Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          e3O5fqYeZOpkre1pFMt7z0kIDoV5hIxUr/AVydp8pg8=
Subject key identifier:   D8:70:C0:D2:C4:B4:8A:7F:67:80:8A:DF:B7:71:9E:E4:6C:5C:DF:63
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       019DE25784A29A5D8FFAFFF0A601C2E23413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          069F
Signing time:             Fri 01 May 2026 07:01:19 +0000
Manifest this update:     Fri 01 May 2026 07:01:19 +0000
Manifest next update:     Sat 02 May 2026 07:01:19 +0000
Files and hashes:         1: AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa (hash: BRGrCuSHF/KxuLb2FPfCsu+om1pAKryDQAGzbDeUu7s=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: VAki28xmnqpHN/8qghgx2OiKTFpfThzWpJqSxxQt/CY=)
                          3: ZT9LL1knJk98OWBBZzmpd3KjJfI.roa (hash: 4/mqEiUwgyohdOIIeiQwV1R7+uiHz+P83MCY26loH04=)
                          4: cJF5A_gDXcusMmTN_YOw0UaFwN4.roa (hash: ZjhEvCJMp06qZY9/OCI+NL1nzY2YgF1mcLrDQRDzTXk=)
                          5: gBcIgtm5Fh2dgbWxMKlYqLrgkZc.roa (hash: HLdh1cV+6Q5Z9NDCAYRcbYgcdSu4gYhwR9qj/+weu2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e2:57:84:a2:9a:5d:8f:fa:ff:f0:a6:01:c2:e2:34:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: May  1 07:01:19 2026 GMT
            Not After : May  2 07:01:19 2026 GMT
        Subject: CN=d870c0d2c4b48a7f67808adfb7719ee46c5cdf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:19:eb:19:06:62:4a:7d:60:a9:89:07:f9:
                    06:ed:99:6d:59:24:da:45:ff:db:e1:c3:5d:03:2b:
                    ef:a4:a4:d3:eb:ea:db:9d:17:43:e1:4e:b2:a9:ab:
                    3d:62:2f:f7:31:c8:5c:b9:cd:a5:88:53:6e:9a:b5:
                    6d:56:25:34:21:00:73:10:08:86:24:ea:5c:82:eb:
                    4a:bd:a8:f3:2e:2a:1c:91:88:3b:8e:48:62:2f:47:
                    5e:ab:3a:da:2c:0f:56:94:02:8f:71:e0:de:fa:85:
                    f5:7d:92:62:53:70:91:db:01:fd:85:83:e1:16:09:
                    48:05:bd:5b:10:8b:7f:86:7f:e0:97:12:19:48:60:
                    34:db:d5:ad:8d:97:d2:1c:e9:01:1b:9b:2f:fe:e5:
                    2a:05:57:59:c6:58:d4:1b:10:3a:0b:fe:e1:19:10:
                    11:28:19:59:35:86:a3:99:b4:6a:32:f8:71:47:26:
                    ba:22:9b:14:06:c8:22:a7:4c:9e:54:e7:00:9a:6f:
                    bf:51:3c:02:91:b2:aa:0c:32:52:24:38:68:06:5f:
                    63:ac:89:b4:0a:5c:b9:ed:96:a0:7e:f2:b6:65:d3:
                    0a:fc:95:36:9e:fd:24:1f:a5:64:25:80:8f:51:a9:
                    06:f1:11:16:c6:28:50:22:62:5f:a9:19:fa:1c:69:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:70:C0:D2:C4:B4:8A:7F:67:80:8A:DF:B7:71:9E:E4:6C:5C:DF:63
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:a2:28:e4:90:a6:b5:45:aa:bd:19:ff:31:a1:c2:7f:b4:
         ce:5c:4c:b1:a1:f6:4b:95:fd:30:6c:3d:c8:ab:cd:07:23:0b:
         6a:4d:a9:91:47:d2:0b:52:82:b6:97:1b:01:b2:ac:a5:c2:47:
         eb:f2:96:a5:98:64:34:9a:b9:bc:4f:3c:c1:ae:49:0e:cf:54:
         a1:9e:a3:c9:d2:cb:2d:b5:cb:88:39:48:eb:36:bd:d0:9a:0d:
         07:21:51:18:ad:26:a9:23:40:40:8c:9a:6e:79:4f:b4:36:c8:
         82:ab:43:dd:63:bf:82:9e:f0:59:40:53:01:4b:70:c2:a7:40:
         48:5c:f3:97:82:3e:2b:18:19:bb:0e:11:c5:17:bd:7f:86:ce:
         60:16:f0:f7:a9:6d:33:d1:e3:cd:d0:b4:9e:95:f0:c9:bf:d0:
         5c:2a:be:c3:64:1f:7b:4c:ae:7b:29:1b:5d:c7:4f:5a:d1:5c:
         be:18:1e:5d:1b:83:b0:e4:4b:85:d2:ee:d9:f6:3e:db:a4:31:
         11:80:00:97:7a:5b:8b:af:cf:aa:b0:f4:82:db:84:d1:0e:3e:
         f4:93:86:8d:aa:1f:6f:2e:e0:94:08:37:17:e0:6a:92:02:4e:
         a2:03:7d:28:e2:1b:ac:f8:fa:fb:09:91:b1:44:a8:6c:af:d0:
         a9:87:1a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3iV4Siml2P+v/wpgHC4jQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx
ZTU3YzQwHhcNMjYwNTAxMDcwMTE5WhcNMjYwNTAyMDcwMTE5WjAzMTEwLwYDVQQD
EyhkODcwYzBkMmM0YjQ4YTdmNjc4MDhhZGZiNzcxOWVlNDZjNWNkZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLoZ6xkGYkp9YKmJB/kG7ZltWSTa
Rf/b4cNdAyvvpKTT6+rbnRdD4U6yqas9Yi/3Mchcuc2liFNumrVtViU0IQBzEAiG
JOpcgutKvajzLiockYg7jkhiL0deqzraLA9WlAKPceDe+oX1fZJiU3CR2wH9hYPh
FglIBb1bEIt/hn/glxIZSGA029WtjZfSHOkBG5sv/uUqBVdZxljUGxA6C/7hGRAR
KBlZNYajmbRqMvhxRya6IpsUBsgip0yeVOcAmm+/UTwCkbKqDDJSJDhoBl9jrIm0
Cly57ZagfvK2ZdMK/JU2nv0kH6VkJYCPUakG8REWxihQImJfqRn6HGmVQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhwwNLEtIp/Z4CK37dxnuRsXN9jMB8GA1UdIwQY
MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt
YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm
LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5uiKOSQ
prVFqr0Z/zGhwn+0zlxMsaH2S5X9MGw9yKvNByMLak2pkUfSC1KCtpcbAbKspcJH
6/KWpZhkNJq5vE88wa5JDs9UoZ6jydLLLbXLiDlI6za90JoNByFRGK0mqSNAQIya
bnlPtDbIgqtD3WO/gp7wWUBTAUtwwqdASFzzl4I+KxgZuw4RxRe9f4bOYBbw96lt
M9HjzdC0npXwyb/QXCq+w2Qfe0yueykbXcdPWtFcvhgeXRuDsORLhdLu2fY+26Qx
EYAAl3pbi6/PqrD0gtuE0Q4+9JOGjaofby7glAg3F+BqkgJOogN9KOIbrPj6+wmR
sUSobK/QqYcaZQ==
-----END CERTIFICATE-----
Generated at Fri May 1 13:45:39 2026 by rpki-client