Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          4OSwWTYyJhVHGIbONl8Pk+3uVqf1l6T/X8gM0vHm/3Q=
Subject key identifier:   06:5C:B3:A5:E6:97:AE:13:36:07:F6:BD:B3:12:C4:81:00:31:86:D3
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       019CABD9EFDF3999F40174B8D696B40493D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          14FD
Signing time:             Mon 02 Mar 2026 00:01:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:52 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:52 +0000
Files and hashes:         1: BXCxdBfLks0HpLfeX-bitV1NMQk.roa (hash: ItUsnf1V/9DVkMNqI/XvXrmX1+5XjhHHxblYA8DiEX4=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: jqdDGE4+9iYt4PdEgRgXt6GHUjGWdivuNbsdgyEqwik=)
                          3: Ui_BP3ZPHsvXLVWgWsAbkL0NotQ.roa (hash: 0zqk8JCNsJMZADMxGwS2Klcg0u95cvZdw+vcz73Bc2Y=)
                          4: eu-EiBKIZdfbTiKYyAesY5JFhtw.roa (hash: SlG0w4rdFq22E3RS79NYouawa44endkIlhmu8zatNvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:ef:df:39:99:f4:01:74:b8:d6:96:b4:04:93:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Mar  2 00:01:52 2026 GMT
            Not After : Mar  3 00:01:52 2026 GMT
        Subject: CN=065cb3a5e697ae133607f6bdb312c481003186d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:77:a0:c9:40:16:ae:a1:e0:44:af:15:24:
                    c9:78:ec:89:8c:95:39:b3:fc:4d:ce:64:d9:f6:d8:
                    8d:ed:24:81:83:77:0b:40:cf:57:de:4c:59:73:97:
                    66:9d:cd:2f:b5:be:18:be:82:2d:d8:5b:7f:53:0e:
                    ef:d0:ab:91:74:22:d1:cb:4a:07:9e:21:b6:3b:a1:
                    43:75:d4:d5:8f:0b:59:81:29:b2:bb:14:b4:60:2b:
                    df:f2:64:9f:1b:aa:9a:1f:a7:d6:21:b1:3d:5d:2d:
                    81:0d:f2:38:c1:fb:14:d5:50:16:30:a4:12:fc:69:
                    10:95:31:42:40:cc:17:ee:b0:65:4f:ec:a7:8e:49:
                    f9:e9:a7:36:9d:10:02:ad:f7:f7:58:5e:4d:9f:11:
                    c2:3d:c7:f8:8b:41:cd:0e:61:35:41:e7:a9:81:9e:
                    80:be:42:e2:22:0d:2f:89:4a:68:4d:44:6d:a1:50:
                    0d:21:08:93:e3:c0:24:f4:e3:4e:87:06:db:77:e5:
                    34:47:6a:06:f7:54:02:9f:46:34:d7:71:a5:e3:f6:
                    3a:22:3a:da:a3:a9:d6:4c:f4:3a:40:a6:2d:15:c5:
                    9d:b5:b4:9d:77:7c:ec:6c:df:cf:48:1b:3b:d3:a1:
                    e5:af:f0:b3:46:76:f0:f5:10:8b:94:db:8f:d7:85:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:B3:A5:E6:97:AE:13:36:07:F6:BD:B3:12:C4:81:00:31:86:D3
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:fc:dd:ed:77:56:72:03:58:9b:a8:ad:9b:2f:23:26:e9:
         4c:5f:99:a3:cc:b3:8d:1a:db:54:32:c6:d1:24:83:38:2d:65:
         c2:bb:de:e6:bb:22:b8:e5:77:0a:2a:70:07:a9:c3:56:a0:9d:
         8d:62:e8:6e:f6:e4:cb:e4:77:d8:a9:1b:c6:07:51:f1:85:1f:
         ca:e6:e7:31:65:21:60:c1:0f:c7:01:0d:17:0a:75:20:41:a8:
         83:02:a9:30:57:64:7d:33:07:4a:d4:95:41:71:06:39:5b:92:
         86:de:63:b7:05:af:13:d9:42:17:89:79:67:f3:07:ea:cb:52:
         54:51:f2:65:30:c4:15:a7:b3:fd:88:44:c6:b9:b8:09:be:c7:
         54:e2:93:7e:56:9f:ca:9a:22:2c:da:61:34:77:41:8f:39:48:
         e5:dd:45:bc:96:f4:ee:7a:09:be:ed:39:0f:a4:39:40:73:ca:
         fe:8c:d7:f0:dc:ff:d4:e8:32:87:2b:c6:51:fe:e6:a0:d8:21:
         d3:1d:f4:a5:d0:96:c2:59:84:88:56:2e:b9:21:68:68:e9:7c:
         02:44:cc:c8:ca:bd:71:b6:12:ee:c8:37:ee:ea:65:a5:1f:29:
         6f:11:2c:7e:9c:f8:0f:67:bc:07:cf:0a:e3:0b:00:4a:33:62:
         cf:ac:d0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2e/fOZn0AXS41pa0BJPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTU1Mzc5NDIyM2U2YjRjNjMyNzc5YjUxMzcxZGM0ZTdk
NzA3MDUwHhcNMjYwMzAyMDAwMTUyWhcNMjYwMzAzMDAwMTUyWjAzMTEwLwYDVQQD
EygwNjVjYjNhNWU2OTdhZTEzMzYwN2Y2YmRiMzEyYzQ4MTAwMzE4NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuN3oMlAFq6h4ESvFSTJeOyJjJU5
s/xNzmTZ9tiN7SSBg3cLQM9X3kxZc5dmnc0vtb4YvoIt2Ft/Uw7v0KuRdCLRy0oH
niG2O6FDddTVjwtZgSmyuxS0YCvf8mSfG6qaH6fWIbE9XS2BDfI4wfsU1VAWMKQS
/GkQlTFCQMwX7rBlT+ynjkn56ac2nRACrff3WF5NnxHCPcf4i0HNDmE1QeepgZ6A
vkLiIg0viUpoTURtoVANIQiT48Ak9ONOhwbbd+U0R2oG91QCn0Y013Gl4/Y6Ijra
o6nWTPQ6QKYtFcWdtbSdd3zsbN/PSBs706Hlr/CzRnbw9RCLlNuP14UTcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZcs6Xml64TNgf2vbMSxIEAMYbTMB8GA1UdIwQY
MBaAFCWlU3lCI+a0xjJ3m1E3HcTn1wcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYt
MzBlOTI5ZWQxMDYzLzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYtMzBlOTI5ZWQxMDYz
LzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6v83e13
VnIDWJuorZsvIybpTF+Zo8yzjRrbVDLG0SSDOC1lwrve5rsiuOV3CipwB6nDVqCd
jWLobvbky+R32KkbxgdR8YUfyubnMWUhYMEPxwENFwp1IEGogwKpMFdkfTMHStSV
QXEGOVuSht5jtwWvE9lCF4l5Z/MH6stSVFHyZTDEFaez/YhExrm4Cb7HVOKTflaf
ypoiLNphNHdBjzlI5d1FvJb07noJvu05D6Q5QHPK/ozX8Nz/1OgyhyvGUf7moNgh
0x30pdCWwlmEiFYuuSFoaOl8AkTMyMq9cbYS7sg37uplpR8pbxEsfpz4D2e8B88K
4wsASjNiz6zQXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:49 2026 by rpki-client