Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
File:                     JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json)
Hash identifier:          6yzKx15UENl6HlNzT6W5riIfYf+eVxhdBp7UO+dH6Js=
Subject key identifier:   08:35:C8:F9:9D:71:43:B6:CC:A2:C4:38:15:6D:B4:DE:63:58:B5:A6
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Certificate issuer:       /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial:       019F85320CB355EA092B656E94463C7EC14C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
Manifest number:          0273
Signing time:             Tue 21 Jul 2026 15:01:17 +0000
Manifest this update:     Tue 21 Jul 2026 15:01:17 +0000
Manifest next update:     Wed 22 Jul 2026 15:01:17 +0000
Files and hashes:         1: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: i2ddeZfTczmAIebR793rpas8prC27QKeq+fTTUkwtio=)
                          2: Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa (hash: IxK5X9Ss7ShkMVKfEZu5A5rPZ/yNm8neoiWEbru4efI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:32:0c:b3:55:ea:09:2b:65:6e:94:46:3c:7e:c1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
        Validity
            Not Before: Jul 21 15:01:17 2026 GMT
            Not After : Jul 22 15:01:17 2026 GMT
        Subject: CN=0835c8f99d7143b6cca2c438156db4de6358b5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:9d:d6:17:80:32:82:72:3b:fa:7a:96:a5:
                    38:1d:9d:c6:de:6f:0f:82:2c:48:ca:d2:42:a3:d5:
                    e8:95:d2:56:40:65:1d:bd:77:76:b1:c4:b4:a7:e0:
                    4b:19:e6:2c:0d:55:40:73:b8:6a:ab:1d:9e:58:a4:
                    2b:97:a6:0f:29:de:fa:bc:a7:c7:65:ef:ee:18:bd:
                    a8:c0:e7:09:cd:7b:e5:36:5a:e7:87:15:b5:cb:f5:
                    f7:34:2b:78:2a:52:44:bf:01:e2:0e:45:1d:f4:1b:
                    fb:86:e2:97:03:24:7d:e5:26:68:ce:76:9a:fd:1b:
                    02:e6:fa:29:53:5b:b5:df:bc:18:52:9d:e0:73:56:
                    1e:0e:d0:23:99:13:dd:6e:71:18:e1:b3:93:75:5d:
                    fe:11:d0:9b:2e:a6:77:1f:a2:5c:f7:6b:26:a1:56:
                    6b:ee:01:ed:f0:07:bd:ea:76:e8:d1:da:dd:b2:97:
                    a6:41:0c:7b:50:af:83:86:23:c8:88:82:10:91:d9:
                    d3:aa:16:41:32:c4:29:77:d7:eb:dc:18:7e:be:ed:
                    56:fa:1c:3f:31:d6:87:f8:e7:a0:4a:f7:6b:a7:53:
                    a2:ab:ac:c2:48:c6:32:b1:f8:a0:56:49:1a:14:ba:
                    e5:57:1c:4b:2e:b9:58:28:3f:c2:23:20:af:da:9a:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:C8:F9:9D:71:43:B6:CC:A2:C4:38:15:6D:B4:DE:63:58:B5:A6
            X509v3 Authority Key Identifier:
                keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:74:f6:ce:9f:3d:8c:03:13:a2:46:26:8a:f5:d0:41:f4:
         43:75:f8:a0:c6:4f:e3:08:9c:33:9d:3f:bb:64:1b:84:a6:a9:
         e8:85:cd:b9:54:c0:3b:5d:f6:83:5c:bf:4d:c0:e1:d1:ca:6f:
         0c:b2:93:cf:5f:e1:82:e7:bb:f4:98:76:24:2a:0a:21:09:b8:
         eb:39:29:5a:ed:d3:94:88:eb:5e:74:7b:8d:cc:32:8e:71:ca:
         3d:a8:c9:3e:1f:96:12:2c:44:70:45:8f:20:27:eb:13:09:74:
         d2:54:c1:80:18:18:56:4f:7f:71:97:26:49:c7:f4:13:bb:a2:
         34:94:42:b9:82:87:c4:73:0f:60:31:a1:ab:2e:4d:a5:34:a5:
         a3:2c:53:9a:72:c2:1c:13:a4:cf:b3:09:c2:8a:f0:bc:42:72:
         dc:5f:4d:4b:51:ce:31:34:b3:c4:11:ae:70:a4:ea:8f:f2:6e:
         9c:aa:84:6e:98:5c:e9:53:71:ea:be:a9:24:64:2b:b2:51:60:
         e0:7a:4a:ee:6e:ee:74:7f:22:c8:fd:3e:d3:4e:ed:e8:7b:ba:
         a4:a9:40:27:54:67:ad:aa:01:f4:13:9e:5f:8d:ec:06:77:4b:
         b5:93:e5:be:02:ac:36:b2:f9:a4:c4:61:ec:09:bd:d1:30:a3:
         8f:a7:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:09 2026 by rpki-client