Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          Lxa356AiwupNu8kR3Ow35EjCULTsRZElhgdeeaBADtc=
Subject key identifier:   8B:54:82:21:13:FD:A6:26:D9:53:07:AC:E7:1A:E0:E6:CE:5D:A1:5D
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01987B9B6F7DFAECA4105B10D283EB068118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          03CF
Signing time:             Tue 05 Aug 2025 19:00:40 +0000
Manifest this update:     Tue 05 Aug 2025 19:00:40 +0000
Manifest next update:     Wed 06 Aug 2025 19:00:40 +0000
Files and hashes:         1: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (hash: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=)
                          2: 1-sXlT3E8V0jDUCM-Ybkr4a6wLlo.roa (hash: CvuY/DdFSGhFi/vthGK/0x8yOd1SW50ze7RG7bTscdY=)
                          3: 23TgW8ntI2ILy6aYdWnPiFZ1lCo.roa (hash: ACzq+LL9O6HN/eK/FdnwVUcZqfW7/FnPBpBtuHyB5Tc=)
                          4: 8I731pLlO7OZA-KP6_7Tyd0X0p8.roa (hash: AgOQfpoBY8oNnSKqmzrHEGGLFBw8XUwNyYW1y0VgcFQ=)
                          5: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (hash: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=)
                          6: BI1_IYMcz04ApdAcr2QAYo1Gijc.roa (hash: L+zD+W35uF9Uwlx9BIqDCzEBqTULiJDb8lRlDdA0EUg=)
                          7: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (hash: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=)
                          8: CcxEno_jEtaX0KN3AA2g0Shd474.roa (hash: jA+cvgfVuYtk2xkD4ZpvJ7Suqx69jcihGW9LGglgzLU=)
                          9: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: ulcGV/WE3aunBbUWSTblRYZE6VEOq06keGXGZGsfZZk=)
                          10: KxFAsk_pGP2Pa6f07aaCC-CRB8M.roa (hash: JAbgkUw87S+IKDAYPwMES7yth/c/8IRwqFtcxaVv4C8=)
                          11: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (hash: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=)
                          12: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (hash: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=)
                          13: QMiTm2-yiJDC2oOCB78-T7uhy68.roa (hash: ulPDJeSyn/J0aOHbAtmPLp6M9W5etSSNT8E799B3xEE=)
                          14: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (hash: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=)
                          15: U8FQsy0_ygrjfzDfPCuVUPjhxFI.roa (hash: VMdtwa4FkFy7nwi/xmcQtKtxXBN5sTN7YZIqy4ryF34=)
                          16: YeWW1PCTf3K6IXfWsiPqRL1xngw.roa (hash: eB/pknTzW+YV8hh7dZBIuVdC4d8+EHVKJgeJu2HkTYg=)
                          17: ZdiJyoo-l9tkMe9J769OhHUhgMY.roa (hash: AHUi1asCEzcucu2jHRjdz9eQqbhd55OH2AnByHrwu+A=)
                          18: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (hash: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=)
                          19: amm4UyE6_-2iIfziflS9OWcpi0I.roa (hash: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=)
                          20: bxqRKqA4ZCz-HC5KXbkRpv1VjKY.roa (hash: 1IZMZI5YlnRhnfeBN3K+N1PwHEVvMMcDuqlDUtvJ1nU=)
                          21: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (hash: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=)
                          22: sxNoWpD05QIoi_m8uc_lksfhDKU.roa (hash: wKcDV3z8mFiezwypjA2UNeuoXxV0RwLF2Q6N6uhTmzY=)
                          23: wFjr7ivDDEhOQrSM9UUePfjq6BM.roa (hash: hoiviRTlIUkKH3GW9AA2j6niz2qq5NnhMhKDwUCKYys=)
                          24: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (hash: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=)
                          25: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (hash: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:6f:7d:fa:ec:a4:10:5b:10:d2:83:eb:06:81:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Aug  5 19:00:40 2025 GMT
            Not After : Aug  6 19:00:40 2025 GMT
        Subject: CN=8b54822113fda626d95307ace71ae0e6ce5da15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:b8:ee:00:6e:c6:83:ec:7f:73:ed:1c:b3:
                    00:15:3c:3e:f5:bc:92:5d:ec:10:91:9b:2b:86:d0:
                    6d:57:b2:cc:be:30:39:37:7e:2b:08:78:e7:be:a3:
                    15:a8:7a:b2:43:42:75:e9:44:8c:25:b2:a6:58:de:
                    9c:ac:d2:5e:3d:f6:99:7a:d9:48:94:8c:18:85:e7:
                    79:24:9f:45:76:b8:6d:95:6a:c2:2e:09:54:aa:ba:
                    0f:34:33:6c:8e:3a:d6:90:e4:cd:c9:5e:c9:1d:7e:
                    67:34:c9:ac:54:ba:f7:49:b9:cb:47:d9:23:be:8a:
                    0d:40:c4:b9:da:26:64:c6:e1:e6:45:16:52:71:05:
                    42:65:2c:5b:c9:1c:94:f9:0b:39:36:88:8b:6e:bc:
                    c4:a9:da:25:ee:cd:ab:f5:ac:3a:eb:c8:2d:68:05:
                    1b:97:e2:48:11:aa:f5:13:53:f3:76:ed:6a:fa:36:
                    ee:31:59:5f:c4:76:2c:34:1b:86:c3:df:6b:0d:47:
                    13:c2:8f:48:5e:33:43:3b:77:67:41:89:04:e2:36:
                    74:a0:55:58:6f:f9:5f:0d:91:d9:4e:b9:ad:38:4c:
                    2f:56:be:cb:1d:1c:dd:e0:14:bd:c4:9b:bb:28:ca:
                    69:85:74:f8:f6:69:f2:8d:2b:24:15:19:fc:80:10:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:82:21:13:FD:A6:26:D9:53:07:AC:E7:1A:E0:E6:CE:5D:A1:5D
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:43:b1:22:f9:7a:96:54:1b:5d:c1:c3:9d:9d:24:4e:3d:af:
         2a:61:bd:94:1d:54:2c:0f:94:74:cd:ce:99:46:f5:54:5d:f1:
         2f:6b:d3:4e:3d:84:84:ed:e7:d8:f8:61:fb:36:a0:bf:f9:43:
         58:a2:65:6e:4d:80:72:93:63:9d:2d:ba:e8:63:98:15:4a:49:
         e2:f1:28:6f:53:c3:81:b0:bc:2b:05:72:33:8f:e0:d8:5a:36:
         d9:06:40:04:50:0f:7c:ea:21:25:c3:a6:2f:dc:64:04:80:f4:
         b1:7c:19:49:9b:d5:85:56:ef:0b:80:68:67:a3:dc:a1:70:ed:
         67:92:1c:b3:1e:3d:a9:96:42:4f:e2:7e:21:da:99:47:f0:b9:
         a1:97:fb:9c:d2:21:09:6b:46:55:7c:7f:ae:5c:eb:03:ac:a2:
         0d:5d:11:eb:38:8a:fd:f5:ca:30:6f:bd:1f:36:b3:ed:20:b5:
         2d:df:bf:31:d5:ef:54:54:61:d1:1a:ee:89:05:6d:52:90:b9:
         78:26:df:57:ae:d4:2b:e8:93:1b:59:2c:26:20:91:10:89:29:
         fc:6a:e3:03:51:29:e5:fb:d1:61:60:43:95:92:cc:59:75:44:
         5b:41:c3:97:e5:25:e1:d7:26:ae:9e:0f:b0:8d:c7:c0:c4:82:
         f7:c6:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:57 2025 by rpki-client