Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File:                     jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier:          TsYhejZXiy+Vi9m6Dv2LePr0jibtLMLmjxanshRxQ4M=
Subject key identifier:   74:CA:1D:82:F8:7D:1B:0F:EC:72:18:89:DF:4F:DA:F8:93:6A:41:08
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer:       /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial:       01974D7BEC5347288A58DE609DC06C035F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number:          138E
Signing time:             Sun 08 Jun 2025 03:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:56 +0000
Files and hashes:         1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
                          2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: UjR+7jf+zC0wb00Qmb/K4053nCdSJC0bo0esBqDVXDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ec:53:47:28:8a:58:de:60:9d:c0:6c:03:5f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
        Validity
            Not Before: Jun  8 03:00:56 2025 GMT
            Not After : Jun  9 03:00:56 2025 GMT
        Subject: CN=74ca1d82f87d1b0fec721889df4fdaf8936a4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:b3:a5:69:a9:2e:a2:8f:9d:41:96:27:d9:
                    e5:63:8f:48:a0:24:99:85:13:9b:65:35:57:47:1a:
                    4c:b7:04:23:5a:ac:fa:29:1e:c4:1a:2e:6a:ac:13:
                    a2:9e:58:7f:ef:8b:91:c4:0f:f2:3f:47:b4:6d:b4:
                    be:e1:29:30:f9:e5:4c:0e:5e:00:08:27:13:01:dc:
                    ef:86:76:d4:89:52:81:88:2e:52:84:ce:90:44:d2:
                    35:89:1b:13:8a:11:a1:40:5b:83:be:6a:67:4d:af:
                    ea:8b:7e:50:8a:3c:9e:71:57:ff:5f:78:57:7d:33:
                    c3:8b:95:5d:ef:3f:93:54:dd:0c:01:4d:29:48:fd:
                    d9:28:0c:69:68:f5:fe:9c:be:dd:f8:25:19:12:e4:
                    56:6d:96:df:7c:f6:32:57:ca:7a:01:e7:04:13:0d:
                    bd:3f:25:cf:c8:63:e9:ab:1a:14:20:19:5f:4c:f1:
                    31:30:54:bd:de:c9:f9:ee:a9:17:2c:a5:3f:0f:82:
                    21:20:40:d9:b1:a2:12:24:b2:0a:86:24:f6:e8:d5:
                    a6:42:63:ea:5c:64:a7:cc:b8:ba:75:15:ff:64:34:
                    46:56:e0:86:ee:60:ca:9d:10:ca:ea:a0:ce:cb:9e:
                    cc:f1:e0:92:67:b3:cd:00:22:89:41:39:b5:7c:f5:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:1D:82:F8:7D:1B:0F:EC:72:18:89:DF:4F:DA:F8:93:6A:41:08
            X509v3 Authority Key Identifier:
                keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1e:0f:9e:08:7b:b5:0d:d0:24:2c:a7:37:70:f4:ac:0f:cf:
         ec:a4:67:cd:59:8d:66:35:2f:75:f7:48:00:f9:2c:f4:04:fd:
         2b:04:f8:78:a2:c5:af:91:a0:16:7b:8c:71:38:d7:00:c4:9a:
         90:82:36:9b:fb:92:a0:21:7a:74:14:41:36:1f:5f:d1:5f:a0:
         b2:98:91:15:f2:f9:82:0a:04:57:e6:7a:f8:ff:f0:6f:78:2a:
         80:d3:1b:8c:fd:cb:d4:41:b1:fd:a4:7b:b8:d2:3a:a9:e7:e1:
         c5:ed:91:60:c3:f1:05:ab:11:af:0d:0c:c4:a5:13:76:e6:af:
         5d:54:87:a5:3d:fc:3b:7a:ec:80:f0:83:00:16:20:94:39:d0:
         6b:18:79:e1:6b:4a:da:c1:a7:dc:5e:02:c6:14:97:81:cc:94:
         60:87:1f:9a:74:c3:63:10:2e:18:ed:dc:98:da:3c:72:cb:17:
         54:eb:03:91:9f:23:ba:17:6f:ab:e8:cf:a8:33:7a:d0:30:49:
         47:9c:42:95:67:4d:c4:31:24:45:8e:25:40:a0:c1:f9:85:aa:
         78:b5:9b:6d:69:48:c8:d3:3c:0d:e5:0a:08:ab:fb:70:0e:47:
         35:27:cc:5b:1e:76:3e:1a:b5:23:0a:81:92:0b:17:82:f4:9a:
         be:a0:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:27 2025 by rpki-client