Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          bmrhOgS43+D5g6Z7IEwA0WFvk3EYktnHFk6anwYKk90=
Subject key identifier:   27:32:70:E7:D3:5B:97:1F:0E:58:29:38:A4:3E:72:9B:3F:5E:24:5D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       01991CF841C75156E2CF6EE54AE9B7989B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          16D0
Signing time:             Sat 06 Sep 2025 03:00:55 +0000
Manifest this update:     Sat 06 Sep 2025 03:00:55 +0000
Manifest next update:     Sun 07 Sep 2025 03:00:55 +0000
Files and hashes:         1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=)
                          2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=)
                          3: 7WjSgMc07SzfT635zdA34HJuKpY.roa (hash: gHF3rjtW1hun8ETR5As505HwZP4tO+oLSUOaSw28d9o=)
                          4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=)
                          5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=)
                          6: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=)
                          7: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=)
                          8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: 2EblkhG/1zNp13FcnF+HNA6jgRcLapSpWB6rsCA4F+s=)
                          9: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=)
                          10: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=)
                          11: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=)
                          12: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=)
                          13: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=)
                          14: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=)
                          15: Zc32tz1ZjSWwVgQorA7lXMaw-xA.roa (hash: HRYYNy4880mDT+crSQhmT3WO1uhHjRCZk7D2GRyCL/w=)
                          16: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=)
                          17: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=)
                          18: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=)
                          19: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=)
                          20: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=)
                          21: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=)
                          22: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=)
                          23: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=)
                          24: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=)
                          25: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=)
                          26: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=)
                          27: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=)
                          28: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=)
                          29: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:f8:41:c7:51:56:e2:cf:6e:e5:4a:e9:b7:98:9b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Sep  6 03:00:55 2025 GMT
            Not After : Sep  7 03:00:55 2025 GMT
        Subject: CN=273270e7d35b971f0e582938a43e729b3f5e245d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:e4:9f:6b:7a:1e:58:83:47:06:51:b6:d1:
                    8c:15:e1:37:c8:87:7c:b4:e4:d0:73:f0:54:0e:c9:
                    9b:5f:27:51:d9:29:8f:86:92:d6:3f:9e:dc:74:ae:
                    2b:52:9a:40:e9:97:0f:11:4a:36:47:f4:c9:06:c8:
                    48:a4:0a:8e:1a:d6:bd:e0:97:9d:66:15:92:0f:35:
                    91:33:da:10:db:ce:0d:cc:a1:b0:dd:83:87:42:32:
                    fd:c1:50:dd:71:22:da:f2:3e:35:74:f6:4b:04:4e:
                    86:b1:78:90:5d:f3:5c:0d:f0:c8:f0:f7:a1:14:6b:
                    2c:eb:62:b4:ff:2d:be:a9:66:f0:2b:5b:62:3f:11:
                    0c:0d:e6:e0:8d:85:74:94:8e:34:a0:bf:63:7f:16:
                    1a:c6:02:93:9a:d4:7f:b5:32:f7:d8:29:e5:da:a4:
                    92:31:98:b1:a9:2c:fa:27:09:d0:75:6e:6a:f5:34:
                    d6:9c:67:58:ea:a2:89:53:48:f0:45:28:89:8d:22:
                    12:e7:cc:ef:4b:00:60:ff:e9:ae:e0:72:67:e0:bc:
                    24:8a:35:3b:52:8c:8d:00:35:37:8c:ee:81:51:a1:
                    bc:50:7a:bf:31:a9:98:ab:2b:48:91:9f:27:70:d7:
                    99:b5:3c:9c:15:92:80:f5:4d:ef:97:04:38:65:37:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:70:E7:D3:5B:97:1F:0E:58:29:38:A4:3E:72:9B:3F:5E:24:5D
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:ca:52:d4:13:a0:5c:96:e4:4b:52:20:41:61:db:79:93:
         6b:aa:6d:22:8f:5e:60:f1:1e:28:f7:2d:e8:1b:a3:b4:8c:2c:
         42:37:58:26:54:fe:72:25:e1:d0:9c:4b:94:1f:fa:15:08:35:
         0e:f0:71:cb:14:9e:09:88:56:1c:8d:15:7d:80:68:ab:0e:0e:
         91:0b:42:ee:0c:1c:28:84:b9:9d:df:3d:a4:08:c9:76:b7:e1:
         a4:64:57:dd:c4:03:05:18:37:76:1d:46:9d:e3:73:d4:df:0f:
         c1:43:e9:47:bb:8e:2e:cd:f0:48:44:81:82:f6:1d:ea:e5:71:
         ed:84:7e:0f:f5:0f:ce:92:92:b6:c4:2a:d2:ef:f6:f4:c4:63:
         ac:9f:c9:e4:0e:86:a1:f4:5e:b0:0b:29:37:4c:68:26:93:c2:
         ed:b8:2e:f8:fd:50:15:1e:71:71:37:ac:4a:e7:7f:d3:60:01:
         60:db:79:ab:74:6b:5c:83:01:4d:f3:55:19:18:bb:81:1c:f6:
         fc:b9:2d:cb:69:3d:b8:3c:12:82:32:05:16:69:45:3c:31:5b:
         c7:66:1b:b4:5c:10:62:91:f6:33:04:22:02:9d:a6:e8:a8:c6:
         62:b9:33:cd:79:fe:ce:97:99:5a:f2:e0:51:c7:28:4e:f6:8b:
         42:db:75:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkc+EHHUVbiz27lSum3mJtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjUwOTA2MDMwMDU1WhcNMjUwOTA3MDMwMDU1WjAzMTEwLwYDVQQD
EygyNzMyNzBlN2QzNWI5NzFmMGU1ODI5MzhhNDNlNzI5YjNmNWUyNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTbkn2t6HliDRwZRttGMFeE3yId8
tOTQc/BUDsmbXydR2SmPhpLWP57cdK4rUppA6ZcPEUo2R/TJBshIpAqOGta94Jed
ZhWSDzWRM9oQ284NzKGw3YOHQjL9wVDdcSLa8j41dPZLBE6GsXiQXfNcDfDI8Peh
FGss62K0/y2+qWbwK1tiPxEMDebgjYV0lI40oL9jfxYaxgKTmtR/tTL32Cnl2qSS
MZixqSz6JwnQdW5q9TTWnGdY6qKJU0jwRSiJjSIS58zvSwBg/+mu4HJn4LwkijU7
UoyNADU3jO6BUaG8UHq/MamYqytIkZ8ncNeZtTycFZKA9U3vlwQ4ZTdzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcycOfTW5cfDlgpOKQ+cps/XiRdMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9LKUtQT
oFyW5EtSIEFh23mTa6ptIo9eYPEeKPct6BujtIwsQjdYJlT+ciXh0JxLlB/6FQg1
DvBxyxSeCYhWHI0VfYBoqw4OkQtC7gwcKIS5nd89pAjJdrfhpGRX3cQDBRg3dh1G
neNz1N8PwUPpR7uOLs3wSESBgvYd6uVx7YR+D/UPzpKStsQq0u/29MRjrJ/J5A6G
ofResAspN0xoJpPC7bgu+P1QFR5xcTesSud/02ABYNt5q3RrXIMBTfNVGRi7gRz2
/Lkty2k9uDwSgjIFFmlFPDFbx2YbtFwQYpH2MwQiAp2m6KjGYrkzzXn+zpeZWvLg
UccoTvaLQtt1MQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:45:54 2025 by rpki-client