Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File:                     jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier:          qgYPgB3oDjmJizEZxhKdyeNvsxXSYHpshP5Dw1rBxHo=
Subject key identifier:   ED:EC:DF:9E:20:B5:03:F1:83:9D:D5:19:52:02:53:26:9E:AB:7B:92
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer:       /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial:       0197B70E57CC27321B5F3C2224F9037B0D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number:          0ABD
Signing time:             Sat 28 Jun 2025 15:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 15:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 15:00:59 +0000
Files and hashes:         1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: MMIxW8GBKm3lYUwYSLFteuVygxYoOPYXA2MlQ6W0U6Y=)
                          2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:57:cc:27:32:1b:5f:3c:22:24:f9:03:7b:0d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
        Validity
            Not Before: Jun 28 15:00:59 2025 GMT
            Not After : Jun 29 15:00:59 2025 GMT
        Subject: CN=edecdf9e20b503f1839dd519520253269eab7b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:ae:81:fc:4e:95:a4:76:be:b5:be:f5:a6:
                    ee:f9:4d:a9:f1:96:43:17:bf:15:cc:bb:b4:fc:f9:
                    de:7c:dc:cb:11:54:c4:7a:f7:4e:05:ed:4f:6b:4e:
                    b0:00:aa:86:8b:f5:60:a8:b2:c0:98:59:db:7d:ff:
                    ff:97:0b:00:02:9f:c8:86:66:04:0a:24:48:0d:4b:
                    23:c4:21:56:00:54:e8:91:1e:5d:94:72:1b:d8:52:
                    b9:8d:c2:57:3a:53:f7:27:54:50:5b:2c:84:dc:95:
                    39:ed:0a:5f:a0:5b:bd:e4:7e:e1:70:0f:96:cb:b3:
                    83:f9:69:61:27:e6:dc:79:a5:0c:7b:cb:e4:33:87:
                    e3:b7:3b:3f:43:47:98:46:7b:b5:04:87:5a:0c:96:
                    e1:fd:ae:21:68:2f:a8:f1:e0:6c:93:9c:bb:35:0e:
                    2c:8a:ab:0e:82:39:72:11:8b:f0:ef:a7:bb:53:26:
                    00:f3:34:f7:9a:b4:dd:fa:af:99:ad:1d:2f:e6:18:
                    ec:7d:54:cd:b3:74:06:35:5d:76:4b:c9:04:b0:e7:
                    1c:4e:79:0f:5c:aa:31:90:ba:a6:c6:2a:d2:dd:a8:
                    74:0b:79:83:f7:4f:0a:c8:57:9c:d3:b2:e5:75:e9:
                    26:ba:77:18:7d:cb:45:3e:e1:16:01:5e:24:99:4b:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:DF:9E:20:B5:03:F1:83:9D:D5:19:52:02:53:26:9E:AB:7B:92
            X509v3 Authority Key Identifier:
                keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:33:de:de:95:1b:9b:0d:fa:d2:e8:10:ef:b5:ca:31:c5:
         d0:41:f0:cf:cf:9a:95:97:94:c8:1f:b7:ab:77:dc:2e:44:1e:
         cd:10:9f:11:e8:e9:64:3b:02:bd:e6:a0:c2:90:e7:93:4a:fa:
         d9:3a:d9:ec:c9:a1:14:56:23:4b:f7:c9:31:f6:a5:76:e9:7e:
         f0:f1:e6:2a:93:ce:e9:52:e3:09:60:ce:7c:79:13:e8:70:39:
         23:c9:3b:bb:48:ca:24:a9:5b:61:d7:00:90:44:c3:8a:6e:69:
         a0:eb:47:11:f3:63:43:1b:7a:62:b1:2c:dd:ef:1b:14:44:12:
         79:1e:74:33:15:6a:af:22:a2:cb:6e:64:21:64:4b:74:e0:e4:
         99:3a:19:d5:d4:0d:42:db:2f:be:11:3a:be:b5:75:f5:3c:67:
         8c:d7:07:b7:e1:e9:07:4d:90:71:e4:10:e6:b4:42:7f:9e:7e:
         26:b2:f2:24:c7:a5:bc:d1:02:2e:07:3f:42:8f:ab:b9:42:16:
         aa:cb:2d:1a:7a:af:5f:07:09:12:c3:ab:b1:c6:08:ab:45:72:
         88:10:39:d8:eb:73:be:cd:e4:ca:9f:b4:13:96:69:59:e5:5f:
         a4:e2:72:29:2a:35:fc:25:0e:ec:46:5c:87:1a:fd:c1:fb:96:
         e9:10:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:27 2025 by rpki-client