Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          hpgmZk0aOUGi5Sei3o2CO9qMGWLdzu1BnGb5ZifYpZg=
Subject key identifier:   56:15:FC:D4:F3:91:DF:CB:2D:90:CC:C8:11:BA:C9:3E:8F:5D:FB:DA
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019D2A05103386E007E73E4D90BB65B0FF70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 12:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:08 +0000
Files and hashes:         1: FAvWr-t5qLAm6NFSiSaeHXBJNkk.roa (hash: oCnAzbJIAxh+ZmVGXJVHG080J5H06zSvYh/DS9c83V0=)
                          2: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: bEHz61Fidl/c0OwWfJhjNSMkpP//I0XzH6wC4wN9WKQ=)
                          3: bNA2kutP2fcn6EKqxM5e-6bce04.roa (hash: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg=)
                          4: bhGF4U1uOTR_d637z55lpBNamlM.roa (hash: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw=)
                          5: dqIMVQtES41sQVRwnUTr8rX4pPk.roa (hash: 0lWlGGH3qwTUbHSx/AhpVPNTmibHBfbhdn/QehKZoOw=)
                          6: g0I0kU5MJHKsYF8n6XBnqA0rorw.roa (hash: 0uUsQ8/3tfk0T+PJCNuxoHMkCUWUET0shiGdo7yowwA=)
                          7: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (hash: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:10:33:86:e0:07:e7:3e:4d:90:bb:65:b0:ff:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Mar 26 12:01:08 2026 GMT
            Not After : Mar 27 12:01:08 2026 GMT
        Subject: CN=5615fcd4f391dfcb2d90ccc811bac93e8f5dfbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:aa:cf:f0:97:b5:9e:a6:be:cd:2c:d0:ae:
                    6d:04:d0:f0:23:fb:02:99:99:1e:2c:bb:34:16:af:
                    e0:b2:74:10:7e:52:6f:0e:1a:ef:32:7a:90:4a:d1:
                    cf:be:f0:72:a3:78:5d:0a:22:32:9a:41:40:29:31:
                    76:fd:4d:64:e0:c3:05:43:3a:83:59:2e:61:a8:60:
                    7e:ad:d8:78:9b:82:c3:4a:89:c5:1e:4e:eb:cb:a5:
                    05:55:1d:44:34:5f:ae:b2:30:f0:d0:e5:72:58:4e:
                    c3:b9:20:25:0e:27:f1:38:16:36:11:7b:ac:02:6a:
                    cc:5a:e7:14:40:ee:da:06:a1:00:4b:0a:42:8b:a1:
                    79:36:5d:a5:8d:17:a8:60:8c:12:2a:20:06:aa:79:
                    db:e7:3c:67:1d:25:c9:2a:4f:75:5d:85:b5:42:05:
                    78:e5:54:dd:e6:29:e1:1b:bf:4e:f4:c1:55:6d:04:
                    f3:ae:83:cc:d8:e1:cc:99:d8:c4:57:19:80:22:77:
                    44:16:06:ff:26:95:49:07:d0:a1:1d:d4:ef:b3:b8:
                    f8:32:29:19:d5:1c:4d:60:08:20:05:1a:d9:ee:68:
                    43:53:0a:09:10:c1:82:46:da:7f:e2:28:35:c4:eb:
                    60:56:e4:82:2f:4c:7f:21:0d:e1:68:69:79:00:0a:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:15:FC:D4:F3:91:DF:CB:2D:90:CC:C8:11:BA:C9:3E:8F:5D:FB:DA
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:69:d3:20:65:33:b7:43:8f:db:32:3a:ac:d8:d6:ff:ca:
         88:ab:75:37:37:e6:a7:17:5d:7a:a2:42:2e:6f:4e:40:e9:6c:
         a4:f1:16:41:5e:a4:21:26:59:59:2c:50:52:76:94:65:79:14:
         ac:99:23:03:72:d8:8d:a3:86:e9:d2:da:83:ec:d3:50:20:21:
         e1:ee:20:b9:0d:1a:60:77:4f:2b:38:82:23:67:cc:aa:e3:ec:
         b1:52:04:24:99:d7:69:7a:7f:2b:18:1d:c8:6c:f0:00:d1:aa:
         d2:6e:6a:97:bc:80:78:d1:d0:4f:a5:88:3a:39:c6:51:21:bb:
         81:d1:8d:ff:f6:34:af:b0:16:ba:30:b5:a8:6e:85:fe:2c:c4:
         48:be:47:4c:c1:15:8b:74:4d:c4:3a:29:2a:39:19:7b:7d:b1:
         f1:54:7b:29:f2:a0:67:23:55:bd:bc:da:2a:13:57:4e:59:bf:
         9c:8e:22:ff:6c:26:12:f4:63:b3:82:4e:ef:1a:76:6f:f0:15:
         87:1c:e2:6e:bb:c0:b8:39:a7:a6:91:1f:c5:91:3d:22:d5:a5:
         2d:04:8f:b1:db:28:d7:16:b0:57:fd:6e:09:97:43:e1:4d:56:
         b5:8a:95:c8:56:46:63:de:9e:d3:a3:c9:84:60:c0:b8:c7:8c:
         1b:b4:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:46 2026 by rpki-client