Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File:                     pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier:          t1lTlvAbfON5ClKPObYgv+mmfNFyq2HKfGbTq+scwAw=
Subject key identifier:   71:40:CD:EE:CA:51:DE:59:89:FF:96:E7:FF:4A:57:ED:12:95:C5:02
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer:       /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial:       0196C1CB3FCA2691773BA685D658AF0E8555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number:          03FC
Signing time:             Mon 12 May 2025 00:00:44 +0000
Manifest this update:     Mon 12 May 2025 00:00:44 +0000
Manifest next update:     Tue 13 May 2025 00:00:44 +0000
Files and hashes:         1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: /5Fn4y8ttIxOv+isFBTlXt2rRu49QoS/wVD09QI5dWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:3f:ca:26:91:77:3b:a6:85:d6:58:af:0e:85:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
        Validity
            Not Before: May 12 00:00:44 2025 GMT
            Not After : May 13 00:00:44 2025 GMT
        Subject: CN=7140cdeeca51de5989ff96e7ff4a57ed1295c502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:0c:9b:12:f2:36:14:46:5a:9c:d7:ce:0d:
                    0a:0c:a5:be:7c:e2:b0:dc:56:cf:9c:06:50:e9:c9:
                    d9:56:54:e7:b6:0f:4e:28:75:65:7e:f3:fe:46:38:
                    a0:6b:d5:67:ba:0c:e5:92:f8:c4:49:b3:0e:3e:d6:
                    80:2e:72:29:41:8d:8f:a9:60:11:23:4f:30:62:fc:
                    87:dc:84:1f:e4:8a:13:6e:40:3b:18:24:7a:d9:d3:
                    45:89:32:ef:f8:89:64:61:b2:13:ea:4f:7c:f1:d4:
                    a6:2f:00:44:31:de:0e:77:9c:93:9d:c8:c6:e5:4d:
                    eb:a1:e7:95:1b:eb:cc:43:80:bb:74:ee:48:06:c7:
                    4a:c6:a4:9e:06:dd:1b:3d:7e:12:b9:92:a0:32:e9:
                    d5:08:d1:37:e7:55:55:9d:72:2a:10:d6:d2:49:a2:
                    3f:39:5a:2b:29:4c:e0:e0:33:66:c9:a3:4b:13:15:
                    05:85:c5:c2:bb:7f:d3:38:15:9f:23:17:d5:6d:b2:
                    14:55:05:1d:a4:3e:ce:72:79:36:77:0f:08:e7:c9:
                    a0:6b:80:72:c9:0c:8e:b4:28:0d:27:a2:7c:e1:c3:
                    a9:b5:af:d5:da:79:0b:a5:74:57:c9:f7:ee:15:ee:
                    cd:60:dc:2e:c4:7e:b2:f5:e3:be:3c:ae:dc:58:9b:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:40:CD:EE:CA:51:DE:59:89:FF:96:E7:FF:4A:57:ED:12:95:C5:02
            X509v3 Authority Key Identifier:
                keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:94:27:4a:59:22:48:c2:95:a8:fe:01:cf:67:9c:c2:f7:
         db:14:49:54:73:c7:05:5e:b1:03:6a:b7:56:2e:52:0e:82:f3:
         d2:39:c9:40:1d:13:f3:68:4f:c2:a8:aa:c5:e4:98:98:b5:12:
         5e:cd:e7:bc:0f:94:61:cd:94:60:25:c0:ee:50:d9:00:31:7b:
         74:7e:ac:f5:66:4f:e2:dc:dc:58:8c:3a:29:bc:ff:9e:28:f3:
         1d:d7:e4:e8:74:15:84:9f:ad:80:8b:4e:16:1c:82:2a:ab:90:
         54:39:ab:96:7c:f1:01:a6:a4:2f:f7:4a:b9:1c:3f:5c:2d:9b:
         95:b5:2e:7f:b2:25:09:6d:b9:64:c1:30:cc:90:e7:99:a3:b5:
         d2:2e:f0:b5:44:7e:5f:02:89:f4:b6:1e:3f:68:aa:9e:12:dc:
         f1:f5:b5:5d:55:1e:a5:da:39:9d:69:80:92:0f:de:e3:10:50:
         b9:59:e1:02:3b:22:f9:3c:06:11:4c:b8:df:12:8d:98:2d:68:
         01:88:42:6d:9c:05:e7:27:65:f7:ef:c7:37:ea:8c:00:71:d9:
         3b:9d:10:75:7b:ef:45:7e:c2:37:1a:1a:3b:cc:d2:c5:6c:5b:
         de:b3:96:bb:c8:fa:c3:6f:1c:4c:43:2e:b3:dc:fa:fa:12:b3:
         43:0b:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:44:22 2025 by rpki-client