Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          p4aiLG3I89vJQj437u4JzjOU2dV0eFmJVNBfvCoa6yY=
Subject key identifier:   73:E3:7F:32:EE:C8:15:B7:33:0A:07:16:1A:6B:BA:CD:E8:B3:45:46
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019D9D766DB78DF8DDA773D22E9524593376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          0490
Signing time:             Fri 17 Apr 2026 22:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:17 +0000
Files and hashes:         1: 1h6gN1SZbM_oJcTPp9NbAagbc4o.asa (hash: h3Wjsu3+QR6ofaVjL0FeIcVMNhc6ZkMEHqU4DxerWHk=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: yaiuNCMDDdSUJDfbxi81l766CaU3janUN4wT2VWBOiA=)
                          3: jfhk4LSasdsv5oNazrLR2L8vp1w.asa (hash: iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=)
                          4: uYs1_qRfA9pq7Z2vFE4RQI1T0E0.roa (hash: OtJPkiZgtSx9miUUx4JCA1wh9p2A+UjZhuN7rom3XtE=)
                          5: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:6d:b7:8d:f8:dd:a7:73:d2:2e:95:24:59:33:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Apr 17 22:01:17 2026 GMT
            Not After : Apr 18 22:01:17 2026 GMT
        Subject: CN=73e37f32eec815b7330a07161a6bbacde8b34546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:01:4d:d2:f6:f3:df:23:b0:cc:95:0d:1e:
                    ad:5a:db:93:3b:90:25:0d:2b:f9:2a:51:6f:da:21:
                    e8:16:b3:1e:5c:e3:d2:45:46:fc:7a:4f:eb:26:01:
                    2e:aa:ab:30:3e:a9:11:ce:36:a9:98:01:b1:e9:03:
                    37:79:c2:4a:85:78:89:3e:52:0b:26:30:29:01:83:
                    ad:e5:f1:5a:03:1f:00:ee:7a:84:3e:aa:ab:d0:db:
                    20:7f:f1:50:80:c4:99:07:79:2f:99:6f:a2:74:f2:
                    07:92:c1:38:ea:85:32:3e:de:c4:32:2f:3c:fb:1a:
                    63:08:48:1c:c9:c7:4a:c3:af:1b:8a:6f:51:b8:1f:
                    9a:d8:b4:7b:e8:a0:f1:03:b2:e4:4f:8e:a5:c4:3b:
                    a0:47:d2:76:93:fe:33:1c:bb:99:d2:da:fc:90:8f:
                    de:7f:ce:d0:d3:99:6d:9f:9f:d9:c5:36:fc:94:1c:
                    d1:6b:73:0a:64:b7:e1:c9:a8:dc:21:36:1a:45:e4:
                    ad:6a:7e:3f:94:c2:dd:54:6e:43:f5:26:74:b6:cd:
                    a5:8a:70:35:e4:12:bf:21:b7:bd:b2:24:74:e9:4b:
                    8b:f3:a6:e7:27:b8:e7:fa:fc:df:fc:24:d2:99:09:
                    56:08:86:fe:f8:70:08:02:33:02:5f:75:df:cb:1b:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:7F:32:EE:C8:15:B7:33:0A:07:16:1A:6B:BA:CD:E8:B3:45:46
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:7f:d1:58:40:45:64:97:d9:9d:35:9f:75:c5:32:e7:64:
         6f:21:51:50:ee:16:83:92:e1:e8:00:9a:46:1b:49:6f:e2:4b:
         bf:77:c0:24:76:b0:59:5b:20:a2:20:b8:53:3c:13:a9:8b:d4:
         e0:41:40:01:fa:69:0e:a9:ce:ac:04:02:7e:a1:66:7d:9f:6e:
         4b:fa:b8:6a:cd:91:21:44:63:0f:8c:ba:1c:2f:9e:51:6a:0b:
         4d:c2:c6:69:02:8e:29:11:88:f9:6b:b0:91:bf:81:e3:19:18:
         1e:83:a6:84:5b:8d:12:45:77:63:cc:8a:94:9b:d4:9b:f6:e1:
         af:74:69:28:ce:71:6c:09:9a:64:b4:58:72:18:54:af:fb:f5:
         e3:0c:f8:8c:87:6c:ad:48:61:ad:5f:95:78:46:b2:fc:4d:e8:
         87:f6:17:43:1a:8d:68:f2:15:6f:95:b3:a8:06:6c:0d:00:d9:
         ce:e4:e1:ee:48:cc:89:5a:9b:d8:a3:0a:d4:69:8c:0d:fc:15:
         79:dd:de:ca:88:ed:56:79:25:e5:e8:56:04:a7:a3:d4:d5:38:
         87:2c:5d:70:28:c3:15:c1:d5:a6:27:39:34:16:79:64:7d:17:
         24:61:84:0c:82:e2:14:e2:09:20:61:c5:87:c0:cc:3f:42:04:
         83:e6:fc:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddm23jfjdp3PSLpUkWTN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjYwNDE3MjIwMTE3WhcNMjYwNDE4MjIwMTE3WjAzMTEwLwYDVQQD
Eyg3M2UzN2YzMmVlYzgxNWI3MzMwYTA3MTYxYTZiYmFjZGU4YjM0NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DUBTdL2898jsMyVDR6tWtuTO5Al
DSv5KlFv2iHoFrMeXOPSRUb8ek/rJgEuqqswPqkRzjapmAGx6QM3ecJKhXiJPlIL
JjApAYOt5fFaAx8A7nqEPqqr0Nsgf/FQgMSZB3kvmW+idPIHksE46oUyPt7EMi88
+xpjCEgcycdKw68bim9RuB+a2LR76KDxA7LkT46lxDugR9J2k/4zHLuZ0tr8kI/e
f87Q05ltn5/ZxTb8lBzRa3MKZLfhyajcITYaReStan4/lMLdVG5D9SZ0ts2linA1
5BK/Ibe9siR06UuL86bnJ7jn+vzf/CTSmQlWCIb++HAIAjMCX3Xfyxsn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPjfzLuyBW3MwoHFhprus3os0VGMB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpl/0VhA
RWSX2Z01n3XFMudkbyFRUO4Wg5Lh6ACaRhtJb+JLv3fAJHawWVsgoiC4UzwTqYvU
4EFAAfppDqnOrAQCfqFmfZ9uS/q4as2RIURjD4y6HC+eUWoLTcLGaQKOKRGI+Wuw
kb+B4xkYHoOmhFuNEkV3Y8yKlJvUm/bhr3RpKM5xbAmaZLRYchhUr/v14wz4jIds
rUhhrV+VeEay/E3oh/YXQxqNaPIVb5WzqAZsDQDZzuTh7kjMiVqb2KMK1GmMDfwV
ed3eyojtVnkl5ehWBKej1NU4hyxdcCjDFcHVpic5NBZ5ZH0XJGGEDILiFOIJIGHF
h8DMP0IEg+b8Ng==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:36 2026 by rpki-client