Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File:                     nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier:          JQl7KYZ0O0hPg8HDJEV3YczU94V7WmrrxIJVpgiOaUE=
Subject key identifier:   81:13:50:9F:86:34:E5:BD:8F:0E:73:3F:EB:E0:F3:BF:41:53:E3:86
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       019D9DAD462DA4F0E91B95C0E2C4C6434F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number:          18F2
Signing time:             Fri 17 Apr 2026 23:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:11 +0000
Files and hashes:         1: 0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa (hash: kstJet361baMNTD+/HClBmRUoGqWDXMhiuwcosanoZU=)
                          2: 4_Hs_qWX8LMFMBOdMWupc1COrZw.roa (hash: W+UOeuskG88MJklXzCx9HgorURDeXLbXHLC4PO76/y4=)
                          3: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (hash: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ=)
                          4: GNYsH8Ssdi0wuq0MtkzjAz5IOK8.roa (hash: YBipqhCas3UTGUmAt3vdoKG8URq62fHTpLk/b0OQbks=)
                          5: IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa (hash: 73NFHvvBJWv79IwIgmIdvG/jVlcenKQG7sknk8zksd4=)
                          6: J4UnD7LRScbfxtXWDnuE42uhx3M.roa (hash: 3+wx2BbDUCCwJeiPSbBlAz3h3Fg2LYaejyKVPH0G+1A=)
                          7: JSSAL1uS2725f7uM8kvYMape7F8.roa (hash: RgB3TBZWhlYpz5IbsQEeSNtJJZhDZHeuEj6Sx1LMl58=)
                          8: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (hash: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770=)
                          9: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (hash: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM=)
                          10: Qw8yTunOSm4ZfBN_EbpBqDPiY5Q.roa (hash: U5GJVvdUQBnMaqa4tufa/PxLgPBUjbU5mqB41CCObCk=)
                          11: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (hash: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw=)
                          12: WYo1teZpvwvbF93D39MrwjDyB6c.roa (hash: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=)
                          13: WZgHvahvby7Of6uM98jDNnd8Onw.roa (hash: IOGgpgLWwWoangGJpAZ0DVTAjAvi05KQDIslMiG0UK0=)
                          14: armHtzccUgM1BQgqFWfqXr6nmqw.roa (hash: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k=)
                          15: djh44NEuCspUjoveVO9WyVzbtyE.roa (hash: UhrDFHo4jOAfwIxgLYqPYJZDTHc3YAaB74ugwpPJYdc=)
                          16: e5cBlv_Bd6SNioE7OAj1ZQcVjDM.roa (hash: NhuCAZJByUFm+pGHUA58JcG57TSRQSaIovYFwWCKvGs=)
                          17: fDBKRmseNLtDoz2k-oOaLC8l7LY.roa (hash: n0i6gVg3IW17GGTZZ/RrukXurtJ0nF/r+HpmyPOhljs=)
                          18: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (hash: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ=)
                          19: luFncGoOqwf-cVbFDO3bIWW4Do8.roa (hash: x4PEjaapYEKgyJ/2Uzjynby5qWIm0JNE/bTW8Z3cae4=)
                          20: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (hash: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE=)
                          21: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (hash: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc=)
                          22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: Hg6Rbo467Tt1owXqLW8gI31d6TCcBXbii6JUwJsEEr8=)
                          23: oIyDHrSU63T5_QeNiiA2CtszmCg.roa (hash: /AFuLZ9BJOgLw6Pd+8NkPnlgM3YxVhJzcU5H4pM6yvk=)
                          24: ph347tnTWIGgg-ume_myaaWDaLI.roa (hash: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0=)
                          25: syCImBDKif2bUtThCCVdzEwc7QE.roa (hash: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:46:2d:a4:f0:e9:1b:95:c0:e2:c4:c6:43:4f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Apr 17 23:01:11 2026 GMT
            Not After : Apr 18 23:01:11 2026 GMT
        Subject: CN=8113509f8634e5bd8f0e733febe0f3bf4153e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:c2:bc:e1:4c:df:01:07:8a:dd:71:74:80:
                    17:14:5b:69:f5:11:00:6d:47:d1:f6:25:f6:0c:90:
                    3e:c4:dc:e5:50:57:d9:05:52:b8:ce:ce:14:bf:a3:
                    e6:af:c7:f8:b2:3c:fa:02:04:53:70:1f:5e:e5:fc:
                    27:87:f3:93:63:94:f6:44:e3:85:9a:8d:59:0a:e8:
                    7f:13:2d:d6:e4:08:c9:d3:ec:87:e6:40:c7:ed:58:
                    32:41:ae:79:2f:72:a3:80:02:28:04:f4:dc:63:f7:
                    28:90:e9:9c:a4:2e:8e:52:8b:0a:2e:58:52:04:c3:
                    22:38:b7:3a:0e:54:7d:cd:40:5a:dd:10:0a:88:c0:
                    3c:8a:31:f4:cc:a1:65:a9:3b:3f:d5:c1:1a:34:d9:
                    7c:d4:35:dc:ca:a7:fb:01:7c:a6:bb:1a:d3:be:53:
                    c0:ce:39:b8:0b:e9:cb:b5:2d:71:60:40:5d:ff:bd:
                    38:3d:1e:49:d6:5d:31:c0:b5:37:9a:bb:50:82:36:
                    67:88:c2:1a:d8:19:0f:8f:2e:23:7e:26:14:d8:05:
                    92:50:e3:a2:72:43:70:2e:77:c6:84:7e:91:1e:3e:
                    43:4e:9c:3e:f3:96:d5:34:9d:c7:3a:59:b2:b6:1f:
                    80:b2:cc:d9:27:4b:b4:1a:7c:18:c3:83:1e:f2:14:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:50:9F:86:34:E5:BD:8F:0E:73:3F:EB:E0:F3:BF:41:53:E3:86
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:32:a7:c1:7e:a3:f8:c2:61:1f:5c:d2:7a:81:62:a9:01:93:
         61:f6:ba:73:35:1e:4a:2f:3c:de:5c:fb:ce:72:12:3d:37:6c:
         ab:9d:17:db:85:74:b9:c6:16:2e:7e:4c:ef:06:65:6f:5d:96:
         69:d6:37:32:5d:fd:3d:76:ad:b6:41:05:7e:38:22:a5:ff:51:
         09:b0:59:f6:83:28:95:ee:aa:3f:94:46:60:fa:74:81:bd:2c:
         a1:7d:1a:95:1c:06:c3:e8:53:51:a8:ad:b0:52:46:d1:0b:63:
         98:6c:c0:be:40:bd:c0:3a:32:75:6f:fb:2e:36:fd:36:71:74:
         45:cc:ed:07:ac:58:9d:31:e2:a8:69:ef:87:45:54:ef:3b:e2:
         3f:4c:fc:83:b7:5d:f0:0c:7c:b9:af:49:eb:9c:70:2d:66:bb:
         3b:93:08:41:d9:db:f7:ee:4c:d4:0e:1e:5d:28:0c:fa:0a:59:
         c4:a6:b4:75:8b:c2:35:16:c0:56:fc:90:09:dd:d5:7d:e3:ec:
         85:6a:af:ef:56:e0:25:d2:61:3c:20:98:48:34:86:e2:43:f8:
         54:78:6e:89:c1:4e:bf:70:07:d8:86:2e:25:f7:81:6a:08:bd:
         f2:e1:e5:bc:2c:9e:d9:15:f5:bb:e9:4c:5e:3f:ba:24:92:dd:
         46:51:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:55 2026 by rpki-client