Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File:                     nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier:          XkuNieaS0+8AQMlBI/JL/PqKbaN01gn6F4BHu3dXhA8=
Subject key identifier:   EF:6A:8A:5F:1C:D0:AA:6D:F7:42:46:5B:BE:FF:BA:C2:52:D4:28:EB
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       019CB10006EDB2DEF7DA2C25F3CC80BC2F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number:          1874
Signing time:             Tue 03 Mar 2026 00:01:34 +0000
Manifest this update:     Tue 03 Mar 2026 00:01:34 +0000
Manifest next update:     Wed 04 Mar 2026 00:01:34 +0000
Files and hashes:         1: 4_Hs_qWX8LMFMBOdMWupc1COrZw.roa (hash: W+UOeuskG88MJklXzCx9HgorURDeXLbXHLC4PO76/y4=)
                          2: EPH936Qc4pN-NRZEtks45mMYwdw.roa (hash: g4y5Rg9awyTSmqRwn21zxTNz1btz8mDWqc67pAJI2As=)
                          3: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (hash: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ=)
                          4: GNYsH8Ssdi0wuq0MtkzjAz5IOK8.roa (hash: YBipqhCas3UTGUmAt3vdoKG8URq62fHTpLk/b0OQbks=)
                          5: J4UnD7LRScbfxtXWDnuE42uhx3M.roa (hash: 3+wx2BbDUCCwJeiPSbBlAz3h3Fg2LYaejyKVPH0G+1A=)
                          6: JSSAL1uS2725f7uM8kvYMape7F8.roa (hash: RgB3TBZWhlYpz5IbsQEeSNtJJZhDZHeuEj6Sx1LMl58=)
                          7: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (hash: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770=)
                          8: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (hash: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM=)
                          9: O9b4MiyQJf7ADeyK6FOskAUc3rU.roa (hash: lycf7IhJhl3N0Ed4djWaYauK9bDCqpC39os1AcnPPrA=)
                          10: Qw8yTunOSm4ZfBN_EbpBqDPiY5Q.roa (hash: U5GJVvdUQBnMaqa4tufa/PxLgPBUjbU5mqB41CCObCk=)
                          11: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (hash: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw=)
                          12: WYo1teZpvwvbF93D39MrwjDyB6c.roa (hash: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=)
                          13: WZgHvahvby7Of6uM98jDNnd8Onw.roa (hash: IOGgpgLWwWoangGJpAZ0DVTAjAvi05KQDIslMiG0UK0=)
                          14: armHtzccUgM1BQgqFWfqXr6nmqw.roa (hash: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k=)
                          15: djh44NEuCspUjoveVO9WyVzbtyE.roa (hash: UhrDFHo4jOAfwIxgLYqPYJZDTHc3YAaB74ugwpPJYdc=)
                          16: e5cBlv_Bd6SNioE7OAj1ZQcVjDM.roa (hash: NhuCAZJByUFm+pGHUA58JcG57TSRQSaIovYFwWCKvGs=)
                          17: fDBKRmseNLtDoz2k-oOaLC8l7LY.roa (hash: n0i6gVg3IW17GGTZZ/RrukXurtJ0nF/r+HpmyPOhljs=)
                          18: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (hash: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ=)
                          19: luFncGoOqwf-cVbFDO3bIWW4Do8.roa (hash: x4PEjaapYEKgyJ/2Uzjynby5qWIm0JNE/bTW8Z3cae4=)
                          20: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (hash: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE=)
                          21: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (hash: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc=)
                          22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: 9bD2HL1YxaGCgDicmrhIQiBqfrSRvqn/BbSGksVTi7E=)
                          23: oIyDHrSU63T5_QeNiiA2CtszmCg.roa (hash: /AFuLZ9BJOgLw6Pd+8NkPnlgM3YxVhJzcU5H4pM6yvk=)
                          24: ph347tnTWIGgg-ume_myaaWDaLI.roa (hash: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0=)
                          25: syCImBDKif2bUtThCCVdzEwc7QE.roa (hash: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:00:06:ed:b2:de:f7:da:2c:25:f3:cc:80:bc:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Mar  3 00:01:34 2026 GMT
            Not After : Mar  4 00:01:34 2026 GMT
        Subject: CN=ef6a8a5f1cd0aa6df742465bbeffbac252d428eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:55:47:69:43:11:f5:78:c8:67:45:4b:a5:
                    c5:37:97:49:8b:65:32:73:66:9e:6d:a5:6c:cc:42:
                    74:8a:6c:68:c3:52:13:fb:c8:38:18:d8:9e:3a:a3:
                    5c:a0:e3:85:69:52:80:a9:4a:10:a9:1c:ff:0f:1e:
                    0e:3f:24:c7:af:31:e6:c9:07:08:1c:2a:65:81:64:
                    33:dd:87:4f:b4:bb:8b:97:61:9e:14:6b:ac:3d:ed:
                    ea:f8:c2:41:9d:8b:e5:54:f2:56:66:64:8d:06:4c:
                    26:a6:d8:e5:12:77:11:5b:2d:bc:1c:26:94:50:7f:
                    72:11:60:d8:42:98:73:45:c3:fd:08:fc:ac:da:00:
                    27:59:ba:da:de:e4:94:4e:5b:40:0b:43:57:a1:af:
                    63:db:c6:c0:af:c1:08:1e:2f:41:32:14:cc:a0:fd:
                    9c:ae:fe:e8:47:2e:29:f2:35:be:d6:f8:4a:24:1e:
                    f3:30:68:9f:c3:1b:68:de:1a:01:d1:f4:f5:cb:94:
                    5e:89:8d:11:71:a0:be:80:af:89:8a:72:db:e4:a9:
                    ff:9a:1c:bc:da:1a:3f:66:2c:7d:0d:1c:99:b7:3a:
                    f8:20:94:27:f2:70:bb:e0:29:22:96:28:d1:13:2c:
                    df:6f:ab:a8:7c:f5:52:ac:9f:77:df:0d:90:34:ae:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:8A:5F:1C:D0:AA:6D:F7:42:46:5B:BE:FF:BA:C2:52:D4:28:EB
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:92:70:d9:c5:8d:94:34:f2:8c:7a:37:d6:6a:77:7f:81:8f:
         79:16:97:d2:e6:d7:9b:4c:02:da:6f:6c:78:51:60:a4:9e:a5:
         e4:63:61:f0:a3:18:50:da:80:9a:d8:e8:1f:b3:c6:ce:aa:4a:
         87:17:65:ff:02:eb:bb:c1:b6:db:89:74:d3:27:4a:38:5a:15:
         8e:af:aa:5e:fe:bb:12:bf:62:00:d0:c9:9d:0e:02:da:e1:4e:
         ed:15:00:f4:6b:d2:c8:26:47:82:23:04:82:e4:2b:be:e4:4a:
         f8:e7:3c:e2:7a:f3:0c:c6:c7:59:75:58:8e:91:15:4e:c0:93:
         ad:0a:26:15:59:d3:2d:7c:7e:71:04:03:57:ee:b6:d9:4b:8e:
         de:d9:52:25:62:4e:7c:65:12:21:c4:8b:11:ab:25:c6:87:7a:
         82:32:e4:f2:40:63:8f:b8:aa:cc:6e:c5:07:01:9b:09:11:2d:
         49:ae:6c:b7:29:38:0f:3d:10:0f:03:22:69:ad:ad:9d:00:fa:
         4e:97:81:86:db:40:58:a1:4d:5b:78:bc:4f:67:f2:8f:bd:e6:
         fb:aa:bb:05:24:88:91:4f:90:43:a6:b4:7b:ee:79:61:3b:1a:
         0b:48:d3:ab:88:7c:68:74:91:07:f4:f7:e2:0a:f1:e8:d3:1c:
         72:8e:22:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyxAAbtst732iwl88yAvC9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjYwMzAzMDAwMTM0WhcNMjYwMzA0MDAwMTM0WjAzMTEwLwYDVQQD
EyhlZjZhOGE1ZjFjZDBhYTZkZjc0MjQ2NWJiZWZmYmFjMjUyZDQyOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/VVR2lDEfV4yGdFS6XFN5dJi2Uy
c2aebaVszEJ0imxow1IT+8g4GNieOqNcoOOFaVKAqUoQqRz/Dx4OPyTHrzHmyQcI
HCplgWQz3YdPtLuLl2GeFGusPe3q+MJBnYvlVPJWZmSNBkwmptjlEncRWy28HCaU
UH9yEWDYQphzRcP9CPys2gAnWbra3uSUTltAC0NXoa9j28bAr8EIHi9BMhTMoP2c
rv7oRy4p8jW+1vhKJB7zMGifwxto3hoB0fT1y5ReiY0RcaC+gK+JinLb5Kn/mhy8
2ho/Zix9DRyZtzr4IJQn8nC74CkilijREyzfb6uofPVSrJ933w2QNK5qIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9qil8c0Kpt90JGW77/usJS1CjrMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5Jw2cWN
lDTyjHo31mp3f4GPeRaX0ubXm0wC2m9seFFgpJ6l5GNh8KMYUNqAmtjoH7PGzqpK
hxdl/wLru8G224l00ydKOFoVjq+qXv67Er9iANDJnQ4C2uFO7RUA9GvSyCZHgiME
guQrvuRK+Oc84nrzDMbHWXVYjpEVTsCTrQomFVnTLXx+cQQDV+622UuO3tlSJWJO
fGUSIcSLEaslxod6gjLk8kBjj7iqzG7FBwGbCREtSa5styk4Dz0QDwMiaa2tnQD6
TpeBhttAWKFNW3i8T2fyj73m+6q7BSSIkU+QQ6a0e+55YTsaC0jTq4h8aHSRB/T3
4grx6NMcco4itg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:22:04 2026 by rpki-client