Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          WrFwdQcK/FIlCUQ+nr97Yb4gMfjlCzUl30fuFeOzAwk=
Subject key identifier:   39:8D:E4:75:16:9A:09:A2:6A:5A:14:A6:37:5F:07:D8:D8:17:08:10
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019D98F4BC14B8EF7C7F47D89274ACCD58BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          1924
Signing time:             Fri 17 Apr 2026 01:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:08 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: lkdfdpS6W0A6oXvMEPJrpNDq/PO8v8DD7P5UqezKe6g=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
                          20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:bc:14:b8:ef:7c:7f:47:d8:92:74:ac:cd:58:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Apr 17 01:01:08 2026 GMT
            Not After : Apr 18 01:01:08 2026 GMT
        Subject: CN=398de475169a09a26a5a14a6375f07d8d8170810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:f2:61:75:8e:7a:4a:f8:a2:b1:46:10:bb:
                    82:5c:c9:f8:17:15:e8:6e:9c:0c:65:df:c8:e6:c2:
                    4c:71:04:9a:1f:fc:c6:39:7c:8d:d6:8f:df:da:73:
                    76:e8:8e:2b:2b:f7:48:31:80:43:f9:2d:06:0e:d7:
                    77:0c:9f:88:a5:1f:9e:68:be:57:1c:c3:d5:15:76:
                    75:ed:3f:f1:03:8c:71:a0:83:3a:da:3a:d4:bc:eb:
                    9d:83:e7:45:a9:45:d3:13:c8:3c:c4:3c:11:44:b4:
                    ab:ff:d9:fc:9a:91:41:dd:49:4d:cf:cc:05:b3:fc:
                    2b:65:d5:83:a5:af:62:e1:d5:de:1c:d6:68:6c:9f:
                    e2:e3:08:c0:49:c9:3a:a9:7d:bd:66:d0:dd:75:e8:
                    a4:32:ee:cd:ae:b6:83:13:a2:1f:8b:8c:a6:93:69:
                    90:2e:e3:dc:30:1b:f2:a9:f1:1a:27:9f:c1:d8:de:
                    83:57:fb:08:60:49:70:b4:e8:09:4a:99:ce:a2:2b:
                    0c:87:a1:16:49:94:cb:f4:d1:ff:68:a4:70:93:53:
                    17:cf:e5:af:77:38:9d:07:4e:a2:1f:56:b7:fe:2c:
                    72:aa:03:0a:28:a4:2b:0d:18:5e:04:b8:aa:85:ac:
                    c2:65:d9:07:81:7e:3e:42:6f:5b:6d:31:69:42:75:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:E4:75:16:9A:09:A2:6A:5A:14:A6:37:5F:07:D8:D8:17:08:10
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:48:2f:62:b2:ce:6a:c5:57:b8:d1:e9:08:58:cc:03:0e:
         6f:9a:9f:b1:66:96:3a:2b:4f:0c:7b:a2:f7:d1:0e:b8:70:0a:
         94:40:20:29:2a:cb:da:26:b8:75:07:00:27:02:14:ce:e1:b6:
         ab:10:b1:b5:e9:e2:ac:e7:39:00:2b:3c:d7:5b:ec:0b:b2:ce:
         d0:45:b5:df:4d:3e:5e:27:4b:da:8a:20:92:1b:e9:d6:3a:06:
         f2:b1:1f:57:ef:34:fd:7d:e3:b8:0c:e6:e8:72:38:e3:d7:ac:
         79:0a:f3:87:f2:4a:dd:74:14:c4:83:61:72:22:f1:f7:8d:04:
         a2:ae:07:b5:8b:40:39:bb:bf:56:48:ca:72:d9:ff:00:dc:d3:
         5b:45:a8:63:81:ca:02:7e:fc:3c:61:64:0b:40:7b:5b:85:ac:
         c0:db:17:f7:1b:01:bc:9f:01:d3:35:65:b9:e6:97:94:7a:66:
         eb:7d:e5:97:11:98:0f:37:62:81:c0:c6:bc:03:af:18:bf:6d:
         90:f6:e0:44:a3:51:52:8f:65:be:2c:fd:ab:f9:f7:ba:22:03:
         cc:fa:5f:19:ac:c7:b8:fe:1d:de:7d:66:17:f1:f9:9c:86:ea:
         2d:14:4a:23:82:63:b0:25:e6:0a:86:fc:7d:37:62:f6:36:53:
         28:96:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:37 2026 by rpki-client