Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File:                     jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier:          +Sqe9i9trrWviIj4jFUDxLZomBrLuMvoUXbE1uEraUE=
Subject key identifier:   F2:88:D9:87:05:15:BF:20:3B:A8:E2:77:02:5E:5B:48:63:57:20:02
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer:       /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial:       01976E508A1120C09511B97903A5B9829134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number:          139F
Signing time:             Sat 14 Jun 2025 12:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 12:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 12:01:01 +0000
Files and hashes:         1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
                          2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: MHE1cID+VGVeFol+y+w4sifUVsD4Cm4i6d9jl4q0hLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:8a:11:20:c0:95:11:b9:79:03:a5:b9:82:91:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
        Validity
            Not Before: Jun 14 12:01:01 2025 GMT
            Not After : Jun 15 12:01:01 2025 GMT
        Subject: CN=f288d9870515bf203ba8e277025e5b4863572002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:8c:50:b1:4b:c3:74:bc:a0:f2:01:02:16:
                    6c:97:72:60:e4:30:08:c8:37:d4:48:80:a6:60:dc:
                    b4:98:7e:da:65:5a:76:9b:ad:cb:43:66:de:6b:79:
                    c1:a5:7a:3f:20:45:5f:1b:03:75:ef:61:ed:75:83:
                    09:b9:b1:67:e9:ea:ab:da:3b:8c:c4:c8:82:b9:d2:
                    fb:2a:9c:b4:2c:1f:06:4a:97:83:64:22:43:0f:56:
                    ca:ee:b9:fa:90:63:32:a4:6d:78:62:b6:e2:e3:0d:
                    95:60:10:f9:bc:c3:9e:68:d6:3e:e4:0c:b6:c6:d5:
                    5a:14:e0:6b:08:6a:34:97:0f:4e:09:6f:12:d3:d5:
                    a6:a3:c9:9a:eb:3e:58:23:14:cf:ac:39:a7:f8:fb:
                    a4:62:5c:56:88:cb:81:0d:ee:18:f6:69:12:dc:eb:
                    0a:fb:18:25:20:a6:32:4d:d0:c7:83:51:8f:e9:37:
                    b1:4f:6b:f2:40:85:11:db:c2:7b:87:a3:ee:06:88:
                    58:20:65:b3:ae:9e:18:2e:89:c7:f5:3f:b5:a7:7a:
                    25:c5:42:ad:e5:89:99:db:03:56:a3:f5:8e:e2:47:
                    96:22:69:e0:b0:1d:a8:4e:cc:76:18:a2:82:b3:9c:
                    41:ef:ed:9a:92:d9:33:a6:4d:3e:90:87:dd:98:52:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:88:D9:87:05:15:BF:20:3B:A8:E2:77:02:5E:5B:48:63:57:20:02
            X509v3 Authority Key Identifier:
                keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:bb:c3:a0:c7:6a:d7:24:38:f4:96:28:40:09:54:86:88:
         41:32:bb:87:80:44:50:0d:f4:d7:05:3a:44:cd:18:1e:51:85:
         f5:22:91:3d:3e:06:30:08:93:db:ec:2c:7f:fb:c1:f2:b9:55:
         e5:22:e1:0e:a8:bf:ce:09:59:31:9b:46:34:bd:39:41:7a:a8:
         69:71:3e:3a:d1:c7:28:f4:b4:23:7b:2f:44:f9:b3:e7:f0:2a:
         22:1c:51:74:b3:3b:35:51:45:ce:be:e8:94:a0:1e:8a:ef:5c:
         3d:5d:83:3b:aa:08:e6:86:47:f5:80:9e:9c:6e:b9:ed:f3:fa:
         0e:f8:2d:36:cc:8a:73:c7:0f:ed:38:e1:0e:9d:ff:f2:40:f7:
         bf:0a:12:96:dd:91:fa:9c:cc:65:3a:b0:dc:e9:c5:cc:65:01:
         ff:53:ad:15:8f:61:54:53:63:58:2b:37:05:91:70:46:3b:24:
         10:00:7a:9b:f6:fd:5c:47:d8:ca:c2:20:f1:94:5e:d4:9b:60:
         4a:b5:a4:7d:23:95:dd:1b:52:51:d8:c8:e5:64:87:13:10:11:
         25:3a:22:49:be:74:88:aa:02:5e:b5:19:4c:85:86:9e:15:40:
         c0:3b:11:7e:01:a3:8c:82:5a:1c:3f:bd:ac:e5:f5:53:52:54:
         f4:76:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:09:41 2025 by rpki-client