Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          v9fLwa5Xm0+jId/MszpPE+IwRFY0Ueu+hJPazAwny/U=
Subject key identifier:   B0:1A:5D:7D:7F:A3:40:95:27:51:40:47:3A:85:65:89:EA:61:3C:5E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019874F4BC35DEE91F37487139D87D22D642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          1679
Signing time:             Mon 04 Aug 2025 12:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 12:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 12:00:52 +0000
Files and hashes:         1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=)
                          2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=)
                          3: 7WjSgMc07SzfT635zdA34HJuKpY.roa (hash: gHF3rjtW1hun8ETR5As505HwZP4tO+oLSUOaSw28d9o=)
                          4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=)
                          5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=)
                          6: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=)
                          7: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=)
                          8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: 3Yga+wILIpTioPX09hvVqZIEW5j85At4ORXxIGh51hY=)
                          9: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=)
                          10: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=)
                          11: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=)
                          12: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=)
                          13: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=)
                          14: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=)
                          15: Zc32tz1ZjSWwVgQorA7lXMaw-xA.roa (hash: HRYYNy4880mDT+crSQhmT3WO1uhHjRCZk7D2GRyCL/w=)
                          16: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=)
                          17: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=)
                          18: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=)
                          19: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=)
                          20: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=)
                          21: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=)
                          22: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=)
                          23: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=)
                          24: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=)
                          25: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=)
                          26: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=)
                          27: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=)
                          28: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=)
                          29: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:bc:35:de:e9:1f:37:48:71:39:d8:7d:22:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Aug  4 12:00:52 2025 GMT
            Not After : Aug  5 12:00:52 2025 GMT
        Subject: CN=b01a5d7d7fa34095275140473a856589ea613c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:62:b5:f8:fe:40:27:07:d1:9d:29:5e:fc:
                    ec:c9:a0:d7:2e:13:c2:c0:98:23:d0:26:9c:00:5a:
                    25:6a:81:52:a0:30:e1:e8:d5:7c:07:c8:89:d7:64:
                    cc:ef:4b:25:3d:9b:c4:6e:52:35:e6:16:ea:75:0e:
                    9e:06:4e:29:98:6d:14:1f:3d:3a:09:6f:dc:db:68:
                    81:55:12:01:af:28:9f:f8:97:b7:1c:63:21:55:b6:
                    32:9c:c7:22:be:31:b6:0c:8e:73:27:21:83:ba:98:
                    80:bc:bf:41:1b:1f:d7:e8:5d:ad:5d:ab:9a:7e:ab:
                    39:71:ec:c7:d5:4e:99:68:67:71:f6:26:fe:18:10:
                    93:14:af:f8:e3:2f:7f:4a:6f:c9:58:8a:d1:21:17:
                    a8:84:68:20:68:9f:81:0c:2b:3c:73:3a:f2:5a:3d:
                    15:28:11:ed:7d:41:35:2c:0a:36:64:dd:b5:c5:43:
                    f4:1f:d9:41:4f:68:86:1c:fa:a2:3e:6e:82:5b:c3:
                    47:16:27:fd:a0:68:83:10:96:39:d9:07:f1:16:27:
                    5a:5d:54:46:85:92:5f:67:60:58:70:e3:71:fc:90:
                    1d:12:c8:39:f9:e9:37:55:69:55:d1:bb:2e:8f:2f:
                    5b:80:d5:21:dd:5a:a7:34:70:3f:e0:68:b4:a0:2f:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:5D:7D:7F:A3:40:95:27:51:40:47:3A:85:65:89:EA:61:3C:5E
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:54:f3:ab:42:d2:2c:c9:7c:07:57:9b:2b:71:75:7e:fd:57:
         84:97:0e:45:50:a1:7e:58:ed:3d:a0:52:11:18:da:89:21:72:
         57:bc:01:00:c4:0b:f7:85:56:08:3b:45:4c:34:fc:35:c0:4e:
         d2:d8:c0:56:c6:59:0e:d2:93:8d:07:c5:0e:a0:e0:de:9e:d2:
         4c:d2:c4:4d:8d:5c:05:03:a1:a3:cd:e4:25:be:15:c0:38:56:
         92:a4:3e:b9:bf:f7:31:af:1b:5b:28:e9:d7:dd:29:49:45:a6:
         93:2d:f3:26:89:ff:c2:9f:a9:28:c4:84:9b:4a:2c:df:a1:24:
         91:b0:38:ee:83:5e:02:62:2b:a3:97:1e:70:27:ec:db:1f:75:
         05:02:21:54:c4:71:f8:8c:4f:de:89:b6:e4:da:eb:ac:8c:0a:
         97:8d:30:b5:dc:88:bc:fc:20:0d:f6:26:e8:89:7e:4b:ca:1b:
         41:91:b7:89:87:86:4d:ab:21:a1:f5:8f:a2:de:d2:89:8f:66:
         87:d2:f6:5b:77:24:a2:ac:8a:f4:83:8b:5e:ea:c0:63:a4:ea:
         ee:28:90:88:29:a5:c8:75:27:75:19:ca:62:89:36:6b:42:68:
         ec:52:84:c5:29:d8:a3:6a:5e:27:24:d6:cb:65:57:c8:4f:17:
         df:1e:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:32 2025 by rpki-client