Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          Xkr5AQuuYw+mMIdEYk8aRBBE2ZcnCdNK6GyumzK3hDA=
Subject key identifier:   11:A8:63:31:F1:ED:B2:5C:0B:77:F1:B1:AD:B1:73:63:80:03:C8:76
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019FAA195CA24A2FB04E076819E9AD724BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          1A36
Signing time:             Tue 28 Jul 2026 19:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:16 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: J1YexJJuUgVYXwQaDWXpkGT+DLmbVNrgfcMzm1Rf0XU=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
                          20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:5c:a2:4a:2f:b0:4e:07:68:19:e9:ad:72:4b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Jul 28 19:00:16 2026 GMT
            Not After : Jul 29 19:00:16 2026 GMT
        Subject: CN=11a86331f1edb25c0b77f1b1adb173638003c876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:e1:1f:57:1c:2b:0b:85:81:8e:7d:57:6e:
                    4f:df:b0:24:89:b8:9a:7c:bf:b0:3d:57:68:e9:37:
                    07:0e:f1:ff:2b:d5:5a:f3:6d:7d:3e:63:bb:4a:2b:
                    f1:70:1c:77:1c:6f:c8:93:f4:10:bc:e3:27:a9:6d:
                    de:29:8e:c0:65:e4:c4:46:5f:47:52:cc:94:db:55:
                    a2:ce:9e:36:a5:9d:26:c6:aa:4d:b8:62:4d:ac:9d:
                    83:f8:01:62:64:98:73:03:c8:4b:d1:87:71:f5:ca:
                    a1:85:2e:2a:d7:d0:97:65:73:4a:2c:e5:1c:bc:c3:
                    bb:a3:f4:51:29:26:e0:5f:05:77:f2:7a:a2:a7:b0:
                    fe:25:4e:bc:c1:77:73:c9:21:58:d6:8a:21:1d:c0:
                    45:76:0e:22:35:bf:07:81:f1:97:b0:24:8e:07:b0:
                    4a:44:dd:d2:6a:3d:19:46:2c:bd:51:fa:ed:50:46:
                    d8:a4:f4:3a:32:cb:dc:88:64:db:37:a7:50:49:31:
                    41:75:65:1b:3c:0a:fe:69:24:d8:4f:24:7e:34:c0:
                    5b:17:cc:a8:bf:ae:35:30:d5:ad:9f:2b:1e:15:c1:
                    6c:2e:41:f6:90:28:6b:70:29:a7:bc:a9:04:e1:28:
                    59:2a:33:2f:dc:18:51:6b:a2:08:71:4c:1c:e1:26:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:63:31:F1:ED:B2:5C:0B:77:F1:B1:AD:B1:73:63:80:03:C8:76
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:ee:d7:24:67:4d:62:e2:84:b4:4f:51:d3:91:ce:df:56:
         ab:76:85:92:94:75:2d:cd:b0:d4:72:ec:8c:b4:6a:54:ec:e2:
         fd:d0:ef:69:18:6f:0a:74:8a:3c:63:60:e3:3a:a8:d1:d1:bb:
         d1:bb:a2:36:88:f9:88:4c:25:86:91:d6:46:95:f8:dc:d2:c4:
         90:aa:7c:d2:ab:4f:eb:77:d8:3b:e1:e1:97:55:ef:22:eb:e2:
         71:ef:9e:78:ed:68:1a:33:be:69:42:8d:63:12:da:a9:99:b5:
         f9:fd:51:36:54:b3:14:6e:18:ad:37:06:89:8e:29:d9:23:45:
         4b:00:5e:9b:9a:d6:aa:a6:31:bb:67:45:1c:18:6e:02:04:d6:
         10:c9:31:91:e4:09:31:05:ea:6d:4f:ef:f9:44:6c:8f:00:b9:
         86:00:88:21:8a:3f:fd:d7:2c:b7:56:71:4f:1a:bb:a4:a8:3d:
         06:85:75:2b:e3:c1:6d:0a:c1:06:c5:fd:6b:12:31:76:2a:ea:
         46:5e:78:27:30:cf:27:b3:df:87:5f:8a:5d:3e:24:3c:b1:87:
         71:fb:7a:09:e6:3e:91:dd:61:ed:65:97:49:63:a1:82:84:d0:
         72:05:42:c3:b7:0f:32:a2:3a:20:41:ac:33:3e:4d:17:30:18:
         27:a8:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:50 2026 by rpki-client