Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          5Lxu/Lrr5v9BORke2ZBct5/tumrWSrzFzxbObmjlxD4=
Subject key identifier:   C0:68:1F:6E:E3:0C:C6:F6:FB:F7:FB:B3:CA:9A:5E:4F:22:AC:81:35
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       01A036A66D1DC7F8CEF8381BD42C3242A233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          05EA
Signing time:             Tue 25 Aug 2026 02:01:11 +0000
Manifest this update:     Tue 25 Aug 2026 02:01:11 +0000
Manifest next update:     Wed 26 Aug 2026 02:01:11 +0000
Files and hashes:         1: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: z11Q2xsdT+PfSKq+bkExJQkEm2pPDG8D127CykYArII=)
                          2: UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa (hash: Gf/LbKoB+VuriOGpuU9l7kr0/08qSC6GQP4aAWqyo8Y=)
                          3: XJI_rftJWwbRR9-X1wJXegxuT8s.asa (hash: drTYciC4a5y3Yv+pPFX7/KgEFSAzzZ/k2n9eYfbHNvc=)
                          4: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (hash: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=)
                          5: ma3U6J5zAC0xActYjVFSjzUtrk4.roa (hash: MdgK+a8CkJPKt1il9YTirtB1gQs3bYmvym1oYFAiI98=)
                          6: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:36:a6:6d:1d:c7:f8:ce:f8:38:1b:d4:2c:32:42:a2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Aug 25 02:01:11 2026 GMT
            Not After : Aug 26 02:01:11 2026 GMT
        Subject: CN=c0681f6ee30cc6f6fbf7fbb3ca9a5e4f22ac8135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:96:fa:da:c8:8b:cc:c6:9f:b7:9e:5d:b8:
                    f3:d2:2d:61:4a:84:5f:e9:ce:63:a6:7e:6a:9f:88:
                    5e:26:04:81:f6:91:bc:35:b7:d1:e4:48:4f:45:56:
                    b1:3a:df:e2:45:62:5c:ba:64:89:d9:60:68:df:ab:
                    f8:25:48:87:10:97:7f:54:6d:a5:58:99:8d:73:26:
                    58:ee:d4:e0:f7:4f:82:0c:17:37:4e:44:30:ad:ca:
                    05:6a:90:a1:8c:44:08:5b:95:57:52:24:ed:27:67:
                    c8:ec:1d:9b:2e:8f:0b:4f:bd:6a:e0:93:85:7a:b5:
                    c6:f6:7c:76:03:f2:ef:fc:df:ff:d0:ea:61:ae:9c:
                    bf:26:af:d8:5f:2a:53:ec:be:32:58:bf:72:50:14:
                    43:af:9e:55:06:e9:1d:d8:d9:f7:da:93:d0:99:fc:
                    db:9e:63:86:d6:b0:07:3a:25:33:94:e2:3b:34:09:
                    11:01:94:7e:6a:f1:55:1b:60:cb:e1:b8:9d:47:23:
                    be:63:fc:b0:e4:7c:4b:4a:7f:0e:1a:ab:81:31:66:
                    61:a1:97:ea:00:90:72:43:b3:2c:b8:f1:cd:d4:54:
                    ac:ca:3a:f0:b5:73:c1:93:4e:fa:6a:db:20:04:cc:
                    0d:ed:1e:bd:4f:4b:f4:20:64:e1:a1:cf:02:cd:e7:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:1F:6E:E3:0C:C6:F6:FB:F7:FB:B3:CA:9A:5E:4F:22:AC:81:35
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:9e:ea:2a:01:99:a6:6d:12:6a:24:43:63:34:77:8a:c6:
         c5:2f:32:3c:ee:94:bc:1a:e5:07:eb:0a:c7:8c:8b:0f:8a:a1:
         e6:43:97:f1:bf:97:0a:d4:ef:20:79:0f:c1:2f:f6:c0:f9:b8:
         14:39:71:47:ee:03:77:70:b0:72:77:e6:e5:08:3f:da:86:e8:
         23:27:4c:59:23:e1:6b:02:f1:88:e3:31:59:86:9a:11:17:72:
         5f:4e:5b:98:65:4f:97:a8:39:0a:66:c6:09:75:97:57:08:15:
         72:1f:24:da:64:6a:8f:35:54:d2:fc:09:2d:af:95:f7:d2:6d:
         1c:77:70:fe:b0:b2:2a:7d:b0:f4:8d:7d:10:5a:57:35:96:03:
         37:d4:67:ba:a4:0b:17:3d:2f:a5:e0:02:fe:50:d6:80:48:83:
         27:a5:11:c4:53:a6:1a:e2:ad:0d:1f:9f:30:2a:5f:01:e7:98:
         25:13:97:29:f9:ec:47:a7:24:37:c7:8f:b8:cb:e7:eb:11:ee:
         dd:c7:d9:0b:cc:38:22:8f:4b:98:10:3d:b8:6a:bd:73:d7:c6:
         42:f0:67:20:5d:e5:0a:f8:49:ef:14:ed:0a:c7:e8:73:24:0d:
         d7:e3:ac:23:2a:d2:3f:91:a7:d7:92:a1:f7:11:8c:7b:de:80:
         5f:c0:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:36:09 2026 by rpki-client