Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          JrqAlWCyq2lxRcoHEcGu0dQhpsTNnZN7Hl7i32haJiY=
Subject key identifier:   1F:E2:2D:5E:EE:85:2E:50:58:C0:2D:CD:C8:61:ED:D8:51:89:DD:D0
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       0198D4745BCA068CDE6F05F0ADCDE33B9837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          04C0
Signing time:             Sat 23 Aug 2025 01:04:11 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:11 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:11 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: Ty9PzcVEotYAJZ7ZDnKuEwDbjLw5e+gpWkv3r0obdLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:5b:ca:06:8c:de:6f:05:f0:ad:cd:e3:3b:98:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Aug 23 01:04:11 2025 GMT
            Not After : Aug 24 01:04:11 2025 GMT
        Subject: CN=1fe22d5eee852e5058c02dcdc861edd85189ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:e6:d7:ec:6d:f8:9a:20:c6:7d:2a:c1:38:
                    66:23:06:21:14:26:a2:c1:a7:24:69:42:1c:1e:eb:
                    62:10:21:7e:8f:d1:f8:3e:40:87:0f:9a:1c:47:37:
                    aa:d5:01:74:96:fb:e6:09:b9:14:63:11:48:30:2a:
                    57:3d:c0:f9:7a:ab:62:04:18:06:fc:25:c8:0e:c5:
                    dd:50:40:50:93:49:2b:54:c8:50:f0:44:87:66:ed:
                    31:7c:32:e6:be:61:23:ec:75:c9:b3:85:e6:b3:d0:
                    7e:fb:60:0b:b7:c6:81:fe:d2:2c:96:f0:f7:dc:f7:
                    28:93:63:be:f8:51:68:22:e9:72:35:bd:6a:f0:1b:
                    a8:39:9c:75:4e:d5:98:ae:27:3f:d7:75:96:83:45:
                    48:0c:4e:5e:e9:4c:69:77:50:53:de:18:75:b2:b0:
                    02:cf:a2:aa:a3:e1:0e:79:78:58:c8:21:aa:fe:02:
                    93:89:f5:8e:5e:7b:cc:6d:9b:02:79:35:f4:b5:d6:
                    ae:7e:85:95:63:69:07:0b:90:26:58:e2:59:7e:2d:
                    ac:3e:f5:b1:0f:d8:9b:47:2e:b3:09:4d:41:3a:b6:
                    5c:b8:6a:33:b3:19:ac:5a:9d:b3:c3:10:0e:2e:3d:
                    9e:8c:2d:9c:51:50:b4:d3:83:4c:5d:d5:5f:ac:33:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:2D:5E:EE:85:2E:50:58:C0:2D:CD:C8:61:ED:D8:51:89:DD:D0
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:80:7a:eb:f3:49:f9:fd:7e:a5:63:c0:de:ea:75:28:65:9f:
         38:bb:d3:10:e3:47:5e:33:a0:42:23:f3:f8:08:d5:07:58:27:
         f1:55:91:b1:0a:3b:4c:c8:15:59:ed:5e:5f:1f:a7:d8:18:1d:
         20:10:af:21:0b:17:c6:b6:5e:f7:4b:ef:30:30:3a:93:78:ae:
         94:53:39:e7:b2:9b:40:c0:87:cd:91:a2:31:06:97:b9:a1:46:
         56:6b:8b:f7:e1:ea:05:df:6d:51:3a:7a:6b:9a:50:5f:e8:13:
         1f:a5:e5:69:c6:db:1d:ba:d9:e4:23:43:92:46:4f:2a:7b:7f:
         54:2e:48:37:42:69:21:6c:07:5d:8e:90:fe:6f:cb:3a:87:2c:
         99:40:f2:e4:d7:e9:91:7e:e3:aa:fb:bc:2f:37:cb:12:53:39:
         51:d6:a5:27:80:c7:68:20:9b:b3:fb:a5:43:52:f9:50:e7:74:
         f0:84:48:93:35:ac:34:9f:ab:31:aa:1f:f3:d3:51:74:eb:97:
         11:ec:fc:04:81:c4:dd:7b:3a:0c:1b:6e:7e:b9:ee:f1:85:d1:
         6f:92:f2:d0:38:a2:c7:c7:01:ef:1c:46:d7:23:fe:c3:30:df:
         65:a2:b0:c7:b6:be:a3:8b:8b:ba:e0:0b:da:f1:db:6e:ac:f5:
         38:25:26:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdFvKBozebwXwrc3jO5g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj
ZWViMDQwHhcNMjUwODIzMDEwNDExWhcNMjUwODI0MDEwNDExWjAzMTEwLwYDVQQD
EygxZmUyMmQ1ZWVlODUyZTUwNThjMDJkY2RjODYxZWRkODUxODlkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Dm1+xt+Jogxn0qwThmIwYhFCai
wackaUIcHutiECF+j9H4PkCHD5ocRzeq1QF0lvvmCbkUYxFIMCpXPcD5eqtiBBgG
/CXIDsXdUEBQk0krVMhQ8ESHZu0xfDLmvmEj7HXJs4Xms9B++2ALt8aB/tIslvD3
3Pcok2O++FFoIulyNb1q8BuoOZx1TtWYric/13WWg0VIDE5e6Uxpd1BT3hh1srAC
z6Kqo+EOeXhYyCGq/gKTifWOXnvMbZsCeTX0tdaufoWVY2kHC5AmWOJZfi2sPvWx
D9ibRy6zCU1BOrZcuGozsxmsWp2zwxAOLj2ejC2cUVC004NMXdVfrDMuwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/iLV7uhS5QWMAtzchh7dhRid3QMB8GA1UdIwQY
MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt
ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx
LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoB66/NJ
+f1+pWPA3up1KGWfOLvTEONHXjOgQiPz+AjVB1gn8VWRsQo7TMgVWe1eXx+n2Bgd
IBCvIQsXxrZe90vvMDA6k3iulFM557KbQMCHzZGiMQaXuaFGVmuL9+HqBd9tUTp6
a5pQX+gTH6XlacbbHbrZ5CNDkkZPKnt/VC5IN0JpIWwHXY6Q/m/LOocsmUDy5Nfp
kX7jqvu8LzfLElM5UdalJ4DHaCCbs/ulQ1L5UOd08IRIkzWsNJ+rMaof89NRdOuX
Eez8BIHE3Xs6DBtufrnu8YXRb5Ly0Diix8cB7xxG1yP+wzDfZaKwx7a+o4uLuuAL
2vHbbqz1OCUm/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:41 2025 by rpki-client