Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          vWwTiw9ujCfIo6i8TdQ9sZNnQFehWlVMxqUOTeoXofw=
Subject key identifier:   A4:95:7B:F0:4E:FB:90:42:78:87:37:1D:79:89:3C:BC:98:33:45:6D
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019D378970B9BF0F70763AAE9401D2B94EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          1897
Signing time:             Sun 29 Mar 2026 03:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:47 +0000
Files and hashes:         1: FAvWr-t5qLAm6NFSiSaeHXBJNkk.roa (hash: oCnAzbJIAxh+ZmVGXJVHG080J5H06zSvYh/DS9c83V0=)
                          2: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: DzWukzJ1ZTgbmeGmtSuwlKcysxsmq6RaRtCYsaUJywE=)
                          3: bNA2kutP2fcn6EKqxM5e-6bce04.roa (hash: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg=)
                          4: bhGF4U1uOTR_d637z55lpBNamlM.roa (hash: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw=)
                          5: dqIMVQtES41sQVRwnUTr8rX4pPk.roa (hash: 0lWlGGH3qwTUbHSx/AhpVPNTmibHBfbhdn/QehKZoOw=)
                          6: g0I0kU5MJHKsYF8n6XBnqA0rorw.roa (hash: 0uUsQ8/3tfk0T+PJCNuxoHMkCUWUET0shiGdo7yowwA=)
                          7: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (hash: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:70:b9:bf:0f:70:76:3a:ae:94:01:d2:b9:4e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Mar 29 03:00:47 2026 GMT
            Not After : Mar 30 03:00:47 2026 GMT
        Subject: CN=a4957bf04efb90427887371d79893cbc9833456d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:76:38:43:c6:64:a2:11:25:d1:95:94:0a:
                    24:e4:8b:a6:45:c3:ae:2b:f4:97:9e:a3:e6:20:4f:
                    34:ca:3e:a0:c8:f6:16:56:ae:35:3c:39:3d:5d:30:
                    cd:af:55:e8:42:b7:3b:de:8a:fa:8a:a9:f5:8d:ea:
                    40:e5:f1:cc:a9:9d:c6:d4:c5:60:3b:b6:ee:0f:98:
                    87:2a:45:1e:1d:40:79:98:e1:5c:72:10:39:e8:e8:
                    6a:4d:2b:a1:10:61:36:2c:9b:d0:d4:2a:7b:39:0d:
                    b4:10:8a:f0:35:6a:28:9a:a3:b8:46:c0:c4:cc:0f:
                    fc:42:ff:58:75:3f:b4:9f:70:3c:fb:b4:37:29:b4:
                    47:46:f4:81:78:57:7c:32:bf:2b:2f:cf:b8:11:44:
                    b4:50:8e:e3:3e:c6:69:fd:72:8c:77:3c:80:f3:4d:
                    3c:ec:b4:d2:ee:77:67:da:f8:a3:03:05:ea:10:90:
                    a1:63:f3:dc:2a:b4:22:5c:30:54:23:01:f1:26:7d:
                    dd:aa:af:29:d4:1e:5f:cc:71:c4:28:b1:86:87:0f:
                    60:41:75:6f:4a:f3:1a:6a:37:2e:46:8a:76:09:df:
                    ce:87:64:25:66:2d:db:a1:94:53:8e:19:b6:82:18:
                    81:96:c0:a3:60:35:27:79:18:96:08:91:c9:ae:5b:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:95:7B:F0:4E:FB:90:42:78:87:37:1D:79:89:3C:BC:98:33:45:6D
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:de:1f:a1:7a:7d:40:e3:9e:95:64:81:a1:61:fb:79:b2:
         bf:14:33:5c:d9:35:2a:43:bd:48:d6:2d:92:a5:30:df:b7:af:
         2a:c1:1b:ff:a6:75:2d:fd:0e:1f:49:72:36:df:d1:ff:3a:37:
         ed:ca:e8:82:9a:0f:81:c3:6f:ff:20:ac:f0:ef:17:7b:64:b8:
         e9:ac:70:2c:7f:77:11:65:8b:35:95:9f:be:cc:9a:f3:d1:d1:
         93:74:fa:1e:a6:cb:71:5b:ab:e9:8b:15:a4:66:f0:67:7f:82:
         7c:23:02:b0:5e:18:ac:6d:96:d4:67:e9:20:9a:9c:c6:09:ef:
         87:5b:0e:01:c2:8b:ac:7f:68:a9:92:a6:7b:8a:df:5d:3b:fd:
         36:02:c5:09:71:32:42:40:e4:7a:4f:2f:5a:ab:ed:94:87:ce:
         a7:ce:e7:22:fa:09:2e:3a:13:08:6a:f5:ea:4a:1f:a6:36:98:
         2c:f3:e8:07:37:7c:ce:14:33:e9:59:36:e6:6f:34:b0:91:de:
         47:ec:f4:4e:70:6d:41:e0:d6:15:e4:43:cb:28:42:d1:54:d4:
         d9:66:8d:47:67:57:70:5d:41:eb:fb:75:71:0a:e3:99:e2:0a:
         7c:2f:19:c0:11:35:60:5e:b8:45:12:ed:69:c3:5f:ad:22:6e:
         34:43:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client