Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          33KIMyeshN+Z9PA56bYiWmYjtFrW2+oe0kR/Vcuh5/M=
Subject key identifier:   B5:5B:C6:7E:3F:08:88:48:64:C7:74:1D:41:C1:B3:B0:83:35:5D:43
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019A0259CD9EF412A1B722E4200EA8217791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          02B0
Signing time:             Mon 20 Oct 2025 16:00:31 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:31 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:31 +0000
Files and hashes:         1: 7Neyj-EgqtHn8yPIzyvgflhPyEk.roa (hash: RiX60C1lYHQe9i54rwed/ld2R6Zxx+sj83TfysW1UZM=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: RXdsiAu/qJvqDNHNNXpeSN7MecMqIwHdwYOrBfRtqHM=)
                          3: LtRuJcDQFgXrBJSxyY1nA0HvnuU.roa (hash: Fm9L8uM5OQuU38BmCU77e5/o3WHCT2yCoE5kiEsmZuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:cd:9e:f4:12:a1:b7:22:e4:20:0e:a8:21:77:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Oct 20 16:00:31 2025 GMT
            Not After : Oct 21 16:00:31 2025 GMT
        Subject: CN=b55bc67e3f08884864c7741d41c1b3b083355d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:4b:47:1b:93:86:a4:be:13:a4:3d:82:47:
                    c0:dd:5a:00:6d:02:8c:2c:a2:5d:be:bc:ce:1b:d2:
                    1f:31:c1:12:83:28:45:19:e2:fc:c1:f5:4d:4d:b8:
                    01:25:8e:f5:86:26:26:e5:b9:3a:c3:2b:6b:f7:78:
                    0b:3c:dd:a0:03:27:8c:8e:7d:d9:09:24:aa:f4:7d:
                    fb:dd:14:6c:05:20:6b:cc:85:90:6c:6b:3f:0c:15:
                    6f:e6:32:8c:07:c4:ac:9a:12:a1:e2:29:1e:e6:60:
                    bf:6b:7d:23:39:3a:74:b1:fc:dd:c6:da:82:da:27:
                    ed:ce:b3:77:11:db:26:c1:72:fb:1d:71:32:e8:f2:
                    ab:34:bb:a2:e0:21:be:8c:ff:42:da:2c:f0:e1:b5:
                    64:b3:9d:ff:36:98:17:de:a6:7c:71:ff:d1:55:3e:
                    b9:04:66:32:10:41:d2:dd:5c:ee:c1:5b:a9:e7:79:
                    ac:b1:f7:d4:08:56:50:15:b7:12:fb:86:8f:ea:b2:
                    11:9a:58:a5:65:fc:5d:44:a1:df:5f:63:06:29:4d:
                    f5:83:7e:df:ef:69:fb:f2:75:14:d0:3d:83:41:31:
                    1d:bb:00:f2:08:2f:6f:cf:5a:63:c7:a0:c4:90:a4:
                    7f:69:dc:2d:9e:4f:f4:ac:19:e9:2a:b4:99:b0:26:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5B:C6:7E:3F:08:88:48:64:C7:74:1D:41:C1:B3:B0:83:35:5D:43
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:5b:ec:a0:f6:7c:84:ff:92:c4:14:a6:5a:cf:59:72:08:
         5b:7e:63:c3:0d:6b:05:ca:b5:80:03:a8:c2:a1:11:79:ac:92:
         49:9a:a7:5e:45:19:84:a2:a6:3d:ee:4e:9f:74:0b:c3:a5:a1:
         78:a6:79:1c:fc:63:9a:1c:56:ec:55:6f:70:d3:8a:5b:67:06:
         d9:e5:91:36:d7:57:b3:84:7a:3c:32:1c:1d:aa:1f:6c:c3:64:
         0c:19:0f:e9:00:9a:06:1f:fd:ad:b9:40:86:ee:f5:8a:0c:d9:
         b7:f6:ac:5e:58:ee:fb:4b:ca:91:98:1b:e8:71:b1:04:87:e2:
         0f:e6:0f:e6:65:63:07:b8:58:10:81:e7:6d:0c:2e:55:3f:bb:
         16:fc:09:28:9a:77:dd:28:ad:c4:49:ae:74:c3:af:ba:3c:86:
         91:0b:bd:d6:30:ee:14:72:41:c5:d0:db:96:52:7c:9e:3d:53:
         b5:fb:5e:92:8b:f7:ea:f9:b7:e5:c6:78:ee:c2:87:5f:93:fd:
         8d:f9:46:91:fc:1e:6d:f6:84:95:24:16:8c:c5:53:12:3e:fe:
         79:46:2c:3a:0a:cc:ff:fb:7a:83:7a:c6:24:87:a9:c1:9f:78:
         d9:c2:51:ee:7e:ff:6c:64:24:8b:aa:a4:be:ca:7c:2a:b7:c4:
         64:e0:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:25 2025 by rpki-client