Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          w8bTPg17q0l7OEp62ZG0eQESk7E4qjhyGBcoPNYwZ6E=
Subject key identifier:   B0:2A:6B:91:88:FA:65:40:CB:FD:6E:91:6D:E2:23:3F:38:52:5B:D9
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019DA71E55D096EA18A2757E713E2FFC1F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          0495
Signing time:             Sun 19 Apr 2026 19:01:16 +0000
Manifest this update:     Sun 19 Apr 2026 19:01:16 +0000
Manifest next update:     Mon 20 Apr 2026 19:01:16 +0000
Files and hashes:         1: 1h6gN1SZbM_oJcTPp9NbAagbc4o.asa (hash: h3Wjsu3+QR6ofaVjL0FeIcVMNhc6ZkMEHqU4DxerWHk=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: ZPBsCAFvjTvumF0JVusII8aYlxtJnojwxveniKmYgR4=)
                          3: jfhk4LSasdsv5oNazrLR2L8vp1w.asa (hash: iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=)
                          4: uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa (hash: OtJPkiZgtSx9miUUx4JCA1wh9p2A+UjZhuN7rom3XtE=)
                          5: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:1e:55:d0:96:ea:18:a2:75:7e:71:3e:2f:fc:1f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Apr 19 19:01:16 2026 GMT
            Not After : Apr 20 19:01:16 2026 GMT
        Subject: CN=b02a6b9188fa6540cbfd6e916de2233f38525bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:95:1b:9b:42:df:4e:c5:b6:8a:80:22:aa:
                    84:b9:10:61:e7:1f:9f:6e:e6:05:5f:08:1d:b3:77:
                    5b:4a:a1:86:b4:37:05:00:f7:25:48:44:46:55:7c:
                    f0:30:13:dc:f9:79:5b:0f:c3:a8:ab:f0:6b:44:d7:
                    c8:69:e3:22:bd:f2:d0:42:01:37:6c:1d:f3:df:42:
                    f3:94:b1:b2:99:0f:53:28:27:df:22:47:af:28:53:
                    c7:39:5e:41:9c:3a:7e:35:c8:48:f5:27:b1:20:a5:
                    86:d7:8a:48:4d:6c:8d:fe:06:5e:fb:23:aa:68:e4:
                    23:a2:84:d9:43:5c:21:7b:96:6f:72:a7:26:4b:21:
                    81:6f:93:57:5b:69:3d:59:82:2d:ab:bb:86:84:ac:
                    a7:37:4b:dd:fa:9b:6a:19:9c:92:96:02:9f:71:51:
                    3d:12:5e:2a:f7:f3:43:f0:76:70:95:69:77:fb:a1:
                    a9:a3:49:7b:8a:22:33:f8:c3:ec:cc:b5:64:fc:3c:
                    da:8a:dd:55:e9:94:80:9e:af:82:ab:10:af:3e:54:
                    3a:d3:84:c1:f3:ba:cb:e3:8e:46:bc:5c:69:f2:53:
                    bf:c7:68:86:c4:95:76:62:33:df:fa:a3:bf:5e:ba:
                    9b:df:48:25:d7:91:65:32:14:20:e6:23:94:d2:6e:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:6B:91:88:FA:65:40:CB:FD:6E:91:6D:E2:23:3F:38:52:5B:D9
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:be:57:9e:c7:93:8c:13:8a:f4:50:ed:ca:d7:c9:db:96:
         02:9f:5a:95:0d:bc:7b:cd:d8:58:7e:08:35:13:f6:a8:b0:ea:
         fd:69:41:81:cd:46:ac:10:fa:31:e2:1f:f0:ff:28:74:d5:b4:
         d0:95:01:19:ab:5c:e3:ac:da:57:d0:6c:6e:bd:1c:5b:dc:ed:
         7a:ab:3d:ad:9d:5e:50:2f:a5:45:2d:a7:57:d0:59:a1:78:12:
         25:91:b2:33:83:bf:2c:4c:5c:b9:ad:08:cc:fd:df:20:11:72:
         60:ec:ac:a4:43:15:5c:2a:c0:35:f5:e1:47:44:1b:ee:a4:53:
         9f:f8:d9:1c:2c:bd:66:49:86:8d:3c:4c:c8:61:68:77:79:ba:
         61:14:26:f8:f5:f1:ac:b1:23:07:f0:5d:27:24:d6:4d:c3:c4:
         9a:1b:98:e9:78:48:01:db:66:14:f8:13:0d:60:84:bd:e6:4d:
         17:3d:74:4b:62:3f:d0:fb:97:cb:a2:1a:25:16:e9:7f:16:d2:
         52:a4:0d:04:dd:8a:db:40:3f:e2:f7:af:95:d1:39:15:23:fc:
         23:3d:15:38:b0:67:c8:32:de:39:ac:d0:ca:0a:42:4c:ef:eb:
         7a:e6:59:b7:96:cd:d9:f4:65:41:e6:43:41:d4:43:03:c2:d7:
         82:2a:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:50:55 2026 by rpki-client