Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          y8I2Im9/mo5qVIlhXY5m2vPmCUWBLYRbOPhN9bAfL8E=
Subject key identifier:   5E:16:B7:6B:54:B8:47:44:F4:CA:69:AD:BB:C8:01:60:12:D5:4B:FA
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       01A0CB22EB5C8FFA443DD03817EEB52CA5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          0637
Signing time:             Tue 22 Sep 2026 22:00:58 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:58 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:58 +0000
Files and hashes:         1: 4a0yDVcuQM30Bp2hAQq77O8Dn58.roa (hash: guVMjyqpcdVVIuh9vCcyEy34+90Y1Bla/SWOuYKSozs=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: FqBPNaThxvD2ssOv7RrrFulX7+mfglZGBTp8SN+Tz1Q=)
                          3: UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa (hash: Gf/LbKoB+VuriOGpuU9l7kr0/08qSC6GQP4aAWqyo8Y=)
                          4: XJI_rftJWwbRR9-X1wJXegxuT8s.asa (hash: drTYciC4a5y3Yv+pPFX7/KgEFSAzzZ/k2n9eYfbHNvc=)
                          5: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (hash: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=)
                          6: ma3U6J5zAC0xActYjVFSjzUtrk4.roa (hash: MdgK+a8CkJPKt1il9YTirtB1gQs3bYmvym1oYFAiI98=)
                          7: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:eb:5c:8f:fa:44:3d:d0:38:17:ee:b5:2c:a5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Sep 22 22:00:58 2026 GMT
            Not After : Sep 23 22:00:58 2026 GMT
        Subject: CN=5e16b76b54b84744f4ca69adbbc8016012d54bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:56:e1:16:e5:de:ad:c3:64:6c:8e:6c:d7:
                    56:a8:f9:67:4e:86:02:86:4b:c9:62:af:f8:44:d5:
                    c0:14:9f:21:7b:6d:6e:b2:9d:3f:f8:a2:e0:38:a6:
                    6b:35:60:fd:55:f1:61:63:ec:ff:6b:59:53:e4:2c:
                    20:5f:77:fb:de:62:fd:e7:ab:82:25:de:86:e7:5d:
                    e1:a5:6f:ef:b3:ef:5c:86:cf:a7:ca:c5:96:47:41:
                    9c:ea:da:15:86:a4:98:03:8e:1f:fd:5c:bd:73:82:
                    46:b7:1c:4b:a8:52:55:61:d7:75:43:73:41:f5:f7:
                    93:bb:5f:60:c9:09:44:5d:61:f8:55:ca:ff:9d:de:
                    97:4d:34:3b:10:5a:57:4e:11:e7:9b:6f:7c:dc:e2:
                    ef:1a:dc:56:54:7c:47:5d:c0:92:f1:80:58:2f:4e:
                    04:17:d2:61:a1:d2:9c:0c:68:45:5f:9e:6d:39:54:
                    21:27:e4:e5:ef:a2:c8:13:b6:74:f7:16:15:9a:a9:
                    47:7d:96:fa:e1:91:d1:97:00:02:d1:8e:11:9d:f0:
                    f6:4e:64:76:ce:93:0c:72:82:c8:77:61:6b:bc:97:
                    21:dc:b2:4a:43:ce:a1:d6:e2:9c:c3:af:97:f4:dd:
                    41:d7:2f:e0:c8:41:ae:b3:77:e4:1d:fc:57:ca:ba:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:16:B7:6B:54:B8:47:44:F4:CA:69:AD:BB:C8:01:60:12:D5:4B:FA
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:5b:57:af:06:b9:1e:f5:4f:58:e4:f9:1e:c1:81:e2:d0:
         62:57:e0:6f:80:5a:90:9f:6b:43:f0:5d:b0:18:6c:f9:5a:8c:
         8b:dc:6d:1c:70:7e:e1:54:ad:ed:de:eb:91:ac:04:29:93:3e:
         47:3c:78:15:a9:ee:4b:e0:a3:f2:6f:05:1c:0f:22:90:ca:7b:
         d7:ff:e0:d2:13:8b:5f:89:35:d7:c9:b8:40:8b:38:6f:2e:da:
         f1:64:26:16:75:10:bf:f5:bf:43:65:c9:85:c0:15:b7:80:8c:
         62:c8:b1:a5:44:55:cb:08:ae:d3:ec:da:dc:0b:6e:cf:73:b0:
         ec:a2:74:67:b4:1e:87:23:7a:04:c9:af:33:05:4b:b8:52:43:
         5f:c9:02:de:ad:19:85:f9:e3:05:f2:10:e9:d6:3d:1f:96:a4:
         e6:85:85:0d:e6:f6:7a:a0:ad:72:b3:3d:e6:46:d4:f1:c1:fb:
         7d:aa:2d:05:cc:6e:f9:e2:69:d3:ab:e3:a5:d9:33:41:72:fc:
         e6:c2:11:4e:79:1c:55:14:27:4c:99:42:f7:2e:e1:0c:c6:53:
         95:5a:9b:72:0a:3b:91:cb:e3:dd:75:13:a6:ab:a1:f8:d8:ab:
         38:97:f3:54:ef:85:c2:e1:97:29:5e:12:82:d9:80:2b:12:5b:
         d8:6f:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:25:50 2026 by rpki-client