Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          sHBlZ/hCK/JIHhGjvoZZGKuop4LMz7CuZ6WiSMm+F+o=
Subject key identifier:   D0:1E:53:7A:F4:6F:96:32:2A:DE:6D:5B:1F:96:D1:95:C1:59:35:AE
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       019D329AF160A3B5D0CDBD7E418857F596CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          18EF
Signing time:             Sat 28 Mar 2026 04:01:48 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:48 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:48 +0000
Files and hashes:         1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
                          2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
                          3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
                          4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
                          5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
                          6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
                          7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
                          8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
                          9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: KzLH9aMXSbjDwsGZZ89cFm+b6+TDFccKgklD0kNIiIU=)
                          10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
                          11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
                          12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
                          13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
                          14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
                          15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
                          16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
                          17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
                          18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
                          19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
                          20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
                          21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
                          22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
                          23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
                          24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
                          25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
                          26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
                          27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
                          28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:f1:60:a3:b5:d0:cd:bd:7e:41:88:57:f5:96:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Mar 28 04:01:48 2026 GMT
            Not After : Mar 29 04:01:48 2026 GMT
        Subject: CN=d01e537af46f96322ade6d5b1f96d195c15935ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:2a:c7:da:76:b0:02:be:a6:a9:f4:6f:6e:
                    7c:84:37:dc:2d:73:2b:7c:e8:81:27:8e:b3:86:82:
                    47:d8:bd:57:ed:41:5b:b3:3b:1b:ba:f8:52:d8:df:
                    d7:3e:b6:d6:0a:6d:74:e5:a3:c3:b6:16:90:80:87:
                    9c:9c:12:90:f9:e2:4a:e7:31:45:09:cc:ae:ad:d3:
                    e6:10:5a:ff:e5:20:e5:83:b1:2c:f2:3a:56:57:69:
                    ad:60:c8:23:37:dc:86:30:5a:49:b7:e7:57:a8:8b:
                    f7:5a:37:fc:6c:09:3f:9d:aa:23:d5:d9:a9:61:3f:
                    8f:cc:30:bb:b0:dd:bc:9d:d8:bb:66:a2:6c:cb:52:
                    a2:4c:89:24:62:12:24:d1:65:5e:b5:b2:ea:99:aa:
                    92:4e:4a:d4:b5:c9:dd:32:1d:77:aa:58:99:e1:4c:
                    6a:67:d1:09:4a:31:9f:31:1c:29:09:fd:7c:b9:b2:
                    3e:05:aa:8b:ee:0d:9c:d6:cf:f8:7d:ff:00:40:bd:
                    2a:4e:9d:ba:20:0b:b8:0b:38:ac:f0:90:f1:67:44:
                    4b:7b:63:43:63:3b:3f:f7:2d:57:a2:24:44:4c:89:
                    a2:cc:eb:44:1c:6f:21:e2:96:84:41:68:db:c8:39:
                    3d:97:d1:d2:c6:82:1a:8b:87:80:85:ae:fc:28:55:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1E:53:7A:F4:6F:96:32:2A:DE:6D:5B:1F:96:D1:95:C1:59:35:AE
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ac:18:7c:67:76:c9:b1:f1:d9:4d:f5:36:70:9d:0b:42:70:
         9b:d8:1d:92:92:d4:a9:01:e1:3e:41:95:89:19:4a:f9:a0:fc:
         d1:b8:83:1e:97:9d:38:6e:49:1f:69:cc:f7:cd:12:c3:ac:be:
         68:d2:15:2c:a3:db:57:53:c1:3e:ad:e7:6b:04:d6:82:47:c0:
         60:1f:9d:66:04:e0:fe:14:c4:5e:55:35:68:b8:f9:ea:c6:18:
         71:7c:18:d4:53:62:07:08:93:df:5f:5a:e1:4d:77:9c:74:db:
         16:82:a2:dd:98:31:c1:6d:a5:f7:e7:e9:d9:ea:ad:ea:a1:ab:
         c2:ab:0b:5f:1c:1a:ca:d5:25:e6:9d:12:af:59:eb:a9:ab:7b:
         75:ca:fe:a7:16:22:12:dd:17:0f:73:ad:d7:23:b1:16:85:cf:
         55:f5:64:06:89:61:e1:f0:fe:62:10:ce:fb:8a:66:3c:5b:f4:
         c4:d6:63:38:78:78:34:8b:ea:c3:62:2c:78:6a:85:5d:f8:c2:
         2d:b8:69:31:a2:8b:c3:99:4d:e4:5c:86:29:d7:24:70:78:b0:
         76:94:5a:05:7e:03:bd:99:7b:8e:af:19:33:eb:95:90:ef:3e:
         d2:0e:b2:d5:2c:13:f6:cd:be:08:a2:ee:e8:41:70:aa:17:7a:
         29:c8:9e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymvFgo7XQzb1+QYhX9ZbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjYwMzI4MDQwMTQ4WhcNMjYwMzI5MDQwMTQ4WjAzMTEwLwYDVQQD
EyhkMDFlNTM3YWY0NmY5NjMyMmFkZTZkNWIxZjk2ZDE5NWMxNTkzNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJUqx9p2sAK+pqn0b258hDfcLXMr
fOiBJ46zhoJH2L1X7UFbszsbuvhS2N/XPrbWCm105aPDthaQgIecnBKQ+eJK5zFF
CcyurdPmEFr/5SDlg7Es8jpWV2mtYMgjN9yGMFpJt+dXqIv3Wjf8bAk/naoj1dmp
YT+PzDC7sN28ndi7ZqJsy1KiTIkkYhIk0WVetbLqmaqSTkrUtcndMh13qliZ4Uxq
Z9EJSjGfMRwpCf18ubI+BaqL7g2c1s/4ff8AQL0qTp26IAu4Czis8JDxZ0RLe2ND
Yzs/9y1XoiRETImizOtEHG8h4paEQWjbyDk9l9HSxoIai4eAha78KFV6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAeU3r0b5YyKt5tWx+W0ZXBWTWuMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6wYfGd2
ybHx2U31NnCdC0Jwm9gdkpLUqQHhPkGViRlK+aD80biDHpedOG5JH2nM980Sw6y+
aNIVLKPbV1PBPq3nawTWgkfAYB+dZgTg/hTEXlU1aLj56sYYcXwY1FNiBwiT319a
4U13nHTbFoKi3ZgxwW2l9+fp2eqt6qGrwqsLXxwaytUl5p0Sr1nrqat7dcr+pxYi
Et0XD3Ot1yOxFoXPVfVkBolh4fD+YhDO+4pmPFv0xNZjOHh4NIvqw2IseGqFXfjC
LbhpMaKLw5lN5FyGKdckcHiwdpRaBX4DvZl7jq8ZM+uVkO8+0g6y1SwT9s2+CKLu
6EFwqhd6Kcieew==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:25 2026 by rpki-client