Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File:                     jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier:          WBHkLE8trn7Go0rm+zpGwUioPK+hUYZ/AHU4zR2WyJk=
Subject key identifier:   A8:D3:19:92:97:E1:FB:5A:36:7F:BE:98:B5:95:44:92:91:4C:A6:67
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer:       /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial:       01984A781385E10378A0FE67FCFB3363BEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number:          1594
Signing time:             Sun 27 Jul 2025 06:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:39 +0000
Files and hashes:         1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
                          2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
                          3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: QMxw8xxrwfbwueA/wsgR8WyEHD6qhrm4nLSe6ehxFAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:13:85:e1:03:78:a0:fe:67:fc:fb:33:63:be:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
        Validity
            Not Before: Jul 27 06:00:39 2025 GMT
            Not After : Jul 28 06:00:39 2025 GMT
        Subject: CN=a8d3199297e1fb5a367fbe98b5954492914ca667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:66:74:8b:e2:6c:58:15:ce:77:b3:72:3b:
                    a6:dd:86:6f:1f:56:8c:c6:1f:82:f6:43:42:05:57:
                    a5:5b:17:fc:55:ad:b2:9e:9e:66:8c:8b:45:14:32:
                    08:9d:26:c3:aa:2e:73:2b:4d:d4:97:c5:90:b2:1a:
                    7f:51:ba:8f:20:c0:d7:90:3c:99:4e:18:90:59:ec:
                    1e:57:a7:27:76:f3:03:45:cf:c4:5b:88:15:83:cb:
                    ee:b8:b3:d9:2f:88:97:06:51:56:a5:f4:75:31:8f:
                    19:5f:68:65:66:1d:ee:87:cc:18:c5:0a:de:a1:1c:
                    d6:6f:7b:36:12:51:6e:3b:f2:75:99:2c:76:89:f6:
                    ba:ff:84:ac:38:46:43:5d:91:92:db:0b:32:b0:ae:
                    b2:98:84:90:fd:dc:26:6a:f0:bd:f0:40:d5:c2:d0:
                    05:8e:b0:8c:90:b4:81:6c:59:c3:4d:55:b8:b2:09:
                    50:04:fd:7f:b0:d2:b0:7c:c8:7f:91:96:ae:5b:ee:
                    19:08:8c:1a:ce:b0:a6:a3:b0:e6:d2:a2:55:c7:f3:
                    70:ad:92:ab:47:d8:e1:80:07:a5:f0:54:fa:1c:d1:
                    70:7d:71:8c:31:f6:3c:09:38:54:c3:f3:a5:20:4d:
                    b6:3f:eb:2e:f2:d7:7d:5d:ae:c5:4d:47:cf:12:2a:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:19:92:97:E1:FB:5A:36:7F:BE:98:B5:95:44:92:91:4C:A6:67
            X509v3 Authority Key Identifier:
                keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:ce:87:34:46:4f:bd:7f:c6:1a:71:c6:0b:c9:a6:2a:ab:
         37:9a:27:c6:96:17:67:66:5c:16:4d:09:46:86:ff:ea:d7:71:
         91:5e:a0:10:48:e2:07:e6:61:8a:e3:45:21:2a:9e:46:5b:56:
         09:1b:87:60:d9:0a:3d:2e:6f:54:aa:00:14:3c:5f:19:d8:97:
         98:19:75:c6:06:33:f2:7f:b2:39:eb:b9:c7:2b:5a:2f:49:96:
         4d:37:47:28:11:f6:5c:13:a4:b8:1f:ad:69:7e:58:ba:e5:4c:
         be:96:7f:27:b3:5f:d3:6f:42:f2:e0:07:39:d5:d8:fe:76:50:
         15:93:7d:d0:11:3e:d5:de:2d:cf:0e:7b:2b:fa:e4:f8:15:9f:
         03:60:ef:27:07:02:b0:da:8c:ba:21:c2:81:1f:2e:bb:0e:c5:
         38:e2:2e:f2:c7:2c:7a:9d:25:d2:88:93:65:63:f5:e3:af:c5:
         7f:c0:8c:fc:77:b5:c0:fd:77:18:10:d6:59:b1:c4:c9:a1:33:
         d6:8e:d8:42:31:98:b2:8d:a3:af:bf:f2:04:4b:84:d0:d5:d6:
         c3:f9:4e:47:81:ce:91:19:31:f7:c3:ac:b1:26:04:79:9b:93:
         a2:86:7e:65:8f:2b:09:09:f8:0a:07:18:9a:9a:d3:6e:f4:cb:
         d1:0c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:09 2025 by rpki-client