Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File:                     jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier:          vL5m08qR2MvL5O7wHlfyeSP3mdR5bv8zQaF5vcLxe40=
Subject key identifier:   0F:ED:1A:68:46:56:BE:EB:69:59:1E:EB:D8:72:5F:FC:D7:95:70:DE
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer:       /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial:       0199FEEB89DA3411DBD756CF816AC31EB1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number:          14F3
Signing time:             Mon 20 Oct 2025 00:01:13 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:13 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:13 +0000
Files and hashes:         1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
                          2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: CQ15N+ZgyRuaBQ9HWT3II/5GScB+2vXWvN1LNPLNolQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:89:da:34:11:db:d7:56:cf:81:6a:c3:1e:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
        Validity
            Not Before: Oct 20 00:01:13 2025 GMT
            Not After : Oct 21 00:01:13 2025 GMT
        Subject: CN=0fed1a684656beeb69591eebd8725ffcd79570de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:ee:54:0f:1a:ab:7a:0b:e2:59:fa:ba:2e:
                    c3:48:70:a6:18:5a:8f:1b:94:3e:52:7c:7a:a5:1f:
                    17:b7:9d:be:a3:46:05:d1:31:9b:bb:40:7d:e8:79:
                    f0:63:a8:e8:5d:6c:6a:3f:6e:a6:66:a1:56:b8:a9:
                    0f:6f:e2:fc:d5:8e:f7:29:ec:09:6c:21:bc:79:1e:
                    5b:a9:01:a1:97:c1:d7:f8:03:22:ea:81:06:3d:8b:
                    95:92:a8:ef:45:65:56:e5:f6:1d:c7:81:61:f8:3e:
                    75:a9:68:6c:cb:d3:7a:6d:9f:29:a9:0f:d8:ec:78:
                    12:11:77:1c:55:cc:ae:d9:3a:61:60:d2:63:72:25:
                    77:7f:6a:9a:37:ad:7c:07:80:68:23:7a:8c:e4:00:
                    1e:2f:49:1b:23:a8:dd:7e:80:b3:22:dc:8c:61:30:
                    3f:73:51:4e:c3:b8:75:c8:38:19:7d:7f:06:62:78:
                    9b:d7:f7:e4:19:e3:64:03:49:05:72:e2:9f:ef:98:
                    c1:39:59:13:91:58:42:6e:50:f0:e4:2a:b4:94:15:
                    2f:2c:42:64:ab:f3:35:8f:53:93:46:5b:11:95:3f:
                    7c:7d:3f:08:44:52:94:ea:5f:be:36:ea:f9:7a:f1:
                    8f:4f:bf:6b:47:ba:08:e7:89:b2:2e:76:7f:be:52:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:ED:1A:68:46:56:BE:EB:69:59:1E:EB:D8:72:5F:FC:D7:95:70:DE
            X509v3 Authority Key Identifier:
                keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:69:ce:84:6c:cc:3b:8a:38:1c:19:c1:7d:43:7c:2a:8a:6d:
         1a:aa:3a:bd:e2:c7:05:5a:78:c5:96:4a:91:1c:2a:8c:13:21:
         22:9e:5f:e7:f8:a0:56:7a:dd:40:ed:d6:13:c6:e7:35:9d:ea:
         18:11:d4:65:33:a1:5d:e4:5c:b2:87:74:e9:7f:78:b9:ab:32:
         8c:c5:98:7e:85:61:a9:81:c8:8b:c8:46:2b:26:e0:93:f4:fc:
         95:75:9f:56:7e:aa:6d:70:df:15:f0:53:83:70:36:8d:06:2a:
         41:95:04:69:63:d3:01:bb:3a:4d:ec:24:80:18:1e:22:8d:92:
         a5:c5:93:e9:91:fb:d9:c0:4a:28:58:4c:a5:32:7e:75:15:69:
         b4:07:41:e2:95:8c:6e:2b:f2:67:71:4b:36:cc:a8:7a:d4:0b:
         9d:c8:b6:8b:1e:d7:eb:0d:68:ce:8e:07:c3:dc:76:8a:84:a0:
         f1:1f:d3:a7:39:bb:a7:2b:9b:03:ce:84:4e:b1:b1:92:7b:09:
         b6:c8:d6:fc:b4:97:f7:c3:48:85:4e:70:95:6e:66:7a:c5:1b:
         81:7d:e3:1b:2f:01:ad:43:62:1c:ae:4b:70:72:e5:5f:a9:d0:
         2a:37:b7:cb:23:b3:14:a6:bd:16:97:23:8a:7d:ac:1e:49:a2:
         79:fb:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:38 2025 by rpki-client