Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          iBRz5YRvBPWtHGMGTQo2S/rikgnDCuqdvTb8p7UK0AY=
Subject key identifier:   B4:41:32:2D:ED:27:EA:60:07:8A:9B:9C:72:93:BE:1A:69:76:78:47
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019FA8998BEC6C10F0EDEE739EFF2319E58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          078A
Signing time:             Tue 28 Jul 2026 12:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:02 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: uo02OFtagrRixxX98BR1kUw2KlFjPhJ6N2lvY9qPoz4=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:8b:ec:6c:10:f0:ed:ee:73:9e:ff:23:19:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Jul 28 12:01:02 2026 GMT
            Not After : Jul 29 12:01:02 2026 GMT
        Subject: CN=b441322ded27ea60078a9b9c7293be1a69767847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:ee:74:c6:3e:66:7b:12:c8:a7:84:1d:2f:
                    83:f6:1b:90:e1:91:f7:59:66:76:0c:33:53:b7:89:
                    cb:1d:ce:36:8f:2c:fd:35:56:c2:55:ec:e5:20:8c:
                    fe:29:1a:14:d1:b2:79:f8:c5:88:3f:2e:55:fe:8a:
                    9e:66:9b:35:ef:a7:a3:3a:ed:e6:dc:05:3e:12:8a:
                    f2:fe:c0:ec:75:e3:40:c2:83:de:0e:b7:76:4b:06:
                    5f:bd:c5:82:b7:2c:87:41:3e:13:db:18:ff:9e:e6:
                    99:76:28:17:6d:8b:0f:c3:cb:fd:9e:05:07:61:69:
                    a8:f6:eb:e9:69:8e:4f:79:e3:6c:e0:7e:79:15:a6:
                    c5:48:3e:f0:d4:54:3a:95:5f:f2:72:ff:43:31:7f:
                    2d:f8:17:ce:5f:47:b7:51:78:6b:26:ac:e8:5c:6e:
                    67:cb:cd:a8:65:34:9c:1c:c4:5f:c9:10:b2:9c:ac:
                    04:80:bd:3b:fd:e1:0d:30:fd:0b:f8:f0:48:a7:cc:
                    3f:eb:7d:b1:8a:44:68:f8:a4:f8:d8:5b:7d:49:0d:
                    14:7f:36:4b:8b:75:1e:c9:79:d7:f1:76:e7:4b:63:
                    d9:63:bf:57:1d:6f:29:93:60:0d:8c:8a:0e:68:86:
                    67:72:76:fa:d4:5f:e1:b1:bd:46:76:7d:13:ff:b0:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:32:2D:ED:27:EA:60:07:8A:9B:9C:72:93:BE:1A:69:76:78:47
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:58:ae:b0:9e:87:dc:ec:07:86:8c:71:13:b5:6a:19:35:a4:
         9b:dd:37:6b:50:4f:8e:1d:32:24:de:64:36:fc:5c:24:29:35:
         cc:a7:83:e9:b6:9e:ac:24:8c:e0:41:50:30:c8:bf:58:c0:60:
         df:d5:2c:d6:29:ae:31:9b:e9:86:44:ce:43:b9:c2:9f:5f:41:
         ee:ad:ca:06:21:3a:45:e6:1b:6e:d5:2e:f1:76:d1:40:47:ba:
         60:b9:f5:1a:b5:18:fe:ac:70:a8:a2:2c:3e:5d:6c:e4:a5:11:
         2c:2d:89:81:1d:df:9c:55:a7:09:56:ee:5e:fe:30:ff:bc:44:
         d4:d0:46:f1:08:c0:4a:3a:2c:76:90:8e:44:5b:8a:e0:85:92:
         40:3c:74:74:c5:3b:aa:82:9b:c6:de:04:26:e4:a2:48:32:c8:
         c5:5e:65:87:00:ec:54:e8:7d:29:ce:57:8d:cc:7c:40:a2:8f:
         11:20:97:0e:30:bb:de:39:f8:a5:c3:c2:09:18:b4:ce:b9:e3:
         65:87:a6:bd:7b:6a:0f:7c:ad:c3:3a:00:41:c9:76:3a:3f:b2:
         74:40:80:3b:f4:f2:89:90:30:db:a1:35:c9:15:3d:70:c4:86:
         33:7c:3d:da:7b:bb:26:b3:fe:a7:f5:31:09:5e:45:a1:fc:8e:
         bb:6a:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:35 2026 by rpki-client