed:6f:ed:ed:df:7e:4e:20:99:89:39:8b:d0:48:69:
                    da:57:67:4b:73:78:61:d8:90:54:47:08:24:0b:7c:
                    21:68:a0:38:bf:5b:d7:59:e9:d1:2a:7c:cc:ee:ab:
                    de:25:f1:4b:e2:46:a9:e3:48:5e:c6:53:97:99:ae:
                    8b:13:eb:0d:9f:41:eb:2d:13:ef:ad:21:a2:b4:8e:
                    b9:9e:fe:9a:81:95:96:9f:cb:06:f9:b4:a6:40:e8:
                    b0:1f:9e:0a:e2:96:d1:8e:b3:d3:84:13:be:ca:df:
                    85:c6:d7:5b:40:f3:25:37:ca:a1:1e:87:96:60:02:
                    8e:5d:11:20:e5:06:d0:a5:33:9a:74:54:cc:22:3d:
                    81:1e:df:6a:47:63:d0:6c:ee:4f:e1:4d:e4:eb:74:
                    31:df:c3:3c:5e:b3:8a:80:b2:0a:25:ca:06:61:59:
                    25:ee:78:bd:ff:98:32:92:56:a8:0b:93:65:60:74:
                    73:7d:93:d6:d7:9b:f3:a0:c7:87:c9:19:c6:c0:ed:
                    b7:de:bd:e3:fd:b4:ce:fd:15:c9:16:25:c1:21:cc:
                    5f:d7:4a:dc:2b:96:f4:6a:eb:a9:ca:3b:78:7b:40:
                    67:b6:ab:64:5d:b0:65:b2:ed:55:2c:09:90:46:ce:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:9E:2D:41:13:EE:65:FB:D9:A3:63:0D:B2:DA:03:DB:F9:4B:5D
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:5b:b2:80:f1:7e:e0:49:8e:55:c6:4a:e9:80:a9:4a:b0:
         ca:e7:cb:87:56:4d:8e:0f:e3:3d:32:e9:9b:7b:8c:98:68:1e:
         76:2a:c0:ab:89:2d:d6:97:1f:c6:5f:ed:60:14:af:6d:ba:aa:
         ea:df:cb:7f:43:9e:c6:dc:c3:70:e6:d0:9f:85:2b:eb:99:4b:
         2a:62:d4:21:12:19:9c:cd:bf:a0:ff:55:15:f9:ea:b3:1c:57:
         ad:6d:bc:18:c2:a8:2a:23:2b:51:fc:0e:f4:2a:d5:8d:58:18:
         6f:c1:fd:99:fc:10:18:5b:5e:20:09:00:50:cf:d3:22:60:58:
         dd:71:5a:ab:06:b2:8d:c5:b7:cb:0e:90:f3:66:90:04:f8:f5:
         70:91:3e:77:79:9d:ba:61:e0:a0:54:be:b1:17:03:79:cf:33:
         bd:eb:61:32:a8:94:e4:ca:0c:8f:3a:9e:2a:bf:9e:a7:38:e5:
         46:5c:98:95:35:3b:3b:46:d0:69:8d:2a:24:d3:c5:69:99:fa:
         67:3e:b0:6e:2f:50:1c:01:e4:b8:c5:a2:c3:ed:bf:ff:4d:36:
         bf:9c:97:24:68:36:86:48:2d:70:d2:78:c9:fb:79:94:83:d0:
         cb:9d:75:93:3f:fb:0c:45:54:b2:a7:99:db:f2:34:20:09:66:
         aa:84:52:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVEsMCjwZ/mEuv6IoQ7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjdjMDljMWEzZjczZWJlNjE3NDBhYjY1ZTU4OWY5MTY1
NWJkZWQwHhcNMjYwMzI5MDcwMDU3WhcNMjYwMzMwMDcwMDU3WjAzMTEwLwYDVQQD
EygzYzkyOWUyZDQxMTNlZTY1ZmJkOWEzNjMwZGIyZGEwM2RiZjk0YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCWILrwBSQYj1gXNjBTtb+3t335O
IJmJOYvQSGnaV2dLc3hh2JBURwgkC3whaKA4v1vXWenRKnzM7qveJfFL4kap40he
xlOXma6LE+sNn0HrLRPvrSGitI65nv6agZWWn8sG+bSmQOiwH54K4pbRjrPThBO+
yt+FxtdbQPMlN8qhHoeWYAKOXREg5QbQpTOadFTMIj2BHt9qR2PQbO5P4U3k63Qx
38M8XrOKgLIKJcoGYVkl7ni9/5gyklaoC5NlYHRzfZPW15vzoMeHyRnGwO233r3j
/bTO/RXJFiXBIcxf10rcK5b0auupyjt4e0BntqtkXbBlsu1VLAmQRs5A5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDySni1BE+5l+9mjYw2y2gPb+UtdMB8GA1UdIwQY
MBaAFI73wJwaP3Pr5hdAq2XlifkWVb3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDkt
ZjYyYmU5ZThhNjcxLzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDktZjYyYmU5ZThhNjcx
LzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrxbsoDx
fuBJjlXGSumAqUqwyufLh1ZNjg/jPTLpm3uMmGgedirAq4kt1pcfxl/tYBSvbbqq
6t/Lf0OextzDcObQn4Ur65lLKmLUIRIZnM2/oP9VFfnqsxxXrW28GMKoKiMrUfwO
9CrVjVgYb8H9mfwQGFteIAkAUM/TImBY3XFaqwayjcW3yw6Q82aQBPj1cJE+d3md
umHgoFS+sRcDec8zvethMqiU5MoMjzqeKr+epzjlRlyYlTU7O0bQaY0qJNPFaZn6
Zz6wbi9QHAHkuMWiw+2//002v5yXJGg2hkgtcNJ4yft5lIPQy511kz/7DEVUsqeZ
2/I0IAlmqoRSiA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:37 2026 by rpki-client