Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          0V/Jdxcq5JMHbp77LC60zMSWbYDJWSa4Rm/o8NZ0vvY=
Subject key identifier:   2D:C6:6A:8F:19:3B:41:50:48:A1:60:A9:43:2A:06:B8:C6:75:F5:17
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019EC0DAB87E3D3161AA416C8EC02B3854A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          0712
Signing time:             Sat 13 Jun 2026 12:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:19 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: dDuvbBN470stGP1P3AkzcIVjjPg5NFKbF/tP37Lz/Rs=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:b8:7e:3d:31:61:aa:41:6c:8e:c0:2b:38:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Jun 13 12:00:19 2026 GMT
            Not After : Jun 14 12:00:19 2026 GMT
        Subject: CN=2dc66a8f193b415048a160a9432a06b8c675f517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:30:3f:f8:ba:0d:d8:d4:be:e4:77:9c:29:
                    bd:bf:8a:6a:9d:b9:6a:1a:fc:21:fd:2f:1b:15:36:
                    e6:e3:79:41:46:38:cc:cd:a2:ca:85:3b:ee:e8:51:
                    f1:59:c7:ba:31:1d:17:55:ee:34:02:02:46:63:b3:
                    a6:d8:e6:0c:3a:d3:e7:e0:4d:8a:9f:08:c6:ea:1a:
                    5b:72:85:ac:08:4f:59:be:04:5f:3e:7f:e8:33:26:
                    51:7e:6d:29:38:2f:aa:99:ba:a9:b8:ad:98:3b:b8:
                    9a:e8:68:3b:cb:64:61:93:7b:aa:df:a7:ce:0f:36:
                    73:e7:ee:7e:0e:0e:b5:13:fd:51:e0:9c:d4:48:c2:
                    1d:aa:fa:84:0b:b5:82:b0:e1:42:38:e7:55:d5:65:
                    25:c4:ad:7c:4e:0d:45:93:9f:5f:1b:df:6a:0d:7a:
                    a6:fc:b0:ad:84:d9:cf:69:17:18:26:55:10:71:a4:
                    31:0a:63:1d:d8:36:51:8b:9b:ca:08:55:c9:f1:37:
                    59:3f:cd:0a:2d:8a:83:5a:b1:70:16:c3:39:83:4c:
                    69:89:c1:65:55:30:ce:e2:1f:0f:0b:e2:21:ad:72:
                    00:13:99:da:a1:11:d2:3a:6e:99:fb:86:96:a4:79:
                    5d:f5:a0:9f:90:6d:3e:9d:e7:ae:de:30:2b:ba:92:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C6:6A:8F:19:3B:41:50:48:A1:60:A9:43:2A:06:B8:C6:75:F5:17
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:87:c4:88:30:75:49:1c:30:b3:e9:43:ab:fd:1d:09:97:
         6d:e1:16:fc:a9:b4:63:66:54:2b:40:8c:00:1d:29:d0:dc:0e:
         e9:d4:7c:87:59:2b:3e:4d:cc:41:5f:65:a7:1c:b4:3b:23:68:
         a8:6d:dd:ab:99:fb:44:e3:30:f5:16:50:29:e0:99:8e:ff:af:
         b1:aa:7d:7a:68:4d:d2:9d:f1:68:ac:03:fc:7b:8e:92:c5:ff:
         04:fd:49:05:83:01:9f:fd:d3:05:2f:6c:13:54:42:44:4a:86:
         e2:39:46:d9:25:cd:9e:bf:37:cf:f7:78:df:ba:d0:c5:70:46:
         7f:75:f3:e4:74:f7:82:8b:b5:c7:2c:41:35:b0:d9:db:c9:fa:
         86:d3:65:af:0a:25:07:27:f9:8a:6e:d9:2b:05:52:17:15:35:
         67:45:ad:60:b2:a4:55:d4:87:85:9b:ff:20:45:ce:9f:39:74:
         69:04:33:a0:3b:a9:9f:3a:5e:80:b3:3c:9a:b5:d7:f4:61:e9:
         74:3e:2f:1f:14:79:4e:82:00:d3:5e:63:03:13:39:a6:40:fc:
         eb:ba:dc:61:d6:9a:17:5a:49:98:0b:54:4c:74:9b:15:3c:69:
         2d:2b:b7:af:6b:4b:aa:aa:40:cf:dc:a5:98:e5:99:43:36:a2:
         50:41:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:15 2026 by rpki-client