Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          t729pRzDKyJn0FQesQNqemBiXrTkzwa8GD0LDxHSoBE=
Subject key identifier:   8F:F3:F2:1E:9B:D6:2E:11:A7:F3:51:0A:92:A8:3A:AA:C8:0A:79:ED
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019EFC4BCB427FF192DEB820D842B9C61F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          0546
Signing time:             Thu 25 Jun 2026 01:01:26 +0000
Manifest this update:     Thu 25 Jun 2026 01:01:26 +0000
Manifest next update:     Fri 26 Jun 2026 01:01:26 +0000
Files and hashes:         1: 1h6gN1SZbM_oJcTPp9NbAagbc4o.asa (hash: h3Wjsu3+QR6ofaVjL0FeIcVMNhc6ZkMEHqU4DxerWHk=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: LI357uywhGzTLpPD4QkTeetMGMmcFjJXI2pLJWDdD2s=)
                          3: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (hash: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=)
                          4: jfhk4LSasdsv5oNazrLR2L8vp1w.asa (hash: iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=)
                          5: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:4b:cb:42:7f:f1:92:de:b8:20:d8:42:b9:c6:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Jun 25 01:01:26 2026 GMT
            Not After : Jun 26 01:01:26 2026 GMT
        Subject: CN=8ff3f21e9bd62e11a7f3510a92a83aaac80a79ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:94:6c:b2:f2:57:f1:61:cd:0a:19:e6:0b:
                    91:bf:11:11:61:6f:ff:1c:aa:7c:e7:c8:9e:a9:76:
                    17:a2:1b:4c:36:a3:46:d8:82:7c:6e:2d:02:33:be:
                    d7:5e:2d:61:72:57:32:73:92:11:29:79:c3:52:26:
                    80:12:1c:53:8b:e3:33:3d:34:37:51:66:46:71:cd:
                    b5:82:6b:39:d2:cf:0b:ae:4f:f3:c6:e8:10:30:fd:
                    f7:c8:fe:a7:46:93:2e:2a:b5:15:fa:51:92:95:a3:
                    fd:35:5f:b9:84:aa:de:82:bf:80:a9:8a:52:ba:c0:
                    0c:2f:e9:ff:23:16:c5:5e:58:58:06:c2:5b:77:10:
                    d6:92:fb:24:71:86:08:92:0c:02:a4:9b:cc:7e:20:
                    73:1a:09:0f:47:19:17:98:92:2b:32:1e:c0:b8:3c:
                    1b:db:e7:11:26:e0:ba:c2:cd:27:dd:c3:57:e7:a5:
                    32:b8:74:76:dd:7e:b0:86:34:06:a2:78:23:34:03:
                    87:3e:d2:ae:ca:6e:fc:64:1e:91:35:8d:1b:12:48:
                    46:32:fd:29:3c:9e:75:79:01:c8:76:74:e2:54:22:
                    d5:d2:18:df:11:41:13:3b:fb:05:d7:8a:e8:0b:ae:
                    10:35:30:9c:9e:09:60:29:72:13:75:3e:b2:5f:50:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:F2:1E:9B:D6:2E:11:A7:F3:51:0A:92:A8:3A:AA:C8:0A:79:ED
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:0f:21:75:c4:bb:73:4e:90:27:24:a9:84:aa:75:dd:af:
         7d:ee:ca:d5:c3:de:3a:3c:5f:75:e5:66:60:a0:b1:fa:3b:af:
         8a:15:59:31:64:5d:1d:83:c3:47:90:46:b2:f1:ae:0d:c4:ac:
         6b:59:e8:cb:90:5a:c1:00:1c:64:8a:b1:86:63:36:f2:11:5e:
         93:e4:14:e4:5d:d9:f4:d0:69:9c:48:71:eb:bd:5d:d6:95:8f:
         de:8b:0d:aa:f1:b1:d9:46:da:1e:1e:7f:af:0e:06:0f:b5:f6:
         a7:02:79:c9:99:49:92:5d:83:fa:2b:35:4b:48:13:da:02:51:
         4c:68:7b:e4:a0:48:ac:4e:cd:9e:fe:c1:99:87:c5:26:e7:da:
         fe:c3:63:c1:2b:9b:03:c5:e9:31:53:d3:1d:a4:ed:44:63:93:
         91:1b:fd:56:12:11:68:01:f1:9f:64:70:09:78:1a:3c:71:3c:
         3c:f0:40:dc:94:e8:de:10:f6:f9:23:55:78:21:48:22:2b:3b:
         b9:c1:d0:a1:7c:10:da:27:29:fd:8d:4d:65:49:e4:39:42:89:
         ed:42:5d:a6:bd:ab:bc:25:91:e3:b1:a5:2a:08:64:8e:b1:7a:
         39:af:77:18:2d:bd:41:6f:09:af:07:8f:d8:db:a8:45:d5:db:
         ad:4e:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:26 2026 by rpki-client