Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          d/adzUbhzGDVuMEtlbNR1e4mqLJ+Kvol4xd1NPifZtE=
Subject key identifier:   6D:AB:4D:29:0F:2C:39:6B:53:F3:BA:AF:EE:18:C2:7E:FE:DF:BB:67
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       019CABD8F286FCF269CCC7BF08FD5DB04FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:47 +0000
Files and hashes:         1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: v4Pt/7q2WsbGXlZyhIJVXeB5fnZBtDk8qdfHkPN6NPo=)
                          3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
                          4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f2:86:fc:f2:69:cc:c7:bf:08:fd:5d:b0:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Mar  2 00:00:47 2026 GMT
            Not After : Mar  3 00:00:47 2026 GMT
        Subject: CN=6dab4d290f2c396b53f3baafee18c27efedfbb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:93:cf:6a:83:2f:fc:02:84:d9:09:cf:50:
                    08:ae:5c:ac:45:4e:2b:86:bb:58:ef:c6:4d:7f:cb:
                    82:54:7f:8c:a8:da:32:11:21:24:05:56:20:60:3b:
                    19:56:a2:fb:65:0a:d0:c5:ab:ee:ce:92:aa:a5:53:
                    c7:ad:0b:4a:3a:b0:65:fc:f8:1a:8d:98:ea:ad:04:
                    81:4d:d5:75:37:c0:52:07:4f:88:ba:39:67:b8:87:
                    99:da:56:b4:17:55:3a:3f:60:f4:96:59:24:f2:6f:
                    ef:71:8f:3f:7f:cf:3d:38:6c:ca:31:f9:51:73:a5:
                    03:a0:00:e5:2b:dd:eb:5c:78:3b:e6:3e:09:0d:be:
                    c9:74:a0:d3:7a:ce:52:1d:65:43:3e:1e:58:62:73:
                    91:38:12:7b:48:e5:bb:ab:94:32:7d:91:4f:20:5b:
                    48:a1:27:ec:05:d4:42:f7:75:d9:b0:fe:a9:fe:2d:
                    5a:d6:89:bb:ac:ad:8d:8b:0c:63:d3:b4:32:89:f3:
                    f6:cf:ff:57:28:31:f3:ff:29:41:a5:b4:ae:6c:9d:
                    a0:17:be:bd:d1:09:ab:f4:25:9e:83:f1:21:45:ff:
                    0f:95:dc:14:39:46:03:e1:50:49:98:b2:16:51:a8:
                    f9:d4:55:1b:8b:1e:9d:2e:00:3b:16:0f:cb:1e:6b:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:4D:29:0F:2C:39:6B:53:F3:BA:AF:EE:18:C2:7E:FE:DF:BB:67
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:58:e4:9f:6e:4a:74:09:58:26:04:2b:d6:26:83:9d:c8:39:
         c4:11:a0:66:50:0d:9e:64:16:66:22:bd:2b:05:82:d1:32:0b:
         48:c7:6b:8c:56:15:e2:9c:6f:0c:80:74:f3:e7:9f:f9:34:ff:
         cb:98:51:35:aa:18:1b:41:cc:e0:c7:34:73:38:f5:e3:ac:5e:
         a4:2b:51:3a:f0:74:d2:72:0d:82:42:49:ee:59:b6:14:5e:92:
         af:fc:8b:52:14:b4:2f:05:8d:3b:c0:7c:7b:8a:9a:9a:68:40:
         49:70:a1:d1:ec:fa:52:c1:5a:53:6f:b0:b0:b2:15:9d:a8:ca:
         76:3f:af:8e:41:a1:63:4a:07:69:02:ae:1b:40:11:25:a8:8d:
         ce:e0:76:25:f8:6d:9a:26:6a:0d:cb:f1:ad:1a:af:db:e5:9a:
         12:c6:86:a8:7e:93:98:b1:97:1c:8e:30:d8:6c:3b:fb:f6:1b:
         6d:02:57:db:32:27:1f:6c:e1:14:89:ea:75:6a:82:97:ee:bd:
         79:04:e5:bf:dc:31:ae:6d:10:19:53:73:b5:f3:5b:b5:e1:04:
         8d:6f:3f:d6:73:75:d9:f3:fe:50:4e:89:41:08:a1:e5:e5:0d:
         30:dd:f4:4d:10:07:92:aa:e1:f3:5d:1e:09:f9:40:51:f7:71:
         4a:92:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:27 2026 by rpki-client