Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          mKHsLi9ljFVo+qkUjhKde0XcinhUbivWmjd5FJ5HnQw=
Subject key identifier:   9D:2A:07:4E:8B:B2:94:50:51:40:7C:3A:83:48:B2:4B:79:C1:E1:D6
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       01A08AC3023D01504D4971DCBE6BAE1690E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0734
Signing time:             Thu 10 Sep 2026 10:00:30 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:30 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:30 +0000
Files and hashes:         1: VnEaX5mEUnAqL58iO3BaPk6yzNM.roa (hash: ZWHoAuzzQVQpRM0/xRGctWUOCAv8SSA9CMTEvmewTtk=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: 0C1NrefPr/UxUkdGPL9fm7ERxu8iQYBnwwQ/dhg2fi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:02:3d:01:50:4d:49:71:dc:be:6b:ae:16:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Sep 10 10:00:30 2026 GMT
            Not After : Sep 11 10:00:30 2026 GMT
        Subject: CN=9d2a074e8bb2945051407c3a8348b24b79c1e1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:40:df:19:e9:68:a6:9d:b3:a8:f8:07:5f:
                    dd:a2:e3:5f:6d:9c:1e:52:22:fe:c3:70:e4:15:67:
                    0f:d8:aa:d6:22:d2:1d:34:58:5e:39:be:1c:09:80:
                    38:06:e3:5d:02:df:ef:bc:07:bd:01:8a:01:6d:c3:
                    59:59:b0:37:19:f4:4e:13:6e:ba:49:ee:d9:03:75:
                    a7:5d:aa:47:f8:4e:17:66:2e:e0:01:fe:2c:83:f4:
                    5e:51:04:9b:e2:b8:6b:37:cc:ed:b9:fd:d7:0a:ae:
                    ce:7f:1e:e2:6f:c7:05:25:a9:93:8b:db:b7:94:3a:
                    6e:85:e6:2c:0a:50:a0:8a:b1:25:37:8e:da:0b:b3:
                    7e:31:4f:2a:8d:64:c9:fd:3c:0f:65:ef:a2:2f:1d:
                    4f:6c:16:d4:76:d9:9b:e9:a2:86:19:cf:2a:d2:d6:
                    aa:71:2d:ef:a8:59:66:30:87:36:54:42:63:99:bc:
                    73:ed:06:f1:b6:77:80:ca:66:ad:88:61:dd:5c:4a:
                    01:57:1b:0d:fb:9c:08:84:0d:f1:a1:a5:61:0d:12:
                    ce:9d:e1:f9:aa:b5:db:3b:2c:bc:f3:90:27:9f:04:
                    57:28:61:04:6c:b8:61:db:c1:e8:3b:97:a5:26:f9:
                    5f:3a:a8:06:bd:03:0b:ac:bc:fb:b6:14:d2:59:d4:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:07:4E:8B:B2:94:50:51:40:7C:3A:83:48:B2:4B:79:C1:E1:D6
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:33:eb:d2:cd:e9:c5:ea:7f:1d:19:fe:94:8a:90:8a:2e:
         00:c7:dc:bd:25:94:b1:4a:b9:68:98:a2:e6:07:ab:22:04:23:
         d4:d7:85:13:1b:fd:ce:65:d5:31:2d:bf:2d:4a:af:75:53:2d:
         4a:99:81:45:df:d7:8c:b0:47:17:07:d9:a0:24:94:f7:22:a8:
         b2:16:1c:e6:8d:b0:be:7c:12:b5:65:15:87:c8:dc:06:d9:1d:
         35:67:47:80:aa:ca:b8:34:81:02:24:69:dc:f9:dd:fe:b9:3e:
         d3:44:e0:6e:57:cf:7a:94:be:cd:69:fe:eb:c2:2d:a2:7c:f6:
         15:d4:0c:5c:a9:84:03:25:71:b9:72:38:5f:68:b0:16:74:55:
         b8:7c:2e:e7:ec:e2:35:54:f2:f8:7d:17:d7:8d:5a:f1:3e:d2:
         02:7b:4b:08:b2:0a:3f:7a:0b:f0:bd:f6:55:77:c3:5c:cb:b9:
         6b:94:fe:5e:fd:59:e9:f1:84:97:18:2f:d2:8e:95:c4:3f:79:
         f3:58:47:08:55:16:fd:af:56:01:65:3e:59:ba:e4:44:e5:a0:
         d6:6a:49:b6:1a:f5:86:8c:53:c6:cc:34:c7:d7:91:07:b2:a7:
         ad:d1:63:92:63:18:e5:fc:f4:ce:ae:11:15:a2:87:9c:a8:5c:
         3a:73:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:34 2026 by rpki-client