Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          cFJwMfq+ht3rIXUSGAjaOSdBHPA8eCvXQs17WtSAaQQ=
Subject key identifier:   39:83:FC:F3:E2:07:23:B3:33:67:A8:EE:13:17:70:BE:22:D5:94:09
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01A089E796A92AEA87F98161FB40DD4EB837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          0802
Signing time:             Thu 10 Sep 2026 06:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:50 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (hash: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: 5fVRoM5EMlrVzAFXEMuUC3chV+whF+vWDOPnBiR5kfI=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (hash: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=)
                          19: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          20: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          21: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          22: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          23: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          24: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          25: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          26: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          27: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          28: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          29: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          30: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:96:a9:2a:ea:87:f9:81:61:fb:40:dd:4e:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Sep 10 06:00:50 2026 GMT
            Not After : Sep 11 06:00:50 2026 GMT
        Subject: CN=3983fcf3e20723b33367a8ee131770be22d59409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e4:2d:99:39:b5:75:b7:e3:94:b5:53:8d:e3:
                    77:51:76:35:76:f8:7c:b1:ac:1d:a1:2a:3a:ee:9a:
                    58:b9:63:29:ec:b5:a9:b7:3c:f4:e4:f4:d2:16:82:
                    65:86:59:95:4f:4b:7e:53:51:44:dc:4b:8d:e3:6a:
                    13:df:1f:33:e5:d8:44:01:a5:29:81:99:7e:c1:91:
                    b5:27:d7:58:c0:ac:90:eb:ab:55:49:00:2a:00:42:
                    0a:7a:66:63:18:fb:f7:ca:c6:07:87:41:20:39:20:
                    31:ff:1e:6a:9b:3a:ab:c8:7b:58:9c:ea:81:18:1a:
                    71:c8:a4:cf:92:e3:c4:d7:82:5f:1a:fb:8a:f8:de:
                    b6:8d:cb:d7:82:b9:f1:1a:dc:68:55:9d:82:a4:fb:
                    d0:25:2d:bc:75:da:71:82:16:a1:67:57:0e:a9:c4:
                    3d:8d:ed:33:bc:aa:55:17:ff:8a:ca:ee:49:22:c0:
                    77:b4:cb:bd:23:b8:5d:7a:fd:90:50:e9:d3:d3:c6:
                    2f:40:7a:e5:d5:ec:74:b5:f7:c5:1e:4b:0b:de:6c:
                    0c:7c:5c:16:fb:7b:28:29:ac:d1:94:01:ad:05:fc:
                    6c:dc:3a:1b:61:8e:51:f0:7e:9b:93:14:1e:26:66:
                    14:a0:7e:17:4d:b1:9a:d1:eb:a4:83:51:3e:93:cb:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:FC:F3:E2:07:23:B3:33:67:A8:EE:13:17:70:BE:22:D5:94:09
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:11:b1:d9:33:c1:ce:3b:59:c7:2c:e8:0d:3d:f8:04:de:4d:
         2a:64:fb:c9:67:12:f4:11:49:35:f9:ba:14:4f:56:6d:91:f7:
         c1:20:a9:b8:bd:c8:a8:55:c1:83:19:07:56:70:e0:76:c3:a1:
         c0:c2:de:42:14:d0:8c:98:0b:ac:a1:07:dc:2a:da:e8:21:75:
         3d:2c:ab:b6:6c:0b:74:33:d9:3f:cc:03:a1:64:88:c4:e3:2e:
         ba:f1:ab:b2:a7:76:93:27:eb:57:ff:2f:c5:29:95:71:7b:5a:
         ff:7a:07:19:b1:fc:2a:19:20:53:a1:c2:87:2b:64:67:03:ec:
         13:d1:f7:b4:52:65:67:8b:d2:08:b5:8d:05:5d:d7:2c:e8:b3:
         e3:b9:7b:a2:eb:e7:ff:4c:26:a2:ff:c5:62:de:41:45:da:cf:
         45:17:5c:d3:1b:e9:de:ff:e0:ca:61:83:94:cf:71:49:06:27:
         11:a8:a4:2e:14:49:da:92:e7:10:53:4e:6c:38:82:f4:b2:6d:
         04:68:ee:94:c2:d1:a4:44:ef:a1:d8:ad:a7:ec:65:43:9a:4a:
         06:f5:20:99:cc:a2:43:f9:49:d7:c4:34:7b:19:6c:b6:11:31:
         ac:3a:c7:dd:ec:3a:0b:7a:cc:df:eb:31:61:ed:ab:0a:16:7f:
         3e:fa:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:18:33 2026 by rpki-client