Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          duKRe9qCpcJWaIFtQ0hqasmDoVzrGvNDWGZTw6c3yYQ=
Subject key identifier:   EB:07:59:DB:01:31:DC:CA:ED:26:41:37:80:A6:E7:56:AB:85:F8:8E
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01A186E3FF28C202F188179FD3DB8C3D29C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          0885
Signing time:             Thu 29 Oct 2026 09:00:51 +0000
Manifest this update:     Thu 29 Oct 2026 09:00:51 +0000
Manifest next update:     Fri 30 Oct 2026 09:00:51 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (hash: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: kc1VC+wnfV/GbcekZyGGhLi60wjKczJRb1HxpI1950c=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (hash: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=)
                          19: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          20: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          21: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          22: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          23: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          24: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          25: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          26: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          27: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          28: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          29: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          30: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:e3:ff:28:c2:02:f1:88:17:9f:d3:db:8c:3d:29:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Oct 29 09:00:51 2026 GMT
            Not After : Oct 30 09:00:51 2026 GMT
        Subject: CN=eb0759db0131dccaed26413780a6e756ab85f88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:73:6b:5d:63:0f:19:71:71:b9:7b:5f:bf:
                    04:7f:e1:54:e3:55:f1:ea:c5:b4:f7:0f:50:8f:70:
                    be:33:ad:a9:98:39:d3:a5:f8:e9:c7:ac:56:79:44:
                    9e:47:16:f7:36:c8:a4:c6:2e:35:cd:51:db:1f:41:
                    a3:59:e2:46:40:f5:17:d3:06:3e:31:3a:1f:70:5a:
                    e5:3e:a0:8d:61:e7:89:ce:71:04:c4:0a:38:34:25:
                    de:88:8f:6e:87:a8:61:1a:e0:da:c5:26:80:dd:30:
                    1c:6b:e9:f2:2e:86:0f:4e:7c:7d:3e:fe:93:78:c9:
                    aa:a4:57:13:67:76:44:a2:e9:5c:89:ed:42:0a:c0:
                    f3:ad:25:43:ba:ab:8c:65:49:63:86:18:cd:34:e2:
                    00:c8:01:2d:98:27:0e:d2:25:45:63:c6:7c:9a:bf:
                    2f:11:ad:42:0c:b7:89:ec:97:e2:5d:0b:33:2e:4c:
                    4f:2a:2d:e2:47:7c:db:77:8d:62:7d:c2:b1:2b:84:
                    04:01:3e:aa:85:e6:fb:49:ea:84:96:8e:70:6e:9b:
                    c5:7d:37:51:77:f6:16:71:27:84:45:5c:92:9d:08:
                    c8:90:ec:33:39:4b:21:06:68:ec:3e:bb:81:6a:48:
                    67:d2:66:21:fa:26:99:57:52:52:24:06:54:07:b2:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:07:59:DB:01:31:DC:CA:ED:26:41:37:80:A6:E7:56:AB:85:F8:8E
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:2b:87:0d:43:13:98:66:7e:c7:02:9c:7f:38:cf:b4:c1:
         85:6e:7a:57:f4:eb:03:e9:35:a0:a3:ed:ec:be:4c:cf:65:4b:
         7c:10:22:53:52:2d:a0:9b:70:c3:a8:6f:dd:6d:c9:88:e0:52:
         86:3f:f5:bd:38:d6:69:fc:df:15:b5:53:a0:13:ec:54:2f:35:
         01:fe:0c:69:2a:1e:04:81:02:17:16:f1:a9:3b:bc:4a:8e:46:
         61:a3:f8:0b:12:65:38:7b:55:8f:98:af:15:e3:b8:42:8e:87:
         de:31:17:60:49:81:df:84:52:4e:38:48:65:7a:d9:04:8a:62:
         1a:c1:53:89:79:a6:0e:87:c3:6b:1e:2d:83:0e:79:9f:9b:9c:
         8e:8c:1a:45:76:98:ef:88:e5:3d:05:ab:c4:09:38:b6:9f:37:
         d6:fe:6b:22:44:74:f5:e9:8e:05:83:97:7d:cf:51:e3:71:ca:
         a0:c7:18:f5:fa:e5:47:9d:18:8d:43:55:c7:8e:95:3b:4e:ed:
         53:e6:45:e5:74:65:5c:d3:ce:12:9c:3e:49:fe:28:06:96:24:
         66:39:f4:1f:3d:f7:32:9c:3a:41:1c:b9:ba:50:39:75:c1:6b:
         9a:70:a3:b2:11:99:38:41:0c:41:9a:dc:b6:95:d4:f2:f9:3f:
         7a:ec:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:41 2026 by rpki-client