Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File:                     nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier:          jesEqQJxi915E+EMo4fZJDm4YD453YM1QDTflFzwLsU=
Subject key identifier:   58:83:2F:C2:85:28:8F:F5:BF:65:E6:66:2D:82:CE:3A:21:B0:BB:E5
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       019D2AA948A73D2D429F1D898F8228C7AAC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number:          18B3
Signing time:             Thu 26 Mar 2026 15:00:30 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:30 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:30 +0000
Files and hashes:         1: 4_Hs_qWX8LMFMBOdMWupc1COrZw.roa (hash: W+UOeuskG88MJklXzCx9HgorURDeXLbXHLC4PO76/y4=)
                          2: EPH936Qc4pN-NRZEtks45mMYwdw.roa (hash: g4y5Rg9awyTSmqRwn21zxTNz1btz8mDWqc67pAJI2As=)
                          3: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (hash: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ=)
                          4: GNYsH8Ssdi0wuq0MtkzjAz5IOK8.roa (hash: YBipqhCas3UTGUmAt3vdoKG8URq62fHTpLk/b0OQbks=)
                          5: J4UnD7LRScbfxtXWDnuE42uhx3M.roa (hash: 3+wx2BbDUCCwJeiPSbBlAz3h3Fg2LYaejyKVPH0G+1A=)
                          6: JSSAL1uS2725f7uM8kvYMape7F8.roa (hash: RgB3TBZWhlYpz5IbsQEeSNtJJZhDZHeuEj6Sx1LMl58=)
                          7: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (hash: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770=)
                          8: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (hash: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM=)
                          9: O9b4MiyQJf7ADeyK6FOskAUc3rU.roa (hash: lycf7IhJhl3N0Ed4djWaYauK9bDCqpC39os1AcnPPrA=)
                          10: Qw8yTunOSm4ZfBN_EbpBqDPiY5Q.roa (hash: U5GJVvdUQBnMaqa4tufa/PxLgPBUjbU5mqB41CCObCk=)
                          11: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (hash: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw=)
                          12: WYo1teZpvwvbF93D39MrwjDyB6c.roa (hash: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=)
                          13: WZgHvahvby7Of6uM98jDNnd8Onw.roa (hash: IOGgpgLWwWoangGJpAZ0DVTAjAvi05KQDIslMiG0UK0=)
                          14: armHtzccUgM1BQgqFWfqXr6nmqw.roa (hash: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k=)
                          15: djh44NEuCspUjoveVO9WyVzbtyE.roa (hash: UhrDFHo4jOAfwIxgLYqPYJZDTHc3YAaB74ugwpPJYdc=)
                          16: e5cBlv_Bd6SNioE7OAj1ZQcVjDM.roa (hash: NhuCAZJByUFm+pGHUA58JcG57TSRQSaIovYFwWCKvGs=)
                          17: fDBKRmseNLtDoz2k-oOaLC8l7LY.roa (hash: n0i6gVg3IW17GGTZZ/RrukXurtJ0nF/r+HpmyPOhljs=)
                          18: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (hash: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ=)
                          19: luFncGoOqwf-cVbFDO3bIWW4Do8.roa (hash: x4PEjaapYEKgyJ/2Uzjynby5qWIm0JNE/bTW8Z3cae4=)
                          20: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (hash: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE=)
                          21: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (hash: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc=)
                          22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: T0PEDczqCeUFiMuLz9lckyI6C9AeqiCpSPwX10NUeO8=)
                          23: oIyDHrSU63T5_QeNiiA2CtszmCg.roa (hash: /AFuLZ9BJOgLw6Pd+8NkPnlgM3YxVhJzcU5H4pM6yvk=)
                          24: ph347tnTWIGgg-ume_myaaWDaLI.roa (hash: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0=)
                          25: syCImBDKif2bUtThCCVdzEwc7QE.roa (hash: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:48:a7:3d:2d:42:9f:1d:89:8f:82:28:c7:aa:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Mar 26 15:00:30 2026 GMT
            Not After : Mar 27 15:00:30 2026 GMT
        Subject: CN=58832fc285288ff5bf65e6662d82ce3a21b0bbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:31:26:7f:92:76:9f:63:99:87:e9:94:fb:
                    f9:2c:d4:1d:83:a6:62:5a:82:a8:23:1d:b1:8e:9f:
                    10:e4:19:e4:33:69:ab:22:4f:56:c9:b3:23:04:69:
                    7d:b9:43:de:fa:10:77:bb:ef:66:1d:18:86:9a:eb:
                    98:f5:fb:bc:7f:fb:e0:4c:fd:e8:9d:76:d6:6c:7c:
                    93:83:a7:ea:29:5b:7f:db:85:dc:7b:29:4c:86:67:
                    24:e1:67:8d:40:95:0a:a7:eb:15:a3:e0:f8:4d:ae:
                    34:d6:2b:cd:da:8e:72:ad:87:3d:50:06:63:ab:62:
                    73:7d:13:ae:79:55:19:36:24:59:94:21:1d:bd:69:
                    8b:e9:55:75:0b:0b:7c:37:a3:bf:8f:8f:01:94:7e:
                    fe:1d:54:5d:4e:2d:03:fd:88:29:da:72:1b:4f:8a:
                    ba:b2:af:db:97:78:c3:21:55:c9:9e:51:94:d3:06:
                    76:d2:f5:02:4b:64:ac:54:c9:34:a3:3b:1c:e6:ae:
                    ab:c9:36:eb:8d:72:69:85:5b:cb:6e:22:11:f2:15:
                    1d:7b:6c:d7:f9:b0:84:a0:a6:d2:e1:83:25:f1:1b:
                    33:f7:7e:d2:bb:5d:44:82:88:70:a8:21:ac:eb:0c:
                    34:44:68:1e:50:13:89:b0:e6:e3:3f:70:9f:f0:a2:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:2F:C2:85:28:8F:F5:BF:65:E6:66:2D:82:CE:3A:21:B0:BB:E5
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:85:7d:b9:18:8d:4f:ca:8b:02:8b:d7:b8:4d:f1:bb:ab:
         43:a6:1a:27:25:3b:6f:82:42:58:b0:60:84:8e:8a:8e:97:f4:
         e6:05:33:56:cd:01:80:95:af:35:74:ca:08:c7:f2:7b:74:6f:
         66:da:66:cf:ba:37:21:52:20:a8:63:5e:cd:4c:71:88:0d:13:
         64:f1:04:03:2b:8b:1d:48:e6:5d:36:31:31:78:c8:86:84:2d:
         69:ce:fe:7f:89:db:83:24:36:c8:3c:3a:09:ca:5a:2e:88:0f:
         c4:ab:2a:1d:48:2e:47:ae:06:14:18:70:37:85:16:db:b5:5f:
         a6:de:56:6b:d9:08:3b:0c:88:63:b3:86:84:29:e1:3e:a5:0d:
         9b:e2:3d:10:7d:3a:d0:0e:89:17:7b:72:3d:6c:58:c6:ef:2e:
         35:8e:59:72:41:fc:bf:25:44:1b:c0:da:e1:01:e3:1f:93:2b:
         51:4b:ea:c2:aa:80:cd:08:fd:90:16:ef:c1:f3:0d:53:04:e1:
         d2:75:2b:0d:09:d9:28:7a:ae:c5:34:50:eb:ea:54:4c:67:5c:
         d1:71:3f:12:00:af:8a:fb:7f:1c:1c:59:f9:83:f3:50:2f:cd:
         fe:ab:16:3b:8a:dd:79:9d:7e:17:52:fb:ba:cf:eb:09:96:1a:
         6e:22:96:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqUinPS1Cnx2Jj4Iox6rJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjYwMzI2MTUwMDMwWhcNMjYwMzI3MTUwMDMwWjAzMTEwLwYDVQQD
Eyg1ODgzMmZjMjg1Mjg4ZmY1YmY2NWU2NjYyZDgyY2UzYTIxYjBiYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosYxJn+Sdp9jmYfplPv5LNQdg6Zi
WoKoIx2xjp8Q5BnkM2mrIk9WybMjBGl9uUPe+hB3u+9mHRiGmuuY9fu8f/vgTP3o
nXbWbHyTg6fqKVt/24XceylMhmck4WeNQJUKp+sVo+D4Ta401ivN2o5yrYc9UAZj
q2JzfROueVUZNiRZlCEdvWmL6VV1Cwt8N6O/j48BlH7+HVRdTi0D/Ygp2nIbT4q6
sq/bl3jDIVXJnlGU0wZ20vUCS2SsVMk0ozsc5q6ryTbrjXJphVvLbiIR8hUde2zX
+bCEoKbS4YMl8Rsz937Su11EgohwqCGs6ww0RGgeUBOJsObjP3Cf8KJWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiDL8KFKI/1v2XmZi2CzjohsLvlMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg2FfbkY
jU/KiwKL17hN8burQ6YaJyU7b4JCWLBghI6Kjpf05gUzVs0BgJWvNXTKCMfye3Rv
Ztpmz7o3IVIgqGNezUxxiA0TZPEEAyuLHUjmXTYxMXjIhoQtac7+f4nbgyQ2yDw6
CcpaLogPxKsqHUguR64GFBhwN4UW27Vfpt5Wa9kIOwyIY7OGhCnhPqUNm+I9EH06
0A6JF3tyPWxYxu8uNY5ZckH8vyVEG8Da4QHjH5MrUUvqwqqAzQj9kBbvwfMNUwTh
0nUrDQnZKHquxTRQ6+pUTGdc0XE/EgCvivt/HBxZ+YPzUC/N/qsWO4rdeZ1+F1L7
us/rCZYabiKWZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:56 2026 by rpki-client