Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          FX1gk1UTwcO12LZh0jRe8mz3dwYin/lpptBwZkGEsw8=
Subject key identifier:   ED:27:2D:13:EB:CC:EB:00:91:E8:D0:E8:D5:9B:39:D4:6D:B9:57:56
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       01A09DDBF4A7F51DC0B26FA14555A6E3C36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          1A53
Signing time:             Mon 14 Sep 2026 03:00:32 +0000
Manifest this update:     Mon 14 Sep 2026 03:00:32 +0000
Manifest next update:     Tue 15 Sep 2026 03:00:32 +0000
Files and hashes:         1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: Ds+DCJQFjjI8ewkI4yPHferheakmlurIyt6GDKeE/CM=)
                          3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
                          4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9d:db:f4:a7:f5:1d:c0:b2:6f:a1:45:55:a6:e3:c3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Sep 14 03:00:32 2026 GMT
            Not After : Sep 15 03:00:32 2026 GMT
        Subject: CN=ed272d13ebcceb0091e8d0e8d59b39d46db95756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:cc:1b:b0:e6:47:42:47:e2:77:0b:90:11:
                    7a:84:c0:13:1d:a9:90:f4:b8:ee:a9:32:34:37:63:
                    26:95:e0:00:22:47:7f:04:66:59:14:50:4a:3d:56:
                    fd:40:2a:b9:7c:89:65:ef:97:3a:55:f4:70:5a:08:
                    67:39:d7:e9:9b:e8:72:50:82:38:bf:a2:47:6b:91:
                    dd:95:be:1d:9d:02:79:d0:f5:7e:53:63:41:ad:5f:
                    fc:90:4b:39:d3:d5:aa:b7:a3:8a:e3:45:44:b7:95:
                    1e:bd:c7:af:7c:6d:8f:37:32:20:24:60:0b:63:9d:
                    88:5f:ec:d2:3a:8d:a6:27:dd:f5:aa:54:f1:a5:aa:
                    06:b7:c3:f5:bd:95:e1:4f:82:f5:75:5e:98:84:f8:
                    89:da:fd:95:3a:c1:8c:8c:f3:23:b8:f1:5d:f7:23:
                    c2:61:03:29:90:48:59:95:6c:fd:66:bb:54:42:83:
                    60:e7:88:8e:94:90:25:40:eb:72:20:f8:06:92:a6:
                    fa:97:a0:f2:f5:48:98:2a:a9:8d:3d:fd:01:31:a9:
                    1f:85:8c:ba:0d:63:ee:4b:95:a2:f7:d4:64:16:ec:
                    5c:18:64:f6:b7:1e:de:2c:ca:3f:1f:97:c4:19:f5:
                    38:22:0e:12:d3:47:dc:ca:ad:03:8f:d0:a4:45:a0:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:2D:13:EB:CC:EB:00:91:E8:D0:E8:D5:9B:39:D4:6D:B9:57:56
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:97:c1:b0:76:a1:28:1d:63:45:f4:8a:12:4b:54:bf:75:61:
         3f:5a:96:24:e2:98:ee:59:03:92:90:84:08:69:56:4d:62:e7:
         fa:23:6b:0b:4e:88:0b:8b:6d:85:bf:c0:37:d6:54:49:98:b9:
         3e:b6:0e:53:e8:26:2c:36:dd:fb:94:d0:b1:27:3f:8c:62:ae:
         94:1c:a4:64:68:fb:5f:96:23:76:cf:83:b4:c7:58:4f:2a:19:
         df:e6:10:17:26:bc:aa:b4:71:5a:be:44:e4:3e:80:80:9c:a6:
         33:31:43:01:c5:31:6b:55:1f:d3:21:93:02:ef:bb:d2:0c:ef:
         a0:80:ec:7d:e8:8e:16:1c:34:4c:6e:de:56:2e:e1:12:2a:22:
         b0:ef:54:83:a5:7a:26:a5:d9:64:c1:15:45:f6:28:ed:b6:9c:
         53:da:af:1f:90:c0:8a:bc:2f:d0:cf:e4:bb:54:c0:a6:9e:b8:
         c6:aa:80:ad:c8:4b:5d:6d:d4:99:b1:50:21:b4:fc:02:5e:c4:
         d8:7a:54:2e:6a:bf:26:2d:31:95:33:f4:72:71:6a:12:ad:31:
         e0:97:c8:de:eb:b0:6f:62:8b:2d:b4:43:26:bd:a4:9b:52:2d:
         87:f3:46:f2:b3:8c:24:d0:9b:da:ea:5b:6a:90:41:50:83:4b:
         ed:9f:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 09:40:30 2026 by rpki-client