Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          BW+C7TbwQieMRtAgfEOc1jC50KM28vfG5jeFAnQTuMQ=
Subject key identifier:   BB:D8:32:ED:1E:EF:ED:E5:32:A1:80:62:19:8E:A8:D9:5F:DA:3B:C0
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       01A15553CE20157F4A0E7FB605E205B118D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          1B14
Signing time:             Mon 19 Oct 2026 18:01:57 +0000
Manifest this update:     Mon 19 Oct 2026 18:01:57 +0000
Manifest next update:     Tue 20 Oct 2026 18:01:57 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: JMM4WQCCg500vuIY9/JL+hguKkL2ktK79XZTPMA2oLk=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          20: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          21: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          22: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          23: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          24: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          25: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          26: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          27: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:53:ce:20:15:7f:4a:0e:7f:b6:05:e2:05:b1:18:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Oct 19 18:01:57 2026 GMT
            Not After : Oct 20 18:01:57 2026 GMT
        Subject: CN=bbd832ed1eefede532a18062198ea8d95fda3bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:18:86:76:d9:0f:f6:81:85:81:86:d0:11:95:
                    9c:8a:1f:5b:c8:87:03:a8:b8:80:46:c5:ce:25:dc:
                    8c:ba:55:ed:e1:44:7a:35:06:1e:85:38:d1:8c:c7:
                    d4:20:1b:29:bd:94:32:d6:b8:05:19:4b:95:3b:45:
                    0a:7f:46:5b:d8:c6:d0:1e:9e:8b:1e:c2:72:a9:a2:
                    d1:d4:dd:9d:17:cb:24:32:fa:1d:05:b8:ae:7b:d3:
                    0a:2d:35:70:1a:25:95:8f:de:f0:4a:66:fd:3a:18:
                    a4:c3:1b:62:89:48:0c:73:fe:43:67:98:61:a0:cc:
                    bd:66:14:9f:fb:10:8c:7f:e0:af:6b:29:6e:3d:94:
                    9b:08:03:8c:43:7a:88:2a:2e:8f:a3:dc:83:fb:af:
                    59:b7:01:8c:d3:23:30:49:ea:5f:b6:16:36:3e:99:
                    80:a5:9e:1a:91:8b:64:f1:10:78:a3:b1:25:0a:f6:
                    ee:11:e6:7e:26:f8:25:47:ae:bb:dc:d8:60:ef:20:
                    f9:41:c1:71:95:9f:42:9b:cf:0b:5f:d2:82:ff:16:
                    63:d9:d2:0f:8d:be:a6:f8:ed:64:c7:7f:9f:79:a1:
                    48:8c:24:8c:63:4c:f3:95:97:53:67:07:63:ab:f6:
                    55:cf:8a:62:95:55:33:48:a1:73:de:e1:e8:9c:a8:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D8:32:ED:1E:EF:ED:E5:32:A1:80:62:19:8E:A8:D9:5F:DA:3B:C0
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:a6:01:72:bb:38:e0:5c:9c:2a:ef:e5:bd:35:e8:b2:61:
         ab:9e:5b:97:be:c7:40:87:55:88:2e:84:c1:c5:25:fd:e0:61:
         cc:10:ca:63:cb:1f:7f:14:91:9f:4a:fd:08:88:4b:96:82:74:
         19:eb:f0:6a:63:48:50:02:41:db:8a:26:78:d2:86:f8:9d:88:
         25:a5:dd:60:81:1b:87:dd:29:8f:eb:e3:72:36:ea:cd:53:9c:
         4b:35:5d:f2:f4:92:5e:83:81:1d:b1:63:ce:08:a5:e3:e0:cf:
         12:1f:6a:82:8e:67:85:5c:fc:38:f8:8f:ab:d2:b1:8c:2d:3e:
         9b:45:1b:d1:fe:96:0d:f3:77:0b:df:fb:18:1e:0a:cf:2e:c9:
         d3:62:71:f9:59:5c:13:2e:05:47:0a:a9:dc:4e:cc:b1:c8:23:
         ad:b1:72:1e:fe:09:c1:d0:c4:9b:ec:50:d1:56:f6:41:a2:79:
         9a:73:83:a0:44:d8:19:b6:a7:88:89:94:73:e5:f9:d5:df:34:
         16:b2:99:3e:cf:9f:57:c2:b4:e4:85:6c:3b:0d:d4:b1:53:28:
         ca:83:13:56:10:cf:56:c0:2a:7b:61:a3:27:50:2e:21:47:65:
         a5:57:d2:b6:8e:e4:74:18:86:36:42:33:a7:31:4b:b5:d0:c5:
         4d:30:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:33 2026 by rpki-client