Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          Bnfb6l5s2GLe4x1l5zXWTlO2WElqmA7ls75/WsNTD70=
Subject key identifier:   75:56:81:E7:F3:E5:0E:F3:9D:BF:5E:EC:1B:4F:0A:B2:60:83:00:B2
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019A2AB0B31FDF31501EBC5BA381FC7EC2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          1702
Signing time:             Tue 28 Oct 2025 12:00:14 +0000
Manifest this update:     Tue 28 Oct 2025 12:00:14 +0000
Manifest next update:     Wed 29 Oct 2025 12:00:14 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: DZyhv4UYtYvTfPYlPoAjBnE9aVw.roa (hash: jy6kbh6prGxhGFzaKnByCAPnjYIf8B6UCrmQZYycLPg=)
                          3: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          4: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          5: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: WoP0txCV3nns4zT3zWZDlz4Mf4LLCbMwDnrcO57y0Uw=)
                          6: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2a:b0:b3:1f:df:31:50:1e:bc:5b:a3:81:fc:7e:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Oct 28 12:00:14 2025 GMT
            Not After : Oct 29 12:00:14 2025 GMT
        Subject: CN=755681e7f3e50ef39dbf5eec1b4f0ab2608300b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:c1:09:30:5e:f8:a7:19:4a:84:ed:9d:05:
                    60:30:b7:9d:59:7e:7a:a0:b4:70:18:6b:a7:1e:cf:
                    65:f4:72:aa:51:da:63:ba:1e:e2:ac:6e:d9:ef:f9:
                    be:e6:29:f6:df:df:0d:2c:d3:d8:c0:7b:a4:db:51:
                    18:6b:e8:ad:36:65:1b:c9:f4:c8:52:70:dd:e1:93:
                    e8:35:66:33:db:85:dc:0e:f1:9e:9b:d7:e0:f6:5a:
                    a6:e5:d5:21:7c:8d:73:84:9b:60:03:28:36:7a:6b:
                    48:f0:f3:3b:1b:f9:38:ca:e7:6e:ad:97:64:49:6e:
                    ed:ab:ed:1a:0d:a5:c4:cd:90:4d:dd:9a:98:d1:fe:
                    56:6c:67:43:8c:cb:1d:89:15:b1:d7:24:fc:d6:5c:
                    8e:4e:81:66:4b:78:90:46:fb:89:9c:c0:e4:09:6b:
                    69:b4:dd:13:56:8a:71:97:7a:88:fb:1e:3e:0d:a5:
                    55:31:09:f8:be:a3:b6:e1:9c:94:65:30:88:4c:c4:
                    5d:b2:48:b2:a7:78:51:0d:3e:71:d8:b8:70:f3:87:
                    7f:d4:4b:d4:08:32:38:41:24:50:ec:53:cb:73:21:
                    6b:cc:81:7e:0b:77:1e:df:67:76:6c:cf:71:4c:1a:
                    e7:0c:af:d8:67:20:2d:72:1b:25:a6:9c:05:a8:d6:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:56:81:E7:F3:E5:0E:F3:9D:BF:5E:EC:1B:4F:0A:B2:60:83:00:B2
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:33:5b:ba:03:9e:33:6f:09:1e:70:69:04:63:cf:6e:8a:1b:
         8e:c1:1b:0f:28:dd:d5:3e:f0:9c:07:97:c8:ce:6e:91:64:b2:
         ab:a1:a8:24:25:a0:79:52:06:98:18:00:d3:87:02:c7:0b:cc:
         b0:ed:54:a1:94:57:10:d6:0e:d2:64:97:d4:a6:07:8f:c4:97:
         02:65:31:3b:38:2b:de:4b:b1:7c:ed:99:3e:3c:eb:06:f8:02:
         a5:c1:02:71:d1:9b:d8:63:0e:ca:5d:21:34:d2:f7:ad:53:4a:
         f4:68:50:fe:6d:e0:2b:ba:8a:f9:86:0a:78:b0:5e:ab:6d:81:
         16:2c:51:87:26:68:c4:fb:91:4b:ac:44:c7:7b:85:5f:1d:af:
         79:df:03:0f:c4:39:8b:91:63:22:40:d6:f9:37:e3:8f:c4:36:
         ba:56:28:2f:9f:dd:a5:e9:ee:a3:9b:b6:77:d6:22:17:dc:ed:
         97:10:49:14:55:d0:8b:a5:16:e2:d1:a9:a5:9e:70:07:3e:aa:
         82:bb:2f:af:73:16:a2:bb:89:87:9d:a5:eb:28:7f:bc:58:d2:
         61:47:c2:79:c9:e3:7e:a4:f3:19:3a:60:3c:f9:b2:47:81:fd:
         01:b0:fb:8e:34:2a:42:41:48:6e:fd:81:72:43:73:9d:24:a8:
         d1:e7:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:08:00 2025 by rpki-client