Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          aMd/hQ1cbhQemf4boS4p1S5t54NfP9glIHPIl7H941Y=
Subject key identifier:   32:54:C4:6F:C9:FE:28:0C:FF:18:C9:F8:E4:C1:D1:EA:06:C3:D6:62
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       0197B70EFA17F9B2798EBF5DC398C9B68751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          0DE6
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
                          2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
                          3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: SB/YDTFpJhWcED7uXbPR8zcDoefgSNG3IQPfmP2D7sI=)
                          4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
                          5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
                          6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
                          7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
                          8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
                          9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:fa:17:f9:b2:79:8e:bf:5d:c3:98:c9:b6:87:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=3254c46fc9fe280cff18c9f8e4c1d1ea06c3d662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:db:fb:97:4d:0c:a3:37:f6:87:be:2b:9a:
                    f4:cb:67:0b:2f:ed:8d:b5:d6:00:90:37:56:0c:7f:
                    8c:9a:9c:ff:55:40:4a:9f:5c:9b:84:a1:f7:a8:64:
                    25:a5:f4:ff:90:b4:df:2e:fa:27:0d:ef:25:61:3f:
                    27:73:04:81:00:45:30:b0:9e:a1:6e:58:ed:c7:f9:
                    21:d7:0b:0b:9d:67:9d:59:b4:d6:ae:59:20:bd:10:
                    e5:bb:f8:cd:80:80:79:66:62:0b:25:5c:af:2d:d5:
                    99:b0:16:f0:06:f3:c0:fa:a1:4d:70:d6:91:09:1c:
                    2d:5a:92:43:eb:66:58:bf:e5:c7:b9:1d:71:af:91:
                    88:7a:8c:16:e5:f8:cb:6e:68:02:e8:1d:51:fc:0d:
                    66:58:b1:d7:47:58:2f:a5:d7:b4:db:8b:ce:3d:f7:
                    d5:f8:31:98:23:ec:d1:b8:7a:4f:bc:b5:c4:95:12:
                    60:19:e2:12:e4:ba:87:52:82:d2:c4:7f:21:8d:7b:
                    54:72:f1:93:22:65:ec:1b:49:6b:19:b5:39:76:aa:
                    76:4c:33:82:c1:aa:9f:20:bd:35:72:56:af:7a:1f:
                    0f:b7:7e:a7:56:9c:1a:99:0f:77:42:48:42:a0:62:
                    2a:10:3f:67:6c:1e:5b:c2:ba:c5:60:11:f5:2c:59:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:C4:6F:C9:FE:28:0C:FF:18:C9:F8:E4:C1:D1:EA:06:C3:D6:62
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:b8:ab:fe:02:85:82:14:14:1b:08:98:c2:fa:04:b5:6a:
         6d:93:fe:6d:0e:df:dc:68:b1:df:b9:ea:c4:20:5c:83:e9:d6:
         0d:49:a5:dd:ec:7c:8c:8e:d2:77:02:01:0c:46:50:4f:12:e0:
         b6:63:7b:08:91:20:f0:4b:55:bb:e2:60:1a:02:2b:68:bc:80:
         6a:1d:12:bd:36:f9:f1:f2:08:54:ed:5d:30:89:8a:78:df:01:
         f4:27:87:7c:de:0f:bc:e3:4a:a1:ba:58:da:75:1e:42:25:c9:
         0e:72:a1:a1:06:3c:50:73:28:39:19:39:97:27:08:be:c8:07:
         6e:64:40:66:ba:b1:4e:f4:e5:d7:af:56:ab:2e:9e:7b:0c:6f:
         8d:3d:65:fe:f8:d3:53:40:fa:6b:19:98:66:f9:5b:32:9c:e0:
         2b:2a:93:ef:82:0e:81:25:a9:b1:e5:12:5b:47:ef:53:9c:89:
         e9:d9:0f:7b:7e:ed:2f:e5:8b:3c:d7:61:61:34:37:11:28:1d:
         44:f4:38:58:c6:e3:74:9b:91:74:17:88:1e:55:cb:be:dd:2a:
         f5:4c:57:c7:d6:2c:90:34:69:03:15:b0:c0:c6:1b:fa:b3:35:
         b4:2f:d6:4c:6c:1a:87:56:89:c1:4b:d5:61:e6:cd:d6:15:aa:
         8e:fa:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:50 2025 by rpki-client