Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          pwOUqNBN0YSPOS+0sk4OWJSbzHkKzyPuPUYNjOaznsY=
Subject key identifier:   F6:9B:CC:9A:34:57:74:E3:40:C0:CD:1C:E4:22:83:4C:B4:D5:1A:E8
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019DCD86F4110F565AF6AFAE15344E382CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          0694
Signing time:             Mon 27 Apr 2026 06:01:06 +0000
Manifest this update:     Mon 27 Apr 2026 06:01:06 +0000
Manifest next update:     Tue 28 Apr 2026 06:01:06 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: rniNvOp6Hl9HbSThpAWPhMqahH+a3gOJ5J/naVZdNg4=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:86:f4:11:0f:56:5a:f6:af:ae:15:34:4e:38:2c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Apr 27 06:01:06 2026 GMT
            Not After : Apr 28 06:01:06 2026 GMT
        Subject: CN=f69bcc9a345774e340c0cd1ce422834cb4d51ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:f3:d6:33:15:2a:8e:fe:ae:05:b8:26:87:
                    3f:56:a8:6a:45:2a:c9:97:4d:d8:9c:02:1f:23:41:
                    8b:4e:f8:90:9f:46:80:e6:56:d7:c6:d6:0b:e8:fc:
                    93:6f:12:87:0f:38:2d:f1:7f:48:0b:f5:29:1b:50:
                    2c:b0:64:0c:2d:aa:cf:bd:9b:ce:7a:f4:dc:ae:1a:
                    07:a3:29:9c:1b:23:63:d1:a0:75:70:8c:aa:f1:5c:
                    a2:34:d9:30:ad:2a:41:2e:77:f3:83:f5:35:8a:1c:
                    7c:18:e3:bd:af:9c:38:79:dd:31:9e:8b:0f:12:fc:
                    0a:06:ca:66:cb:b2:2f:20:5d:e8:8f:8a:e0:ef:3a:
                    f8:dd:c3:69:e7:51:e3:5d:b1:7d:82:24:d5:6d:2c:
                    2b:fe:85:fa:b1:39:86:cd:4e:c0:05:83:41:cb:bb:
                    7d:f4:54:c5:19:62:9e:04:d9:6a:7d:7c:ca:51:cf:
                    11:72:d3:95:f9:a2:d9:38:7f:c4:10:a5:a9:84:79:
                    1a:6e:02:6c:ae:83:c2:39:33:76:52:ce:01:11:76:
                    94:67:da:e4:07:a7:b0:6b:d7:c1:81:ca:d7:c9:3f:
                    b6:e6:02:46:e7:22:89:64:a7:10:7a:76:12:8f:57:
                    35:fc:7a:d6:e7:eb:5a:09:53:05:95:cf:53:2c:ec:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:CC:9A:34:57:74:E3:40:C0:CD:1C:E4:22:83:4C:B4:D5:1A:E8
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:28:33:c6:3d:70:1e:5c:eb:b8:d9:8f:ca:57:05:35:a0:ad:
         89:50:44:43:3e:59:34:c9:38:15:66:4c:dc:b6:a8:4a:a2:01:
         02:06:ab:87:e0:0e:d0:2c:5b:b5:a7:f1:02:71:1f:65:f7:32:
         20:09:3b:ff:07:f7:bc:3a:bd:9f:c6:5a:1c:a3:dc:0d:a4:cd:
         f9:2c:ef:b4:56:33:37:c4:27:69:6b:43:91:28:fa:99:28:f5:
         13:af:fd:c4:d8:7b:6a:1b:0a:c6:12:06:89:f3:43:69:2f:ab:
         88:15:e3:8b:61:13:40:8e:97:0a:5a:7d:c3:a3:9b:0c:00:51:
         a2:78:a1:eb:32:bc:f7:1f:2e:36:ff:05:72:92:bd:cf:67:92:
         b5:45:2c:b0:ff:13:62:de:82:c7:ae:97:25:95:5a:6f:63:78:
         9d:70:94:55:42:3d:cc:a6:23:3e:76:f9:1a:82:bf:fd:31:77:
         17:31:95:ad:42:54:b2:92:22:75:ee:b1:89:a1:bd:8e:27:5a:
         9d:d4:75:a5:00:7d:b9:56:bc:57:91:11:17:56:a1:00:4b:9d:
         5c:40:ed:ba:d4:9c:51:0a:81:4f:a8:9d:1a:57:1e:06:dc:14:
         50:1d:17:2e:03:11:8a:63:ab:2e:b0:e9:60:67:96:48:b5:39:
         e7:53:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:07 2026 by rpki-client