Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          ugUAVt3b1iJ0hfDjZogIPMmfOf5yKAfIcUnGOzxgZvo=
Subject key identifier:   62:D1:0C:85:4D:91:DC:71:3B:66:27:29:AC:A2:F5:86:04:A7:B2:A9
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       01A0DEA9E94B9EB057574C67D6E39BD8020F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          1A04
Signing time:             Sat 26 Sep 2026 17:01:12 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:12 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:12 +0000
Files and hashes:         1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: 0+Lgo9U4NbKdA2ZZfofwiV+MF4jnA27KpX9GWB4Xac0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:a9:e9:4b:9e:b0:57:57:4c:67:d6:e3:9b:d8:02:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Sep 26 17:01:12 2026 GMT
            Not After : Sep 27 17:01:12 2026 GMT
        Subject: CN=62d10c854d91dc713b662729aca2f58604a7b2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:c3:16:2b:b5:ae:6d:56:28:58:82:33:1f:
                    eb:cd:f4:4b:91:b3:97:da:bf:97:92:40:b6:bd:2f:
                    92:96:a0:76:44:0d:f7:31:8e:13:e2:63:8b:8a:9b:
                    b9:ea:6a:b5:17:93:2c:d2:b7:e3:af:cf:f8:4e:48:
                    92:e5:93:95:3c:14:f6:99:ec:bc:9f:0f:d5:33:5f:
                    3e:89:df:8c:fe:c4:45:c7:33:dc:da:85:b0:d2:91:
                    ad:80:35:78:24:32:b5:7d:d7:86:e7:80:22:2e:f4:
                    33:84:ad:a8:f5:e1:1b:98:a1:a7:e9:66:10:69:b2:
                    c2:da:67:4a:5a:5e:bb:cf:9e:ec:56:53:bb:d8:2c:
                    4b:0b:90:ba:12:eb:05:35:b9:03:c4:66:06:09:f6:
                    c3:b4:ab:90:42:03:64:e1:42:86:f1:e4:7c:78:41:
                    9f:7e:29:0f:a7:2d:c8:29:15:2c:0d:1e:b7:f1:0b:
                    4b:4b:a1:79:e0:a9:a5:2d:af:82:cb:ab:b0:ba:66:
                    43:06:f2:ea:28:d3:21:c4:37:ce:02:f3:7e:2a:65:
                    bf:2e:9e:7b:01:65:15:5e:f7:36:b7:f3:74:e3:1a:
                    5b:18:a0:ef:77:82:e2:71:c8:12:22:ad:e0:94:80:
                    0d:e5:7a:60:d0:eb:1f:4d:35:60:56:ad:93:ca:78:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:0C:85:4D:91:DC:71:3B:66:27:29:AC:A2:F5:86:04:A7:B2:A9
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:da:34:45:6e:de:32:bf:40:b1:05:b4:18:d0:47:b6:59:19:
         72:28:4e:30:96:86:4f:28:20:52:4c:3f:84:be:5b:fc:2c:6e:
         1b:09:f0:06:b3:53:fa:3b:4e:4a:fd:65:98:6b:e9:ea:f2:ec:
         15:1b:00:3d:08:cc:04:b7:cb:00:14:b6:6b:a8:d4:b4:62:36:
         e3:30:a2:4b:7e:67:db:8d:1e:c4:84:cc:62:0b:0b:76:8e:ca:
         c1:10:70:b8:70:23:4a:d8:43:a8:85:f5:1a:f6:20:ff:45:40:
         50:47:ab:dc:64:6a:5d:1c:d4:41:7b:59:23:ae:d6:1f:d3:ec:
         23:06:81:0d:7c:ae:41:d9:6e:ae:3c:02:77:27:04:9b:78:3f:
         ed:e9:56:09:34:f0:e8:51:fb:a3:f1:6e:50:92:2a:6d:be:e7:
         6c:f9:79:26:64:97:c2:8a:be:c7:61:3b:91:24:05:f6:f0:56:
         a8:16:7d:88:a2:8e:fc:59:a1:50:1d:ed:fd:a4:50:99:f7:fd:
         ea:46:7f:cb:36:3a:53:85:50:0e:f6:a2:29:66:63:75:8f:8d:
         00:92:ea:8c:ad:dd:2f:b7:55:95:91:2a:81:8e:2d:28:73:c2:
         9a:16:3f:14:7f:3f:cd:b0:70:87:ec:02:0c:99:2c:73:3c:5f:
         e7:36:4f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqelLnrBXV0xn1uOb2AIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjI0Nzg1NDlkOGNjMjY0YzJjYzU3ZGNlNzE5MDVkMTc2
ZmI4OGEwHhcNMjYwOTI2MTcwMTEyWhcNMjYwOTI3MTcwMTEyWjAzMTEwLwYDVQQD
Eyg2MmQxMGM4NTRkOTFkYzcxM2I2NjI3MjlhY2EyZjU4NjA0YTdiMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2DDFiu1rm1WKFiCMx/rzfRLkbOX
2r+XkkC2vS+SlqB2RA33MY4T4mOLipu56mq1F5Ms0rfjr8/4TkiS5ZOVPBT2mey8
nw/VM18+id+M/sRFxzPc2oWw0pGtgDV4JDK1fdeG54AiLvQzhK2o9eEbmKGn6WYQ
abLC2mdKWl67z57sVlO72CxLC5C6EusFNbkDxGYGCfbDtKuQQgNk4UKG8eR8eEGf
fikPpy3IKRUsDR638QtLS6F54KmlLa+Cy6uwumZDBvLqKNMhxDfOAvN+KmW/Lp57
AWUVXvc2t/N04xpbGKDvd4LiccgSIq3glIAN5Xpg0OsfTTVgVq2TynjdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLRDIVNkdxxO2YnKayi9YYEp7KpMB8GA1UdIwQY
MBaAFCliR4VJ2MwmTCzFfc5xkF0Xb7iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWIt
YzhkZjg0ZTdhZTI5LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWItYzhkZjg0ZTdhZTI5
LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAado0RW7e
Mr9AsQW0GNBHtlkZcihOMJaGTyggUkw/hL5b/CxuGwnwBrNT+jtOSv1lmGvp6vLs
FRsAPQjMBLfLABS2a6jUtGI24zCiS35n240exITMYgsLdo7KwRBwuHAjSthDqIX1
GvYg/0VAUEer3GRqXRzUQXtZI67WH9PsIwaBDXyuQdlurjwCdycEm3g/7elWCTTw
6FH7o/FuUJIqbb7nbPl5JmSXwoq+x2E7kSQF9vBWqBZ9iKKO/FmhUB3t/aRQmff9
6kZ/yzY6U4VQDvaiKWZjdY+NAJLqjK3dL7dVlZEqgY4tKHPCmhY/FH8/zbBwh+wC
DJksczxf5zZPjA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:20:19 2026 by rpki-client