Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File:                     pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier:          fSlBWfdfcNBnfsEAvJXc2weqJxlQhxiaW2nVhikOrro=
Subject key identifier:   02:E6:E3:69:F6:9A:C6:FA:52:44:D1:79:39:46:B1:E6:39:DE:01:C5
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer:       /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial:       0198D4E009E7F57514C33AFE2D7D61E5B6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number:          050F
Signing time:             Sat 23 Aug 2025 03:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:48 +0000
Files and hashes:         1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: mKj0QAt5nJoGi4ATNfzD6o5fiDqZ7RDlCxb7Y6TegcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:09:e7:f5:75:14:c3:3a:fe:2d:7d:61:e5:b6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
        Validity
            Not Before: Aug 23 03:01:48 2025 GMT
            Not After : Aug 24 03:01:48 2025 GMT
        Subject: CN=02e6e369f69ac6fa5244d1793946b1e639de01c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:d6:f6:59:ca:db:22:af:b8:cd:53:be:c1:
                    78:81:5f:e6:77:f1:da:1f:4b:4b:ae:40:fb:53:ae:
                    2b:91:e2:ad:e2:2b:79:8f:b5:77:f2:c2:64:59:1e:
                    f0:10:5f:50:f9:6e:b6:82:ee:9c:91:25:12:69:39:
                    1c:0c:b0:72:7f:b8:9c:24:9a:7b:49:8a:70:87:c0:
                    9d:be:56:7d:fe:f1:84:ee:22:25:f9:ce:30:45:b0:
                    c2:ea:f7:b3:c4:87:b1:bd:7a:2b:f9:2a:bb:87:99:
                    2f:0d:c5:a2:19:19:b3:53:36:d4:44:7a:70:97:b6:
                    a7:fe:49:09:1b:18:cd:7c:49:d8:ac:be:83:9c:ab:
                    6a:a7:c4:ce:fb:56:7c:1f:46:66:c5:42:41:f3:89:
                    28:a5:ca:83:ec:08:53:d4:76:ca:5f:2c:c4:5c:80:
                    69:1d:40:0b:4c:4c:70:72:09:81:91:b6:fd:17:be:
                    e8:14:c7:36:dd:ae:05:6d:13:73:d1:d3:ac:b0:51:
                    2c:29:73:71:8c:d6:2c:56:c9:fe:65:47:9e:4c:a0:
                    82:d6:6b:4f:4b:65:35:cf:73:f7:56:e2:62:7b:dc:
                    79:96:45:7d:e6:f8:63:3b:8b:59:8f:f8:bb:03:7b:
                    83:eb:97:35:bc:9e:b9:7b:8f:b7:f3:11:95:e8:0c:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:E3:69:F6:9A:C6:FA:52:44:D1:79:39:46:B1:E6:39:DE:01:C5
            X509v3 Authority Key Identifier:
                keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:ca:22:3a:54:45:b1:78:61:b0:9a:83:55:10:bb:89:ed:
         d0:5a:0e:17:cc:b3:c6:2f:6d:45:bd:aa:d3:9f:26:07:11:52:
         5c:28:8d:78:8a:ee:c6:f8:9b:c7:23:0b:29:f0:91:4a:d1:bd:
         b8:8f:33:cb:7f:91:82:63:42:aa:c6:ce:8a:39:03:35:05:27:
         ce:04:79:53:85:94:cc:02:63:d5:e5:b7:d2:98:95:a4:a9:32:
         53:3c:bd:d7:43:c6:e9:94:a4:d2:58:25:eb:62:f0:c1:f3:d1:
         86:a0:81:ae:f5:78:b9:de:af:a6:56:9c:ec:88:79:aa:fe:b2:
         ae:07:a4:c7:53:80:6f:4b:ca:0b:b0:8a:69:3b:75:1a:ca:04:
         05:3c:2c:cf:ea:db:47:e8:d1:9f:34:94:aa:3d:7e:25:61:f9:
         73:50:06:c3:4c:85:53:37:e8:27:59:5e:90:57:d8:23:ab:01:
         d6:3e:69:4f:62:94:97:ee:57:21:2e:da:c2:da:cf:b7:97:c4:
         d4:ea:30:c6:a7:53:39:1c:f2:aa:a2:48:46:65:0e:48:66:69:
         8e:2a:8e:90:65:b7:60:36:81:4c:46:bb:81:ae:43:32:12:47:
         43:6b:38:ef:88:3a:5f:97:64:5f:04:38:85:ea:f6:f1:2c:05:
         18:81:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:27 2025 by rpki-client