Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File:                     kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier:          M5YwKcI+nd3qyELFybD8YNraG99iRU9krCV7aDedLYE=
Subject key identifier:   17:87:DE:1A:83:8F:3B:23:2E:05:17:91:14:CD:62:D6:9C:EE:02:B3
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       019DA3AF1378B00ED3A69CB7604994132F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number:          185B
Signing time:             Sun 19 Apr 2026 03:00:53 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:53 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:53 +0000
Files and hashes:         1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
                          2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 8yEGwU7Q03rg8CQFJqFJRMMeWORLVzK5HgZp8/4yz5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:13:78:b0:0e:d3:a6:9c:b7:60:49:94:13:2f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Apr 19 03:00:53 2026 GMT
            Not After : Apr 20 03:00:53 2026 GMT
        Subject: CN=1787de1a838f3b232e05179114cd62d69cee02b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:9d:11:d5:5c:e7:cc:d6:14:b8:d5:1f:2a:
                    5e:42:04:e8:47:f6:97:6e:43:38:8c:be:dd:16:b0:
                    47:9e:51:d7:a6:41:36:38:49:02:4f:e5:0f:5e:a9:
                    b3:13:8b:cd:ea:1e:0d:dc:c3:d0:7f:bd:a8:f4:4d:
                    ba:b5:cf:4f:ed:c5:10:7f:d0:90:c3:e6:de:59:b9:
                    72:be:22:3f:75:c2:73:1d:ac:1b:cd:9b:35:6b:a2:
                    df:cc:8d:85:ed:55:d3:83:74:c1:31:e1:ce:9f:20:
                    b9:79:d7:53:2f:e2:30:e8:72:b1:1c:e8:a7:3c:8a:
                    4b:32:26:94:50:43:06:1c:77:b0:6e:04:9a:08:ce:
                    59:76:79:49:98:58:38:a6:31:13:68:84:6b:64:f3:
                    b7:10:25:43:4f:bc:6f:b1:c7:44:39:b5:4d:34:60:
                    e8:0f:df:29:98:17:87:34:03:05:76:14:52:7c:e4:
                    79:a1:98:da:8a:8e:bd:01:3b:5c:5a:b4:64:c8:ff:
                    eb:d7:fc:88:aa:76:7c:f8:a4:96:d1:bc:41:3e:d2:
                    d6:f4:9b:bc:f2:a2:73:2a:42:47:b8:df:b1:35:3e:
                    5e:11:a6:b6:f5:1d:4c:05:c8:86:6d:03:6a:35:3c:
                    4b:cf:ef:b7:05:dd:8b:3a:c2:d4:5c:28:f7:e8:31:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:DE:1A:83:8F:3B:23:2E:05:17:91:14:CD:62:D6:9C:EE:02:B3
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:57:0b:4e:49:b5:7c:9b:c7:21:36:38:20:53:76:39:80:5c:
         40:86:0e:31:9a:1a:5e:6e:a7:2a:d6:e9:9a:70:3f:a2:a5:56:
         64:bf:c9:19:95:2e:f2:91:fa:b6:d6:fb:11:15:77:a0:3a:6a:
         5f:cd:d0:00:07:01:e8:95:66:b5:71:a0:f4:2d:24:04:86:95:
         64:95:eb:c5:66:74:3b:69:5f:dd:30:bf:d2:90:df:58:7f:26:
         90:14:ee:73:79:cd:5b:f1:02:d8:57:79:2c:51:f5:f4:7d:5e:
         f1:e1:62:fe:4d:79:e7:32:67:9c:86:90:12:3b:3b:26:e8:68:
         67:a8:9e:cd:d2:da:3c:f9:6a:4e:3a:70:37:fe:c8:d8:5f:6a:
         7c:cc:ad:5e:c5:8f:8a:af:5b:c6:e7:a3:94:5d:71:f4:89:a0:
         7f:35:4c:00:4f:d4:51:b4:c9:05:54:e3:80:12:2f:e7:2e:4b:
         b4:07:9d:fa:4b:01:bb:62:27:3c:39:23:e3:c5:ba:e8:83:54:
         e8:c5:ca:43:f3:94:22:d9:8e:17:fc:c2:3b:9b:8f:9b:10:20:
         88:59:1a:63:e3:56:6a:b8:a0:09:bd:f7:52:7a:b6:aa:3c:0b:
         87:fc:5a:13:b7:ec:48:b5:9c:4c:9f:c8:cd:25:d5:d7:2d:5f:
         fd:b9:cb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrxN4sA7Tppy3YEmUEy9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm
MTlhNjAwHhcNMjYwNDE5MDMwMDUzWhcNMjYwNDIwMDMwMDUzWjAzMTEwLwYDVQQD
EygxNzg3ZGUxYTgzOGYzYjIzMmUwNTE3OTExNGNkNjJkNjljZWUwMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT2dEdVc58zWFLjVHypeQgToR/aX
bkM4jL7dFrBHnlHXpkE2OEkCT+UPXqmzE4vN6h4N3MPQf72o9E26tc9P7cUQf9CQ
w+beWblyviI/dcJzHawbzZs1a6LfzI2F7VXTg3TBMeHOnyC5eddTL+Iw6HKxHOin
PIpLMiaUUEMGHHewbgSaCM5ZdnlJmFg4pjETaIRrZPO3ECVDT7xvscdEObVNNGDo
D98pmBeHNAMFdhRSfOR5oZjaio69ATtcWrRkyP/r1/yIqnZ8+KSW0bxBPtLW9Ju8
8qJzKkJHuN+xNT5eEaa29R1MBciGbQNqNTxLz++3Bd2LOsLUXCj36DHLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeH3hqDjzsjLgUXkRTNYtac7gKzMB8GA1UdIwQY
MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt
ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl
LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFcLTkm1
fJvHITY4IFN2OYBcQIYOMZoaXm6nKtbpmnA/oqVWZL/JGZUu8pH6ttb7ERV3oDpq
X83QAAcB6JVmtXGg9C0kBIaVZJXrxWZ0O2lf3TC/0pDfWH8mkBTuc3nNW/EC2Fd5
LFH19H1e8eFi/k155zJnnIaQEjs7JuhoZ6iezdLaPPlqTjpwN/7I2F9qfMytXsWP
iq9bxuejlF1x9ImgfzVMAE/UUbTJBVTjgBIv5y5LtAed+ksBu2InPDkj48W66INU
6MXKQ/OUItmOF/zCO5uPmxAgiFkaY+NWarigCb33Unq2qjwLh/xaE7fsSLWcTJ/I
zSXV1y1f/bnLxQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:37 2026 by rpki-client