Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          UlL+jN1+TXsd4zSthebI5LdXPXsBIMNXmrbvtWgpSpY=
Subject key identifier:   3D:11:75:FF:19:9B:1F:66:92:A7:01:E6:62:51:3D:77:D0:AC:CC:2B
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019EB732CB5ECBD5A120849B7FAB3750B0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          070D
Signing time:             Thu 11 Jun 2026 15:00:19 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:19 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:19 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: zS08ySe7iwJYlnAJGjh6/9Igc6mi8xgg3wlnxvECQAc=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:cb:5e:cb:d5:a1:20:84:9b:7f:ab:37:50:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Jun 11 15:00:19 2026 GMT
            Not After : Jun 12 15:00:19 2026 GMT
        Subject: CN=3d1175ff199b1f6692a701e662513d77d0accc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:83:28:0c:64:13:49:12:83:3f:ad:68:38:
                    ec:18:3f:58:a1:17:a0:fb:be:a5:2c:b3:c2:4e:5d:
                    19:b7:0e:77:99:68:d2:7b:c6:43:bd:13:52:af:8b:
                    43:bb:7e:7c:19:f2:9a:5d:27:94:d3:dc:0a:64:c4:
                    02:88:18:1a:5e:99:e7:5e:ef:45:f4:44:7d:04:67:
                    c7:72:b0:46:a7:58:a0:a9:70:b8:ab:3a:a2:5b:64:
                    cb:fe:8a:04:37:1b:e3:42:9d:7e:02:51:45:45:b0:
                    87:d9:e1:c4:d0:b0:01:35:62:5c:a6:b3:13:91:14:
                    5d:b6:1b:04:e1:b2:77:3a:23:25:fb:b4:67:75:2c:
                    62:48:54:8d:88:25:f2:d4:42:c7:35:75:67:af:ca:
                    0c:ca:16:d4:d9:30:0e:18:01:64:79:35:2b:bc:69:
                    82:d9:d2:72:9c:6b:fb:de:1f:c0:b3:63:a1:24:08:
                    39:a5:48:d2:51:9c:ec:67:20:4b:06:80:c2:d7:f7:
                    d3:f4:dd:09:da:e4:08:37:ce:19:bf:8c:af:79:a8:
                    a9:c5:f8:81:54:65:3c:6a:ed:dd:62:03:98:68:f6:
                    92:39:a7:5a:da:3d:6b:60:eb:4c:0f:d0:88:aa:a0:
                    48:89:40:cc:75:50:24:14:94:cd:62:ac:01:7b:51:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:75:FF:19:9B:1F:66:92:A7:01:E6:62:51:3D:77:D0:AC:CC:2B
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:88:6f:e2:fd:83:c7:1d:c3:bc:3c:d9:ca:dd:2d:41:57:
         e9:cb:07:5d:bf:55:7f:12:10:9e:36:e2:ec:2b:ef:02:11:2b:
         00:81:7a:75:fb:ab:48:6e:29:be:74:20:f8:4a:71:02:f4:ae:
         b0:de:f0:55:bb:36:04:f1:28:3e:5c:35:88:91:6e:cc:1f:0d:
         df:20:4a:ef:6d:e4:1a:20:d9:18:48:50:8a:86:28:5d:32:66:
         11:97:5c:ef:e3:64:6b:64:56:cf:0e:22:f0:13:f7:cb:9e:ca:
         c2:a0:48:5e:77:80:ce:01:e2:3d:fd:08:ec:43:57:1f:6c:5c:
         c1:ac:fa:2f:75:f9:33:64:46:fd:e8:23:32:cc:8c:86:26:69:
         b8:6c:0d:bb:17:58:96:79:d9:f3:d1:2c:71:25:1a:f6:d9:28:
         ce:b2:0b:8d:d9:c8:7d:f7:f3:c3:d2:c4:12:7b:2d:f9:f9:6e:
         5a:58:61:51:59:60:ac:07:01:d4:b9:ee:7c:0c:0d:91:f9:fa:
         80:db:66:90:36:3d:96:62:83:34:04:86:c6:63:99:92:6c:83:
         81:b6:94:6b:ea:23:c5:51:6a:9c:67:8c:fc:5a:65:f5:bf:67:
         90:5f:8a:c5:3e:69:6b:b6:c4:8c:16:24:5e:4d:b9:b6:2f:6d:
         73:60:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:51:02 2026 by rpki-client