Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          a2gnYdYKrC0qix9PMJpjFsbdZhLmwYaGbu27POLxJGQ=
Subject key identifier:   25:C0:7E:75:1C:07:31:34:63:1A:13:E8:82:CE:69:1B:D0:E7:3F:2A
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019CA946210B8112B6DF069B8B9484F309CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          05FC
Signing time:             Sun 01 Mar 2026 12:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:11 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          9: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          10: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: z63/L66W5U2yPLEBmMBeIH6/E8/txTpfIYD5eDMuC4M=)
                          11: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          12: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          13: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          14: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          15: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          16: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          20: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          21: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          22: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          23: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          24: phIldGr0t0uwTW-BuSAmzN6XhjE.roa (hash: raVegt7yKtN8ZFOUbeTVHlJ8PtEpgoSSdoNKxRXXN5Y=)
                          25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:21:0b:81:12:b6:df:06:9b:8b:94:84:f3:09:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Mar  1 12:01:11 2026 GMT
            Not After : Mar  2 12:01:11 2026 GMT
        Subject: CN=25c07e751c073134631a13e882ce691bd0e73f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:c5:66:fc:54:82:e4:97:6d:a6:ab:c6:78:
                    8d:b5:e9:27:58:a0:0a:2a:47:0a:31:28:7b:d6:81:
                    1e:22:3b:b5:b1:89:3e:9e:b1:67:12:d6:a7:f7:ef:
                    2d:e4:3e:c6:30:68:ed:56:1a:60:5b:6b:85:56:15:
                    4f:03:dc:f3:c5:bf:ff:8d:9c:0d:9d:f3:87:6c:34:
                    6e:95:54:a1:58:84:c6:50:ed:1e:c2:4d:ab:3d:cb:
                    ea:e7:65:b9:37:04:19:96:68:56:9f:18:4c:80:70:
                    a5:15:77:d4:5b:71:9a:08:23:38:5a:58:97:a2:8c:
                    42:32:4c:f7:76:d4:d7:79:65:c4:4e:20:dd:85:81:
                    c2:fb:c0:36:1e:da:e2:96:e7:11:cf:b5:6d:97:51:
                    f4:16:06:63:8b:83:67:47:7f:c8:7b:01:97:75:9c:
                    89:b5:87:35:b0:b3:19:94:79:ec:b2:64:88:00:54:
                    6d:10:6b:08:c7:fe:5f:54:33:d2:2f:37:1f:60:e2:
                    47:1c:85:d5:8b:7f:49:25:84:d4:79:3c:17:73:c0:
                    d5:23:04:2e:94:90:52:06:5d:dc:b8:9c:12:6d:38:
                    a3:04:bd:db:6f:91:b4:63:27:82:0a:0e:ac:b2:de:
                    a5:c0:10:17:0f:11:ea:59:45:d0:3c:bc:31:24:80:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:7E:75:1C:07:31:34:63:1A:13:E8:82:CE:69:1B:D0:E7:3F:2A
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f4:a4:4f:c7:be:f1:94:2f:a0:f9:69:17:8f:51:6e:84:b6:
         e4:19:e9:a4:98:d3:07:2c:ce:63:10:a8:63:10:21:67:60:34:
         1e:f9:55:e4:12:51:7b:8b:cd:67:d6:5e:e8:4a:fb:87:5a:89:
         fb:f1:b7:39:40:8f:00:94:5a:43:58:99:07:53:ae:61:b0:61:
         8a:5e:76:46:21:39:90:83:4c:f9:28:42:3a:c3:fe:31:ce:f2:
         f3:0b:62:5e:27:5d:04:3d:43:c0:19:02:8d:8a:51:dc:8f:ad:
         7b:9c:3e:b0:f3:71:b9:f1:3d:c4:df:33:70:1d:a3:6e:0e:0c:
         d9:ca:d0:36:84:0a:5d:31:17:8e:7f:7e:eb:cb:db:56:5f:af:
         31:53:02:96:e3:8a:94:23:83:c1:16:cc:b4:20:c0:fe:82:7a:
         89:64:e4:0f:55:ad:1d:01:af:b3:45:3a:1f:bd:de:25:48:5c:
         91:9d:04:3e:9e:06:b0:bf:53:70:2b:d1:4a:b1:fc:65:92:0f:
         0f:01:df:c8:4f:06:4a:53:f0:2c:b8:2e:da:90:b0:8d:4b:2b:
         95:ed:82:3f:0d:64:6c:fc:17:38:90:50:75:a2:73:1e:df:57:
         bc:0e:ba:06:b0:8c:7a:81:94:79:a6:da:ae:91:d7:b5:58:a8:
         66:1e:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:38 2026 by rpki-client