Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          mDKQHNTA0qCrwxIAIucUDDwWx0bcGPT9eR7+uhvtGWY=
Subject key identifier:   AF:B9:4B:9E:29:38:83:2D:32:47:8B:22:02:C3:DB:A9:14:A3:30:FF
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       01993123F6BB80EA35728597279C6A825400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          035C
Signing time:             Wed 10 Sep 2025 01:01:04 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:04 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:04 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: 2dPM18v4p/civZTOlqOFt4t5DqNDEbuCdWTdtSftjv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:23:f6:bb:80:ea:35:72:85:97:27:9c:6a:82:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Sep 10 01:01:04 2025 GMT
            Not After : Sep 11 01:01:04 2025 GMT
        Subject: CN=afb94b9e2938832d32478b2202c3dba914a330ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:f0:45:c3:46:eb:01:a8:df:f2:65:94:fe:
                    0e:ad:1c:83:05:1b:dc:56:c2:2a:c8:55:a1:f7:03:
                    01:98:cf:54:30:0f:02:a7:ac:88:93:6c:a1:37:d5:
                    2c:2b:10:f9:a6:22:23:75:b7:b6:06:50:44:64:a8:
                    f6:0b:3e:6c:80:b1:da:a1:3b:21:87:9e:2f:08:29:
                    3f:39:f2:02:87:93:c1:bb:c9:59:32:2b:2d:80:18:
                    71:7c:ef:82:2d:6e:20:c4:d1:59:e1:48:99:93:b8:
                    be:91:e3:09:a4:9f:e6:07:50:ab:96:74:3a:dd:5a:
                    8c:57:d8:c0:13:f7:47:e2:46:28:c8:8f:b0:5b:aa:
                    ce:d0:93:6d:05:6f:b7:87:f9:45:99:0a:50:f2:96:
                    a7:ef:db:14:ab:01:81:8a:66:04:15:a5:4d:d6:02:
                    77:5a:1c:94:c1:54:4a:bd:11:5c:43:31:b6:35:7b:
                    fb:73:de:f7:6b:4a:3d:52:32:fa:31:8b:48:41:56:
                    3d:e2:8b:91:95:ae:9e:e4:9c:af:1d:ba:7c:e3:f8:
                    50:52:9b:df:80:d6:31:97:b6:7b:1b:2d:02:ec:98:
                    a1:de:8c:76:26:54:93:b1:e5:74:b0:f8:99:26:8e:
                    93:22:b8:8c:ce:74:68:36:3e:9c:9b:38:06:c5:48:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:4B:9E:29:38:83:2D:32:47:8B:22:02:C3:DB:A9:14:A3:30:FF
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:1e:9f:37:11:ae:4f:65:a0:5a:15:70:af:54:7a:2f:63:
         5a:9b:f6:e7:42:4c:09:20:64:39:9c:34:86:f0:3d:05:94:ee:
         d6:90:73:cf:29:89:c7:b4:27:62:5b:24:32:48:50:87:aa:ee:
         ad:db:75:9e:7c:40:d7:53:e3:c4:7a:58:d7:ee:81:e6:3f:dd:
         5f:1f:59:98:75:cf:4e:8f:d0:e3:61:02:15:ff:f2:5e:c4:e7:
         3d:ad:99:db:ef:61:6e:6f:61:3b:1f:38:68:04:f6:83:e4:e4:
         d3:d5:07:d7:35:d1:72:79:fb:b0:3e:06:3e:09:ca:9f:53:7f:
         4e:20:d4:b8:f9:3a:26:2d:51:64:eb:47:6d:04:41:5a:9e:66:
         57:09:f3:38:b0:be:a9:ec:36:f3:78:b4:55:a5:6f:3b:f0:f9:
         b4:d8:8c:24:e4:51:d5:30:2f:b9:93:82:ba:fb:1b:ce:b3:8c:
         f1:e1:da:df:0e:1f:d2:e0:9a:1e:2a:79:89:ac:2d:50:4f:86:
         03:75:de:14:24:f3:eb:a6:a1:0e:dd:7c:7d:43:b8:23:c3:aa:
         b3:e0:a7:9b:df:3b:b5:b8:b5:06:02:5a:17:21:fb:bd:82:fc:
         12:0c:50:c3:08:25:c4:d5:31:08:f6:e8:cf:30:a4:76:f6:f7:
         ec:2f:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:54 2025 by rpki-client