Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          3fBr+Zdo15Ee4n960wuEwS1mpuUCGN0rWgtjI17dH/4=
Subject key identifier:   7A:E5:D3:E0:92:28:3F:BF:F4:CF:85:15:D8:F3:E0:5A:EA:10:CC:05
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019CA97D68489021DCC8ACB46933CCAC067C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          18A8
Signing time:             Sun 01 Mar 2026 13:01:34 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:34 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:34 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: WAMrBdqdpYk3puyF5aQ0EU4rUMJzCfWv5v+fFVIz3wM=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
                          20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:68:48:90:21:dc:c8:ac:b4:69:33:cc:ac:06:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Mar  1 13:01:34 2026 GMT
            Not After : Mar  2 13:01:34 2026 GMT
        Subject: CN=7ae5d3e092283fbff4cf8515d8f3e05aea10cc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:29:16:78:2f:d5:a6:ad:e5:db:12:75:42:
                    8d:3e:4d:8a:b2:cd:51:7b:a6:b8:99:82:37:15:c2:
                    8b:2e:1a:99:b0:42:78:ef:f8:04:8a:c8:4e:b5:f4:
                    a2:2a:ea:a4:01:9e:85:3f:49:09:b5:6c:91:64:ba:
                    e0:ae:45:e2:a3:f0:fc:65:a2:8b:3a:2f:8a:63:4d:
                    e5:cc:37:c1:d4:79:d3:d7:89:10:dd:4b:6d:7e:40:
                    9d:29:22:4d:fb:13:7a:c0:f9:4b:78:6f:10:84:9e:
                    0f:0c:0d:dd:7a:d0:95:2b:60:ed:c6:41:d2:6a:1e:
                    37:52:5b:45:37:fd:73:2f:c0:49:a3:45:6b:6a:6c:
                    f1:c3:fa:e5:82:78:89:aa:a3:e1:c1:0f:a2:cd:4f:
                    0d:e6:28:67:2e:71:7e:aa:31:15:1c:c4:99:94:e9:
                    b0:88:9f:df:2d:0a:e4:5b:1c:1d:02:1b:53:0d:45:
                    9c:75:92:cd:09:a9:17:3d:cc:fd:ff:ad:1a:68:83:
                    bd:f5:67:10:46:f3:23:c1:f8:8c:22:a6:0c:24:39:
                    7e:e0:cd:db:9e:1d:b4:a1:09:85:61:d3:6c:59:a7:
                    23:bd:00:8d:c9:0f:1b:7e:2a:44:0d:b9:7f:3e:f7:
                    b9:e3:85:7c:c1:c5:32:95:b9:f2:41:af:4a:c7:b5:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:D3:E0:92:28:3F:BF:F4:CF:85:15:D8:F3:E0:5A:EA:10:CC:05
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:df:65:e3:84:1e:62:85:86:87:a1:9d:09:ca:90:a3:42:c4:
         7f:25:ff:7d:d7:6e:82:d4:72:5b:60:30:d5:cb:7a:fe:08:83:
         a0:9a:63:5c:5c:92:c9:b4:3a:3a:4f:4e:44:18:3b:f9:45:7a:
         44:f5:dd:ca:92:9c:3a:65:fb:93:d4:60:0a:b8:c4:80:1c:67:
         79:4c:26:58:a8:70:27:63:0b:d7:78:70:dc:2a:5b:06:b2:9e:
         ad:c8:fd:37:9b:8c:6e:63:41:89:37:e7:4e:7d:27:7e:03:6c:
         42:16:3c:c5:27:f9:aa:db:c9:88:0f:4f:22:bc:bf:8e:87:cd:
         55:09:83:41:13:23:e0:a2:62:9b:f8:23:5c:97:00:f0:5c:cd:
         2c:39:11:bf:b0:6b:66:1d:52:0f:f8:21:6c:ae:78:16:6f:af:
         95:73:f9:b5:71:de:d0:ea:30:ed:94:77:80:cb:34:fe:93:63:
         9a:41:48:60:dc:f1:dc:0e:66:d3:fe:2a:04:4c:bc:5e:61:85:
         00:87:d3:24:92:3e:80:7b:38:18:39:b0:7a:e7:34:10:04:d5:
         0d:93:1b:18:f6:c1:73:78:be:e4:3f:6c:7d:7d:31:6d:3e:1a:
         7f:c1:a9:88:b6:c3:72:f2:b3:af:23:9e:c6:ee:cf:44:67:b1:
         1b:28:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:42 2026 by rpki-client