Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          3DoKtY+OjEXRBg4znVpCVd6XzFBrcaNpTlnCkItiLKs=
Subject key identifier:   D2:D7:1D:9F:97:A1:7E:C8:7F:13:E5:DF:6F:44:29:F3:E3:71:07:38
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01A0E4AC0E561EB7150F975E6A7A34BB4BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          0831
Signing time:             Sun 27 Sep 2026 21:01:16 +0000
Manifest this update:     Sun 27 Sep 2026 21:01:16 +0000
Manifest next update:     Mon 28 Sep 2026 21:01:16 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
                          6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          8: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (hash: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=)
                          9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: po2VKSK1BQ3HcfBu9vrYUS2zoD6ILPW7FwFL96Mf/UQ=)
                          12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          18: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (hash: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=)
                          19: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          20: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          21: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          22: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          23: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          24: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          25: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          26: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          27: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          28: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          29: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          30: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:ac:0e:56:1e:b7:15:0f:97:5e:6a:7a:34:bb:4b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Sep 27 21:01:16 2026 GMT
            Not After : Sep 28 21:01:16 2026 GMT
        Subject: CN=d2d71d9f97a17ec87f13e5df6f4429f3e3710738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:cd:03:89:a1:38:fb:77:49:13:6a:a6:d4:
                    b6:b4:28:22:bd:4f:93:a3:6f:ee:f6:6e:83:31:8d:
                    1b:e8:90:a3:4d:a2:ff:01:ab:70:83:39:84:60:23:
                    53:69:31:5a:dc:6b:a6:09:f2:d7:fe:75:24:e6:86:
                    11:ab:39:04:58:f3:7f:ef:de:7b:0d:75:52:3b:63:
                    41:05:c9:da:eb:24:78:d7:d8:c9:01:9b:72:8e:35:
                    85:0e:32:84:f8:5d:e7:52:b4:81:83:6f:f7:9e:66:
                    a1:e0:40:7e:6c:a4:d5:4c:0c:85:45:d3:e1:a0:3b:
                    65:36:8c:9c:51:61:6e:28:75:97:1f:de:84:49:86:
                    ef:b8:6c:b3:98:e8:6e:fb:bb:12:b9:3d:80:c6:7e:
                    2b:87:ff:1f:f1:be:ac:93:f6:bb:7a:dd:02:8f:de:
                    c5:31:36:54:ca:77:a3:f5:2b:ec:94:d0:4b:8a:48:
                    2d:1d:d1:12:c3:65:16:49:70:85:f4:dc:bc:72:65:
                    25:00:a2:4a:20:4c:dd:18:c4:b3:44:e4:81:a8:6b:
                    fb:bf:e9:43:13:4c:9b:1d:cb:3b:bf:7f:92:88:10:
                    6d:d2:3d:5a:89:cb:cb:7c:6d:90:7a:65:62:da:15:
                    c2:17:52:4e:01:40:16:26:47:3f:07:d0:09:a4:4f:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:1D:9F:97:A1:7E:C8:7F:13:E5:DF:6F:44:29:F3:E3:71:07:38
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:54:12:5c:8a:b7:67:10:0a:83:94:28:8b:0d:e1:17:07:
         68:e7:60:67:a2:fc:db:81:03:8b:65:6c:9f:b9:f6:a9:33:ea:
         8e:57:da:f6:99:7f:d5:83:fe:73:20:40:52:a3:97:db:ce:17:
         62:15:f8:c7:98:28:1d:b8:a4:50:09:54:27:a3:fb:55:73:c8:
         21:47:e6:bb:c1:02:54:fd:f6:04:27:4b:dd:49:5c:59:6f:73:
         7e:07:3e:5e:80:66:9b:b7:2d:f7:06:d7:0f:2b:f0:30:eb:12:
         a0:ae:9c:27:ae:82:dd:67:af:4a:07:47:40:7d:e6:db:9b:8a:
         95:f8:80:1d:bd:f9:63:df:e2:90:b5:74:60:f8:8c:87:f0:48:
         e3:46:cb:fe:07:43:be:71:93:14:75:20:c7:c2:c5:2f:8b:73:
         cc:52:74:70:de:83:eb:6e:b2:04:3c:e0:b5:8f:7d:97:d4:63:
         a5:51:14:da:a2:da:8d:9b:6c:c7:21:7c:21:18:62:aa:79:bb:
         51:4f:af:e2:db:7f:34:6a:b4:b4:3a:ad:86:89:95:34:e0:fe:
         4b:59:51:eb:30:32:39:42:3b:48:1e:28:8c:b7:60:71:96:a9:
         7e:2c:31:a7:2a:43:eb:40:80:58:72:1f:94:e8:96:03:77:4a:
         ff:00:9d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkrA5WHrcVD5deano0u0vhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjYwOTI3MjEwMTE2WhcNMjYwOTI4MjEwMTE2WjAzMTEwLwYDVQQD
EyhkMmQ3MWQ5Zjk3YTE3ZWM4N2YxM2U1ZGY2ZjQ0MjlmM2UzNzEwNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/NA4mhOPt3SRNqptS2tCgivU+T
o2/u9m6DMY0b6JCjTaL/AatwgzmEYCNTaTFa3GumCfLX/nUk5oYRqzkEWPN/7957
DXVSO2NBBcna6yR419jJAZtyjjWFDjKE+F3nUrSBg2/3nmah4EB+bKTVTAyFRdPh
oDtlNoycUWFuKHWXH96ESYbvuGyzmOhu+7sSuT2Axn4rh/8f8b6sk/a7et0Cj97F
MTZUynej9SvslNBLikgtHdESw2UWSXCF9Ny8cmUlAKJKIEzdGMSzROSBqGv7v+lD
E0ybHcs7v3+SiBBt0j1aicvLfG2QemVi2hXCF1JOAUAWJkc/B9AJpE9uqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLXHZ+XoX7IfxPl329EKfPjcQc4MB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrFUElyK
t2cQCoOUKIsN4RcHaOdgZ6L824EDi2Vsn7n2qTPqjlfa9pl/1YP+cyBAUqOX284X
YhX4x5goHbikUAlUJ6P7VXPIIUfmu8ECVP32BCdL3UlcWW9zfgc+XoBmm7ct9wbX
DyvwMOsSoK6cJ66C3WevSgdHQH3m25uKlfiAHb35Y9/ikLV0YPiMh/BI40bL/gdD
vnGTFHUgx8LFL4tzzFJ0cN6D626yBDzgtY99l9RjpVEU2qLajZtsxyF8IRhiqnm7
UU+v4tt/NGq0tDqthomVNOD+S1lR6zAyOUI7SB4ojLdgcZapfiwxpypD60CAWHIf
lOiWA3dK/wCdzQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:43:37 2026 by rpki-client