Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File:                     jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier:          F5LfhM094bYrp1L1Ft/4ND1Sl1MGrgAh/9iWG2OrXBs=
Subject key identifier:   36:25:C1:EB:30:2D:59:01:14:71:50:9F:DF:E5:86:A5:37:F9:FF:ED
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer:       /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial:       019D37C04E21349999F6A28543521DC63FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number:          169F
Signing time:             Sun 29 Mar 2026 04:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:42 +0000
Files and hashes:         1: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: lUmJ3vUddapn+aFxf7Wp2jDNnXclotnT8uDf/tJsfqg=)
                          2: won-rMlVc5f0fR1j1wVR-WJ4XwM.roa (hash: sFqj/s20YQjjosi4ia2yNwu6UamPVX+VuDC5TE8JqcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:4e:21:34:99:99:f6:a2:85:43:52:1d:c6:3f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
        Validity
            Not Before: Mar 29 04:00:42 2026 GMT
            Not After : Mar 30 04:00:42 2026 GMT
        Subject: CN=3625c1eb302d59011471509fdfe586a537f9ffed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:b9:b6:7b:02:1b:1c:eb:a5:ad:46:5a:c9:
                    25:0a:44:ae:4f:4b:7c:eb:9e:75:bb:f6:50:79:21:
                    37:da:38:2c:80:a8:6d:ce:c9:91:a3:9d:ff:d4:d4:
                    51:34:93:05:0d:65:86:ae:86:2a:ae:ef:ee:26:1a:
                    11:f2:9e:37:ca:28:39:6a:3a:6f:a5:5c:59:23:d7:
                    bc:e9:c7:07:54:1c:54:e6:75:d7:88:21:90:d8:6b:
                    14:a3:8a:5b:b9:60:46:a4:7e:12:e6:e8:58:bf:79:
                    ed:ac:9c:9a:76:fa:35:a9:94:37:a8:8a:5b:f0:22:
                    f6:4f:d3:29:8c:c7:f9:ba:36:a3:cf:bd:17:ea:a4:
                    c3:8e:99:cd:3c:ba:0a:32:e3:99:41:bf:92:b8:e4:
                    b1:04:5a:1d:4e:78:39:09:11:87:4d:44:84:70:a1:
                    e8:5e:c7:a0:6e:a7:6b:33:7a:82:6e:fd:8f:ac:84:
                    95:11:70:d4:ec:94:df:0b:19:a5:99:c6:54:36:89:
                    a0:17:29:28:0a:ba:ff:35:eb:4c:b4:d3:4a:cc:45:
                    4b:aa:8a:fa:fb:a6:72:71:67:45:bc:10:3c:8f:02:
                    84:5c:a9:4a:53:29:7d:3e:28:77:9e:8e:81:32:28:
                    3a:42:a1:3e:12:41:c6:9d:8b:3a:6a:8b:38:ff:79:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:25:C1:EB:30:2D:59:01:14:71:50:9F:DF:E5:86:A5:37:F9:FF:ED
            X509v3 Authority Key Identifier:
                keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:ab:ff:79:ff:96:6e:a2:3d:ac:54:c1:4a:d3:db:35:d6:
         c1:69:2c:57:fd:48:8b:21:06:a6:f4:b8:76:1b:35:43:97:0b:
         a2:4c:8a:fe:a3:a0:b2:27:15:68:fe:9c:e4:84:df:f8:b7:61:
         70:03:69:53:f6:84:8a:8f:71:71:63:cc:b0:3a:59:2d:a8:4e:
         06:04:07:42:4a:07:06:3f:8f:f7:93:ef:c7:ff:52:55:79:57:
         03:50:df:ac:54:2a:f3:88:4e:f7:4b:5a:69:01:66:90:3e:e9:
         73:67:90:7a:a1:7f:c5:16:fc:38:2c:e1:28:00:44:36:30:06:
         c7:98:5b:78:e1:cf:5f:a6:7b:e8:a3:08:b3:5f:74:64:8e:ef:
         13:1d:c8:91:89:5b:f3:eb:3b:ad:5e:de:c9:9b:1c:36:d7:ef:
         74:27:51:21:64:ef:34:2a:46:fd:cc:3f:8f:ca:a2:21:96:dd:
         82:c0:f5:e5:f3:90:30:44:4f:90:67:fc:45:98:e4:27:56:9f:
         42:a5:d7:c3:9e:0f:2c:11:af:99:b4:c9:88:65:ff:6e:11:1b:
         4f:47:28:5d:06:79:ec:28:89:2f:35:ff:da:b7:c1:3e:ed:d8:
         4b:7b:c1:bc:41:c5:e1:3a:f9:f3:f1:94:77:1b:d4:40:fc:46:
         79:9d:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client