Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          2lkJPgIz/F3exWttam2z+TndBk0CNGVgZ11kXSRBtJc=
Subject key identifier:   34:B5:95:AF:6B:25:5D:28:8C:92:89:E3:15:CB:0A:85:30:01:35:A2
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       01989034DF145700DD2E6AAA6C57567CC551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          126A
Signing time:             Sat 09 Aug 2025 19:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:40 +0000
Files and hashes:         1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: JtF6k6b/LiztAGVf6dqPTisZ4MbrX6LqXlDVlv2mTt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:df:14:57:00:dd:2e:6a:aa:6c:57:56:7c:c5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: Aug  9 19:00:40 2025 GMT
            Not After : Aug 10 19:00:40 2025 GMT
        Subject: CN=34b595af6b255d288c9289e315cb0a85300135a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:13:6c:75:1a:0f:3a:f8:23:6a:30:93:d7:
                    8a:c5:ee:31:40:79:82:2b:21:20:a3:78:17:74:fd:
                    57:24:ea:d4:51:04:0a:64:32:4b:51:e1:11:a4:a8:
                    6b:a4:9d:a8:5f:d8:07:7c:bc:38:66:30:75:60:59:
                    58:f9:f9:07:86:64:f9:6c:59:0f:b7:68:72:f1:4b:
                    f9:28:24:15:ac:9a:b6:3f:ed:bd:14:43:db:94:7a:
                    8a:7c:39:d0:92:52:ac:64:ee:2b:1e:70:fc:5f:5b:
                    6c:d9:c3:99:2f:12:31:ba:15:36:b1:57:49:bc:7c:
                    c7:c2:5a:ae:37:f7:eb:27:8b:f5:01:a5:6b:c7:7b:
                    56:b1:f7:76:60:b2:44:cd:12:b2:5a:8a:0d:d7:0a:
                    0c:2e:93:10:33:07:9b:21:53:b4:28:a4:30:99:2b:
                    ee:bb:d7:ee:e5:8e:cb:ac:4e:9f:4c:a9:b2:52:17:
                    56:c5:ac:57:0f:f8:7c:16:22:f1:1a:9b:4a:8c:13:
                    04:53:39:f0:6b:b2:f6:eb:19:1f:85:70:f8:ef:a9:
                    02:b5:bb:0c:0f:0a:39:23:12:ef:66:92:ff:91:a6:
                    09:8a:82:92:47:33:e7:88:96:30:47:8f:62:36:f1:
                    18:ae:9a:61:c2:98:da:fd:6a:50:3a:a2:5d:3a:e4:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:95:AF:6B:25:5D:28:8C:92:89:E3:15:CB:0A:85:30:01:35:A2
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:04:50:33:c2:e1:cb:c9:7c:0f:52:76:69:2c:35:c4:a2:d1:
         2e:0a:c3:0b:bd:84:35:a7:fe:2a:36:6d:a2:22:a9:8c:01:bf:
         11:62:61:b3:96:6c:81:28:0e:57:f1:bc:7d:b3:c4:ed:74:5b:
         76:c8:05:5c:de:da:d6:fa:22:19:0a:88:71:96:71:33:6f:4b:
         61:19:23:81:0d:14:80:2c:5d:c3:4f:9a:a7:62:75:b5:c3:23:
         b1:65:e4:a6:34:93:ea:f6:f7:a1:c3:1b:a4:a6:ab:50:f2:b2:
         3e:e9:0b:0c:9e:b1:89:af:be:00:88:7c:48:73:80:16:5f:b1:
         8d:a0:5a:ce:fa:10:7e:21:bf:f4:1e:6b:1b:cd:6e:ac:87:2d:
         73:c2:5c:eb:08:0f:6a:f5:8c:e9:8f:5b:4a:dc:5d:80:ff:bf:
         82:d5:9a:b8:23:d8:54:df:16:3d:72:a7:49:bb:26:c4:2f:5d:
         b9:07:9b:a0:7a:35:1f:65:b4:6a:62:0e:44:5c:2b:42:18:8b:
         b5:98:01:f8:6b:e8:d6:a3:5e:28:73:78:9b:ab:a5:b5:1b:05:
         74:d1:ea:2f:09:33:88:ad:7e:f2:80:20:0c:02:26:ed:cc:66:
         9a:27:b9:da:ca:88:d6:a4:be:62:57:75:e8:93:b6:44:63:68:
         5e:0a:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:04 2025 by rpki-client