Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          VrTzM+pyK5fWo76KGPFPlTlg/QP9ZcikATAZU86yys0=
Subject key identifier:   86:F8:B6:BF:A6:15:F0:75:F3:BF:0C:92:BF:6D:68:9E:EF:84:D6:A8
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019FA7BD4961F8D36C98897F622131547F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          05A0
Signing time:             Tue 28 Jul 2026 08:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:27 +0000
Files and hashes:         1: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: 4UNB8mnacL/m7ODkLjDuZnDIF9vlM7jvrhIjbksELiE=)
                          2: UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa (hash: Gf/LbKoB+VuriOGpuU9l7kr0/08qSC6GQP4aAWqyo8Y=)
                          3: XJI_rftJWwbRR9-X1wJXegxuT8s.asa (hash: drTYciC4a5y3Yv+pPFX7/KgEFSAzzZ/k2n9eYfbHNvc=)
                          4: fMgYj9DD4dOJYe1i0R8sHeqon3U.roa (hash: Tey0s10khELxWjSsS7ZpMDeAznnIJfv4ldyu7Cq4Kg4=)
                          5: ma3U6J5zAC0xActYjVFSjzUtrk4.roa (hash: MdgK+a8CkJPKt1il9YTirtB1gQs3bYmvym1oYFAiI98=)
                          6: zY9fq8CGg8NRWUX12SRnSLACwOc.roa (hash: rWm0R+5stCiGapMh91guOJof8hivdrdIyYOCPmOKkSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:49:61:f8:d3:6c:98:89:7f:62:21:31:54:7f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Jul 28 08:00:27 2026 GMT
            Not After : Jul 29 08:00:27 2026 GMT
        Subject: CN=86f8b6bfa615f075f3bf0c92bf6d689eef84d6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:3c:ae:b2:61:77:ad:fe:2c:31:58:2f:bb:
                    61:56:ca:1b:c8:e7:30:e7:af:d5:9f:bc:fd:f9:b8:
                    75:a3:a6:c1:44:f4:82:b0:6b:d8:ff:3c:0c:2a:ad:
                    94:a7:17:53:4c:90:f3:44:16:21:5d:54:6b:26:16:
                    5e:c2:0f:b6:19:3b:c0:73:04:92:e3:a8:c6:b4:ad:
                    1b:55:5f:08:39:b2:c9:1c:3b:7a:f1:7a:72:af:06:
                    5f:53:1e:16:50:c7:ae:de:27:f6:f3:48:e0:64:d8:
                    32:a2:c5:e4:93:f0:15:09:15:06:e7:f8:41:93:72:
                    dc:62:2c:3d:dc:bb:c8:09:8c:be:91:ef:30:af:00:
                    c0:e2:a0:5e:80:6d:72:17:3e:dc:22:d5:53:8c:d5:
                    79:81:75:c3:8a:b7:36:7c:bc:2f:0c:58:3b:0c:39:
                    86:89:fd:a9:5c:07:11:e3:70:e5:b5:26:15:cb:1d:
                    f5:84:2c:fb:4f:22:ca:96:48:9e:27:94:d6:35:5d:
                    5c:16:a0:f6:0a:74:a7:36:f3:e0:e6:88:ce:44:af:
                    7b:70:22:67:fa:fa:fe:b3:f8:6b:95:e9:14:c8:8e:
                    b2:83:eb:85:15:7a:ec:b2:65:55:19:8c:40:1c:85:
                    4d:1f:68:1c:be:a0:c8:3b:ba:38:1a:fe:16:a4:b8:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F8:B6:BF:A6:15:F0:75:F3:BF:0C:92:BF:6D:68:9E:EF:84:D6:A8
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:af:8e:b1:9b:26:41:a1:02:21:0f:91:81:85:a3:a9:69:
         a0:34:e3:44:44:67:78:0a:49:bc:80:13:5b:bf:a7:5b:8a:87:
         b7:38:b3:20:3a:97:3e:99:ea:91:6c:90:6a:0b:fe:2c:14:48:
         8e:2d:ab:9b:b6:09:6e:23:62:05:58:a5:ae:39:2a:d6:6f:4f:
         e5:bc:11:bf:87:bf:57:c1:e3:f8:8b:8a:b3:3e:77:46:9e:58:
         83:90:49:f7:16:b6:60:86:70:c6:b8:2e:1e:a4:35:21:0e:6e:
         b7:04:8f:b1:5f:01:3a:52:46:e3:3b:17:83:f7:4f:2b:d3:8a:
         4d:43:71:9b:be:da:52:a9:db:88:38:c5:70:82:af:94:eb:e8:
         24:0a:e5:bd:9b:0d:84:69:7e:fc:0a:37:15:77:69:6d:54:9e:
         b7:f2:bb:c2:e0:5e:83:e7:f9:0f:d2:46:ed:e4:34:95:dd:56:
         27:77:aa:66:ae:19:e0:ab:1f:95:73:f3:a2:b0:d2:b5:06:c1:
         e2:77:de:03:ab:42:0f:89:68:2e:91:7d:e8:07:db:9c:59:ea:
         30:97:69:ac:90:97:eb:a2:4d:a9:9b:d7:ec:25:f3:9f:b9:bb:
         38:fd:5f:68:82:77:ca:13:d5:67:87:4e:82:92:77:82:2a:7e:
         a5:0b:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:57:48 2026 by rpki-client