Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File:                     JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier:          Y2MwOEx/Q0oNRzeW4+QbFAE+iLSTZuvv6FBdAGo4mao=
Subject key identifier:   FD:91:E5:32:18:80:B2:91:7F:82:63:7E:7D:DB:0A:D1:20:AC:9D:E3
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer:       /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial:       019A2741C21EB99DA44F152E71876EC9AA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number:          131B
Signing time:             Mon 27 Oct 2025 20:00:12 +0000
Manifest this update:     Mon 27 Oct 2025 20:00:12 +0000
Manifest next update:     Tue 28 Oct 2025 20:00:12 +0000
Files and hashes:         1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=)
                          2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: gHLaHE/GCP7Udvdyvaj6/XXC443HIZyAKxP6B/eZfek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 20:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:41:c2:1e:b9:9d:a4:4f:15:2e:71:87:6e:c9:aa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
        Validity
            Not Before: Oct 27 20:00:12 2025 GMT
            Not After : Oct 28 20:00:12 2025 GMT
        Subject: CN=fd91e5321880b2917f82637e7ddb0ad120ac9de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:96:8f:c6:39:69:32:9b:82:fd:50:fb:80:aa:
                    95:54:e4:e8:d7:81:12:20:ac:2e:d3:5b:3f:b3:4c:
                    2e:fb:ac:d2:f5:d4:a6:f2:7c:25:bd:76:aa:f5:6e:
                    7e:e8:dc:c0:83:d2:e5:d9:02:19:f0:57:b6:9a:db:
                    69:51:eb:45:7f:92:0b:3a:cf:74:e9:c8:fb:d3:25:
                    6a:8c:32:df:c8:c8:c9:7a:04:63:bb:e6:29:5f:9c:
                    16:e0:e4:63:f1:d4:66:0b:05:88:11:5c:5c:f9:be:
                    64:ce:56:82:dc:5e:0f:a0:94:53:bc:dd:b3:5a:29:
                    db:f1:58:13:08:bc:14:51:82:e1:aa:fb:fd:38:de:
                    41:e0:7a:92:1c:7f:fa:30:6c:7c:e3:5b:05:c4:43:
                    45:b5:2f:dd:e0:42:80:24:5e:fc:8d:2e:7b:e9:86:
                    36:66:66:2a:6f:8b:21:f1:e4:73:6a:5e:32:5c:6a:
                    a7:be:6a:13:1a:eb:ee:dc:83:8a:00:d9:aa:31:18:
                    61:41:b0:6f:30:39:6a:9a:ef:fa:3a:06:90:f8:eb:
                    14:0e:a4:0e:d9:ee:e8:34:69:0e:54:bb:fd:b5:60:
                    58:aa:fb:87:fc:74:cc:f7:1f:8a:e3:0b:7b:df:89:
                    d6:18:00:7c:2f:db:b1:1b:4c:96:32:f9:27:66:2e:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:91:E5:32:18:80:B2:91:7F:82:63:7E:7D:DB:0A:D1:20:AC:9D:E3
            X509v3 Authority Key Identifier:
                keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:a6:90:23:a1:2e:fd:de:43:11:7e:43:ee:fa:f6:41:2f:
         2d:4c:31:ac:94:e9:a7:c1:13:63:b2:68:b1:90:09:0f:e0:74:
         5e:36:a2:fb:53:30:98:86:3b:d4:2b:ac:f5:36:9a:7d:9c:67:
         0f:b6:e8:86:4e:cf:b4:79:6f:f6:d3:e8:1a:9a:20:6f:4d:bb:
         29:57:a6:92:a0:68:60:49:6b:44:86:3e:04:e5:f1:49:9f:9a:
         48:ea:b5:94:41:91:f5:e4:7d:84:8e:bf:a3:e5:0e:61:a9:d1:
         35:04:a3:4a:ea:c3:5d:2b:91:98:9c:bb:95:01:23:48:a4:fc:
         4f:34:34:ca:80:3d:e1:36:49:1b:e4:78:b4:a7:24:50:55:9f:
         91:0b:46:e3:32:3a:dc:2b:d7:64:c7:ff:0d:ea:58:c1:2c:ba:
         d2:90:6b:22:1e:0c:c6:45:38:33:38:6f:6a:c9:a6:72:ff:6a:
         a4:2a:07:a1:88:7b:f8:2d:7e:7c:45:b4:49:25:46:08:84:be:
         7b:d7:e4:2b:ab:c5:4a:cd:8e:99:94:21:df:d8:89:dc:e7:07:
         b3:26:88:28:54:66:2e:9e:c9:d4:ca:c3:13:49:d9:cc:4e:7f:
         c0:c2:06:f2:76:25:15:d2:3c:aa:0c:a4:20:10:c2:09:d0:43:
         77:b8:f8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonQcIeuZ2kTxUucYduyapJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDNkYjhiZWQzNTRiNDc4YzZkMTcwNGExZTNhZTZjOTI2
ZDU2NzIwHhcNMjUxMDI3MjAwMDEyWhcNMjUxMDI4MjAwMDEyWjAzMTEwLwYDVQQD
EyhmZDkxZTUzMjE4ODBiMjkxN2Y4MjYzN2U3ZGRiMGFkMTIwYWM5ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+paPxjlpMpuC/VD7gKqVVOTo14ES
IKwu01s/s0wu+6zS9dSm8nwlvXaq9W5+6NzAg9Ll2QIZ8Fe2mttpUetFf5ILOs90
6cj70yVqjDLfyMjJegRju+YpX5wW4ORj8dRmCwWIEVxc+b5kzlaC3F4PoJRTvN2z
Winb8VgTCLwUUYLhqvv9ON5B4HqSHH/6MGx841sFxENFtS/d4EKAJF78jS576YY2
ZmYqb4sh8eRzal4yXGqnvmoTGuvu3IOKANmqMRhhQbBvMDlqmu/6OgaQ+OsUDqQO
2e7oNGkOVLv9tWBYqvuH/HTM9x+K4wt734nWGAB8L9uxG0yWMvknZi6hOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2R5TIYgLKRf4Jjfn3bCtEgrJ3jMB8GA1UdIwQY
MBaAFCbT24vtNUtHjG0XBKHjrmySbVZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQt
Y2U2YmI3MWE4ZGE2LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQtY2U2YmI3MWE4ZGE2
LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfqmkCOh
Lv3eQxF+Q+769kEvLUwxrJTpp8ETY7JosZAJD+B0Xjai+1MwmIY71Cus9TaafZxn
D7bohk7PtHlv9tPoGpogb027KVemkqBoYElrRIY+BOXxSZ+aSOq1lEGR9eR9hI6/
o+UOYanRNQSjSurDXSuRmJy7lQEjSKT8TzQ0yoA94TZJG+R4tKckUFWfkQtG4zI6
3CvXZMf/DepYwSy60pBrIh4MxkU4Mzhvasmmcv9qpCoHoYh7+C1+fEW0SSVGCIS+
e9fkK6vFSs2OmZQh39iJ3OcHsyaIKFRmLp7J1MrDE0nZzE5/wMIG8nYlFdI8qgyk
IBDCCdBDd7j4kA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:35:19 2025 by rpki-client