Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
File:                     JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json)
Hash identifier:          yBNTnFW3CeyeoN2sanSyzFifGKfnaQJpUvA8xKSEj1o=
Subject key identifier:   16:BC:23:6C:07:EB:35:ED:1F:47:4B:58:D3:DA:3E:BD:8A:3D:03:F3
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Certificate issuer:       /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial:       019E91DD7456897145DBA596020DDC580796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
Manifest number:          01F5
Signing time:             Thu 04 Jun 2026 09:01:09 +0000
Manifest this update:     Thu 04 Jun 2026 09:01:09 +0000
Manifest next update:     Fri 05 Jun 2026 09:01:09 +0000
Files and hashes:         1: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: kXBloz8pe56BdIR0Kbyt+wDlxt8pkpxDhOzgIiEobZk=)
                          2: Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa (hash: IxK5X9Ss7ShkMVKfEZu5A5rPZ/yNm8neoiWEbru4efI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dd:74:56:89:71:45:db:a5:96:02:0d:dc:58:07:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
        Validity
            Not Before: Jun  4 09:01:09 2026 GMT
            Not After : Jun  5 09:01:09 2026 GMT
        Subject: CN=16bc236c07eb35ed1f474b58d3da3ebd8a3d03f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:14:a5:f0:0e:4a:4c:ab:6a:cf:ff:75:fa:
                    e3:1c:44:f6:fe:00:3d:07:14:52:7c:86:ee:7f:59:
                    40:bb:1c:4e:2f:d8:58:03:0c:d1:3c:0e:30:47:69:
                    0e:35:aa:d3:99:d4:f2:57:05:7e:66:2b:eb:af:a0:
                    9b:26:5a:37:63:8c:1a:d8:b6:1d:0f:d3:05:2c:e4:
                    fc:9e:4a:2f:44:64:ce:7d:da:3d:6e:cd:4d:53:5e:
                    12:75:86:e0:67:a1:08:2c:e5:fd:68:ff:6a:0f:50:
                    42:56:e2:94:30:33:34:6c:13:dc:21:07:7b:1a:f3:
                    85:71:27:57:9d:c3:b5:be:4c:dd:e0:5a:86:cf:69:
                    8f:a4:1a:db:f9:c2:5d:6b:64:78:a4:52:87:0c:38:
                    3f:af:de:d5:dc:4a:b0:30:2c:fc:f3:d9:27:ee:09:
                    5d:8a:11:7c:18:1d:bc:0d:81:80:c2:fe:cc:e5:d1:
                    55:50:66:91:1c:36:ab:c5:57:b1:96:a2:6a:5f:ef:
                    d3:43:0c:26:8f:a0:b5:2a:82:71:6c:a9:a7:81:87:
                    7b:91:29:d8:46:6d:4d:a8:b1:bf:a8:92:da:9b:bc:
                    48:02:13:d8:5e:dc:95:5c:0f:d1:44:cd:06:75:78:
                    6d:a5:80:28:8e:cc:a1:c2:56:66:7a:9f:ff:e4:33:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BC:23:6C:07:EB:35:ED:1F:47:4B:58:D3:DA:3E:BD:8A:3D:03:F3
            X509v3 Authority Key Identifier:
                keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:69:eb:27:79:04:ba:da:86:b0:7d:fc:c4:87:fc:af:f1:06:
         7d:3f:3c:da:c8:2f:21:d7:83:a4:f4:7a:40:47:04:6d:1d:21:
         af:10:d7:ee:14:a0:52:25:57:0f:cd:a2:50:39:b7:35:86:97:
         d4:9a:0c:52:e4:05:56:2d:b8:35:c7:7a:c4:9c:04:d0:73:d0:
         0d:98:f7:4e:f5:9d:40:80:c5:29:d0:f8:14:5a:1e:d3:e3:53:
         71:5c:77:9a:a9:7d:2b:48:bb:16:b2:75:20:05:4b:68:39:a3:
         e8:72:00:3f:f9:b3:32:c4:10:da:18:23:66:c7:bc:46:40:6e:
         08:1b:46:95:37:ed:88:f0:06:73:dc:c7:72:18:2c:30:11:b1:
         21:63:0b:10:d8:d7:c8:4c:d4:28:5b:ce:4d:d2:15:d6:95:16:
         1e:b8:d7:f8:bf:4b:c1:54:80:d4:0f:66:98:9a:0c:56:46:39:
         19:46:aa:b2:e4:24:3c:49:a3:40:09:79:e5:c9:58:07:f6:a0:
         a6:2a:f5:5b:ec:4a:ec:eb:ff:38:d4:9c:22:e8:d3:08:35:6d:
         e1:2f:0d:60:cf:2d:3f:b6:0e:f1:d2:2d:9b:6d:8d:65:10:82:
         ad:3e:4b:a9:ae:df:b4:81:3f:a6:36:da:df:1d:20:65:ed:89:
         14:df:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:20 2026 by rpki-client