Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File:                     kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier:          m2pIzQ0MTO1q/pE0UIgIAmGnSBt/b2rp1q80+ootOMA=
Subject key identifier:   1F:69:55:B9:C0:A0:3C:AA:C5:FA:F6:D8:6D:F5:21:62:E5:CB:AD:86
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       01A13900101D80F6BF956D723F42F913E5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number:          1A36
Signing time:             Wed 14 Oct 2026 06:01:07 +0000
Manifest this update:     Wed 14 Oct 2026 06:01:07 +0000
Manifest next update:     Thu 15 Oct 2026 06:01:07 +0000
Files and hashes:         1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
                          2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: uD2gVOITHL+KXUsIkUor1Ko6d9tnJDMhRJmcd+hA/v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:00:10:1d:80:f6:bf:95:6d:72:3f:42:f9:13:e5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Oct 14 06:01:07 2026 GMT
            Not After : Oct 15 06:01:07 2026 GMT
        Subject: CN=1f6955b9c0a03caac5faf6d86df52162e5cbad86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:7c:b9:21:84:50:64:63:25:48:9a:e1:87:
                    00:6f:a4:a3:fa:72:09:30:13:29:98:60:ea:5b:5f:
                    cf:d7:6f:6a:22:97:29:6a:71:15:1c:ca:1c:17:5d:
                    40:ab:e7:d1:58:b8:49:f7:83:4e:9a:35:b1:1f:40:
                    1a:ff:ec:e9:a1:3f:05:ba:7f:50:41:55:fd:5f:1d:
                    28:00:0f:da:d4:91:00:87:82:98:85:da:59:fb:43:
                    b8:d7:2e:b0:f6:c1:51:38:8b:ce:cb:d9:6d:be:c4:
                    03:4e:72:97:fd:77:96:59:58:10:d0:e7:ea:80:45:
                    d9:39:11:b2:86:4c:fa:c4:42:50:4c:84:1d:de:62:
                    99:84:b2:93:7a:e9:99:e6:bb:f3:50:c9:79:f1:a7:
                    e8:50:60:75:07:02:e3:98:86:f5:b3:10:0c:d9:3c:
                    ce:2a:b2:b4:d6:ed:29:3a:01:0e:08:d8:a0:e3:58:
                    90:bc:eb:1e:30:f8:2e:5f:61:6d:e1:6b:ca:79:49:
                    23:af:ea:d4:e6:0c:dd:8b:c1:28:35:1b:98:3c:0e:
                    b1:12:a6:da:71:0d:ad:a2:4f:3b:20:f9:e3:3c:97:
                    c4:7f:7f:ee:0e:f5:ff:50:16:84:b4:26:44:14:3b:
                    94:b2:00:23:60:21:d8:da:d9:0d:b6:6e:77:b2:8c:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:55:B9:C0:A0:3C:AA:C5:FA:F6:D8:6D:F5:21:62:E5:CB:AD:86
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:8c:bd:04:ac:e0:cd:01:ed:4f:de:7e:c4:5e:94:15:2e:
         98:55:d3:2d:13:ab:5d:09:9f:82:28:a4:9e:51:36:56:a9:6d:
         30:83:c7:11:26:64:4a:3f:62:ed:4e:0e:cf:16:52:e2:1c:d9:
         d8:d6:bb:b4:c3:c2:52:53:b4:7d:33:4e:68:13:52:9c:4f:f0:
         5c:44:4e:76:d5:f5:2a:e3:07:c9:a5:95:62:4f:ce:d1:67:0c:
         17:47:46:34:c1:4b:92:9c:49:27:ea:f0:40:68:69:f6:b0:44:
         89:3f:50:8f:36:9b:e2:d3:25:64:a7:7e:8b:cf:8a:53:6e:4f:
         f3:d6:b1:55:fb:ed:a4:45:fe:38:47:47:0e:5d:74:8a:60:4a:
         71:f6:5f:a4:77:f9:01:85:d9:fc:61:bd:8a:2c:55:45:74:00:
         e0:99:cc:bb:41:5b:d8:94:cb:a9:65:d5:7e:c8:86:a0:9f:7d:
         ce:fc:fc:c8:fe:1c:7e:ba:c8:e4:d2:09:fd:54:d2:5f:cf:c1:
         7a:d9:e5:e4:70:58:f1:76:16:57:44:ab:95:9f:52:74:59:27:
         ce:52:32:b9:59:33:63:85:37:c9:38:21:0e:aa:50:7d:fe:72:
         c0:e7:5b:dd:bb:94:68:79:e4:5a:ba:51:75:0e:2d:a2:5c:5c:
         c4:de:55:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5ABAdgPa/lW1yP0L5E+XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm
MTlhNjAwHhcNMjYxMDE0MDYwMTA3WhcNMjYxMDE1MDYwMTA3WjAzMTEwLwYDVQQD
EygxZjY5NTViOWMwYTAzY2FhYzVmYWY2ZDg2ZGY1MjE2MmU1Y2JhZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83l8uSGEUGRjJUia4YcAb6Sj+nIJ
MBMpmGDqW1/P129qIpcpanEVHMocF11Aq+fRWLhJ94NOmjWxH0Aa/+zpoT8Fun9Q
QVX9Xx0oAA/a1JEAh4KYhdpZ+0O41y6w9sFROIvOy9ltvsQDTnKX/XeWWVgQ0Ofq
gEXZORGyhkz6xEJQTIQd3mKZhLKTeumZ5rvzUMl58afoUGB1BwLjmIb1sxAM2TzO
KrK01u0pOgEOCNig41iQvOseMPguX2Ft4WvKeUkjr+rU5gzdi8EoNRuYPA6xEqba
cQ2tok87IPnjPJfEf3/uDvX/UBaEtCZEFDuUsgAjYCHY2tkNtm53soyb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9pVbnAoDyqxfr22G31IWLly62GMB8GA1UdIwQY
MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt
ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl
LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuKMvQSs
4M0B7U/efsRelBUumFXTLROrXQmfgiiknlE2VqltMIPHESZkSj9i7U4OzxZS4hzZ
2Na7tMPCUlO0fTNOaBNSnE/wXEROdtX1KuMHyaWVYk/O0WcMF0dGNMFLkpxJJ+rw
QGhp9rBEiT9Qjzab4tMlZKd+i8+KU25P89axVfvtpEX+OEdHDl10imBKcfZfpHf5
AYXZ/GG9iixVRXQA4JnMu0Fb2JTLqWXVfsiGoJ99zvz8yP4cfrrI5NIJ/VTSX8/B
etnl5HBY8XYWV0SrlZ9SdFknzlIyuVkzY4U3yTghDqpQff5ywOdb3buUaHnkWrpR
dQ4tolxcxN5VYw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:53:48 2026 by rpki-client