Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          P7j6+ObRIEnd8/2MsdrkfIjJ/B3MGog6OYavYdzhMrk=
Subject key identifier:   6F:D4:81:F5:B7:83:2A:36:9B:42:8E:BC:24:0C:8F:9A:F9:89:2C:E2
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       01A151ACF92F588708FBE365A03327A373C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          067D
Signing time:             Mon 19 Oct 2026 01:00:52 +0000
Manifest this update:     Mon 19 Oct 2026 01:00:52 +0000
Manifest next update:     Tue 20 Oct 2026 01:00:52 +0000
Files and hashes:         1: 4a0yDVcuQM30Bp2hAQq77O8Dn58.roa (hash: guVMjyqpcdVVIuh9vCcyEy34+90Y1Bla/SWOuYKSozs=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: STTuVXTiXNew6z/LPsfSKuxv0oTUH8TeLsW+1zLUvmM=)
                          3: UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa (hash: Gf/LbKoB+VuriOGpuU9l7kr0/08qSC6GQP4aAWqyo8Y=)
                          4: XJI_rftJWwbRR9-X1wJXegxuT8s.asa (hash: drTYciC4a5y3Yv+pPFX7/KgEFSAzzZ/k2n9eYfbHNvc=)
                          5: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (hash: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=)
                          6: jfXX0eo0M7zNsO6r_2HVIrPH0rY.roa (hash: 6bziKwp41lGL+kLLxDDaUZq4wouJ11UmkiZ0aPML4Pc=)
                          7: ma3U6J5zAC0xActYjVFSjzUtrk4.roa (hash: MdgK+a8CkJPKt1il9YTirtB1gQs3bYmvym1oYFAiI98=)
                          8: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:ac:f9:2f:58:87:08:fb:e3:65:a0:33:27:a3:73:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Oct 19 01:00:52 2026 GMT
            Not After : Oct 20 01:00:52 2026 GMT
        Subject: CN=6fd481f5b7832a369b428ebc240c8f9af9892ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:88:30:6f:15:c7:56:64:ee:48:b1:5e:04:
                    b5:48:7b:86:b4:f1:05:46:52:bf:9e:d1:0a:32:4a:
                    de:1d:88:42:e9:2a:96:6f:fc:4b:57:2f:6e:94:87:
                    1e:ba:cf:66:eb:d7:18:a0:fc:69:72:02:8e:1e:da:
                    8c:cd:80:43:f1:73:52:12:55:10:b4:67:dc:9b:f8:
                    1d:42:10:6b:85:1a:5c:f0:79:c8:f1:e3:4e:fd:88:
                    55:ef:60:99:18:6b:9c:38:fa:9b:d1:61:34:24:9b:
                    ad:5d:e3:90:d9:d0:bb:8d:6c:54:a6:b0:be:fc:01:
                    3f:02:6d:3d:f8:60:64:91:05:d8:d2:48:10:55:44:
                    97:fd:7c:20:4f:b0:3b:ef:ab:8e:96:94:da:9c:eb:
                    44:80:99:26:a0:4b:c7:3b:be:2d:04:66:46:c3:ca:
                    df:5e:2a:4a:cb:c1:a2:25:84:75:6c:39:1b:ed:f0:
                    f9:63:af:73:8e:10:ab:73:47:90:a7:dd:9d:6c:ee:
                    c0:34:ad:ba:99:09:2a:4c:b8:5e:e6:01:0d:aa:fd:
                    fe:25:7c:d8:05:cb:fb:43:ff:83:36:7b:94:7e:60:
                    4a:4e:8b:4c:32:9c:13:2a:7d:c5:7e:5e:26:72:f8:
                    be:3d:36:16:4c:e7:01:c6:26:3b:20:d5:c1:cd:e5:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:81:F5:B7:83:2A:36:9B:42:8E:BC:24:0C:8F:9A:F9:89:2C:E2
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:03:1f:2a:96:49:27:8a:71:13:c0:12:1f:91:4b:0f:3f:
         dc:2f:62:42:9d:a2:0d:ea:14:dd:f7:0d:b4:b9:f3:f5:77:18:
         14:00:35:11:27:40:cf:7b:57:9b:4e:02:3d:49:6d:5a:0e:a9:
         14:48:1a:91:60:9e:e8:7f:61:32:0d:1e:7b:7d:e0:99:33:50:
         bc:9a:7f:d5:ae:ec:1a:ac:65:ab:6b:86:2b:f4:56:46:f7:9c:
         21:5a:a4:b2:0c:6b:20:a3:89:58:1c:c4:fd:09:49:d4:d8:1c:
         86:a7:73:d8:6e:17:5b:51:ea:16:15:d9:10:da:71:88:cb:67:
         f9:07:ca:d6:7c:cb:5a:fe:9e:52:5d:5c:2d:cc:79:7a:4c:c4:
         f3:f7:22:22:37:ee:19:3e:8c:a0:9c:f6:ac:9f:91:c1:75:54:
         65:4c:73:0b:be:4b:bb:87:62:d4:6b:50:e5:4c:ad:82:f3:69:
         b2:3d:ab:d9:42:ba:c6:8b:54:af:50:7f:5b:f8:f0:77:3b:17:
         30:01:40:1b:b8:32:ac:37:ad:ea:0f:af:26:82:4f:e7:cb:61:
         46:49:af:9c:00:54:16:69:53:d7:5c:e6:41:2a:54:e4:74:c7:
         70:60:52:a7:4d:9c:7b:08:87:95:7f:a8:1c:f9:68:81:10:9c:
         15:ec:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRrPkvWIcI++NloDMno3PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjYxMDE5MDEwMDUyWhcNMjYxMDIwMDEwMDUyWjAzMTEwLwYDVQQD
Eyg2ZmQ0ODFmNWI3ODMyYTM2OWI0MjhlYmMyNDBjOGY5YWY5ODkyY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8iIMG8Vx1Zk7kixXgS1SHuGtPEF
RlK/ntEKMkreHYhC6SqWb/xLVy9ulIceus9m69cYoPxpcgKOHtqMzYBD8XNSElUQ
tGfcm/gdQhBrhRpc8HnI8eNO/YhV72CZGGucOPqb0WE0JJutXeOQ2dC7jWxUprC+
/AE/Am09+GBkkQXY0kgQVUSX/XwgT7A776uOlpTanOtEgJkmoEvHO74tBGZGw8rf
XipKy8GiJYR1bDkb7fD5Y69zjhCrc0eQp92dbO7ANK26mQkqTLhe5gENqv3+JXzY
Bcv7Q/+DNnuUfmBKTotMMpwTKn3Ffl4mcvi+PTYWTOcBxiY7INXBzeXkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/UgfW3gyo2m0KOvCQMj5r5iSziMB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8cDHyqW
SSeKcRPAEh+RSw8/3C9iQp2iDeoU3fcNtLnz9XcYFAA1ESdAz3tXm04CPUltWg6p
FEgakWCe6H9hMg0ee33gmTNQvJp/1a7sGqxlq2uGK/RWRvecIVqksgxrIKOJWBzE
/QlJ1Ngchqdz2G4XW1HqFhXZENpxiMtn+QfK1nzLWv6eUl1cLcx5ekzE8/ciIjfu
GT6MoJz2rJ+RwXVUZUxzC75Lu4di1GtQ5UytgvNpsj2r2UK6xotUr1B/W/jwdzsX
MAFAG7gyrDet6g+vJoJP58thRkmvnABUFmlT11zmQSpU5HTHcGBSp02cewiHlX+o
HPlogRCcFexZWg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 03:01:11 2026 by rpki-client