Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          NJl+9XZROGTXw9u0BkosNO5w97qXXh8z2Suh7d9woFc=
Subject key identifier:   14:79:2B:B7:D3:79:7D:43:9E:ED:51:2E:C5:71:4A:09:C8:09:87:DC
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019CC674DADCBE8547B8CE744C70FE707EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          18B7
Signing time:             Sat 07 Mar 2026 04:01:12 +0000
Manifest this update:     Sat 07 Mar 2026 04:01:12 +0000
Manifest next update:     Sun 08 Mar 2026 04:01:12 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: g1dpNYmQ6R4aI9PVyQdNjIFpnJMRZO/lRvf2ZWqT44U=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
                          20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:74:da:dc:be:85:47:b8:ce:74:4c:70:fe:70:7e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Mar  7 04:01:12 2026 GMT
            Not After : Mar  8 04:01:12 2026 GMT
        Subject: CN=14792bb7d3797d439eed512ec5714a09c80987dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:fd:20:2c:9a:6c:5f:b3:d3:66:dd:06:0e:
                    a2:b4:f6:49:34:5d:ce:2f:f2:0b:25:93:b2:8f:37:
                    10:c5:7a:e6:df:51:1c:d2:6f:99:ad:01:da:71:85:
                    a1:16:1f:04:8d:71:53:1e:e2:e2:0b:66:26:5d:b9:
                    58:26:3b:c3:97:47:ab:11:dd:a9:79:2e:ff:fb:db:
                    76:67:20:cd:f3:cc:b6:c7:12:d0:f9:c4:45:ea:80:
                    a6:50:ec:05:bd:f8:4b:63:5b:dc:fc:eb:b0:d0:58:
                    4d:82:2d:4d:56:c7:af:4a:7d:9b:1e:23:00:1c:15:
                    8e:eb:56:a5:13:a8:a6:80:54:c5:f0:1c:93:9f:81:
                    07:86:1c:27:4b:df:01:59:c0:55:e8:55:c0:cc:42:
                    9f:11:32:ce:45:ba:a3:4e:41:b6:a0:8c:72:b8:a2:
                    2e:37:de:1e:23:57:d4:72:88:5c:d7:5e:c5:dd:96:
                    6f:8f:fb:f6:f4:0d:2f:37:92:cd:fe:b0:31:e9:00:
                    4b:d3:2b:da:00:19:3a:fe:d3:4b:28:67:6c:ad:54:
                    d5:d8:98:3b:3b:f1:85:60:fd:ca:9b:e7:ee:44:f1:
                    84:d6:a9:86:86:bf:a5:63:37:bc:67:ca:f2:06:ae:
                    2d:30:54:d1:60:bb:7e:32:4a:78:fa:80:0e:c4:37:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:2B:B7:D3:79:7D:43:9E:ED:51:2E:C5:71:4A:09:C8:09:87:DC
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:0b:a6:1e:0f:51:4c:a9:e1:76:01:91:58:b3:10:05:f2:
         65:f6:2b:ef:cb:ca:72:48:75:7d:05:ee:b3:8e:96:2c:60:03:
         62:61:fd:97:88:8f:9e:55:eb:df:1f:cd:90:92:b6:06:32:0b:
         a0:39:89:c2:d8:4c:53:82:8b:02:8c:34:4a:93:4d:a3:7c:da:
         1f:78:f9:8f:19:3f:d3:5e:e9:31:54:18:40:ff:97:ef:6f:e1:
         25:e7:3b:ea:06:da:0a:ea:78:dc:b5:b0:d1:f8:80:e6:e2:60:
         d8:94:b1:8c:fd:cb:94:f2:92:c5:dc:79:0d:e2:6b:cf:ba:9b:
         ce:d6:69:99:88:2c:b1:2f:90:9c:78:64:ff:9b:3f:92:ea:1e:
         f8:c4:0e:7c:ba:1f:e4:ed:fb:d8:f6:87:48:c6:af:5c:26:39:
         2f:44:d6:67:90:c3:c3:0e:86:c7:cb:e4:83:ef:13:31:60:d5:
         70:8d:27:1d:0c:1f:02:1d:be:35:bb:4f:5c:d5:e1:ba:82:18:
         5a:45:65:1a:85:07:09:a8:14:b4:9c:9a:1d:7c:90:46:08:ee:
         88:69:4a:d8:87:8e:4b:de:55:e4:a4:f0:f3:50:1f:da:68:8e:
         65:f9:a9:25:e5:3c:5e:07:2e:69:ca:65:c9:4b:33:27:70:ab:
         de:c9:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:00 2026 by rpki-client