Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          fPWHlabAxfw3hdfL+X/zW2SWh8aZ57UG+zwYRclILoA=
Subject key identifier:   94:E4:9F:F4:F9:9C:9E:7B:70:80:55:3A:33:C9:E3:1C:93:3D:53:FB
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       01A0E362478511FA53F6A353BEDA8432D50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          1A77
Signing time:             Sun 27 Sep 2026 15:01:03 +0000
Manifest this update:     Sun 27 Sep 2026 15:01:03 +0000
Manifest next update:     Mon 28 Sep 2026 15:01:03 +0000
Files and hashes:         1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: UK+QQ1TnNzXqM6oAPj0mU5aCXNVNlg1gS0S2VQCiLdg=)
                          3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
                          4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:62:47:85:11:fa:53:f6:a3:53:be:da:84:32:d5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Sep 27 15:01:03 2026 GMT
            Not After : Sep 28 15:01:03 2026 GMT
        Subject: CN=94e49ff4f99c9e7b7080553a33c9e31c933d53fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:c3:c7:8e:09:6c:69:6b:1a:a0:3c:0e:6b:
                    c1:8b:ec:1f:5a:a3:26:25:67:96:d5:e9:aa:5d:d2:
                    e3:50:58:6a:93:eb:46:d7:7f:c2:d6:8b:0d:9f:2e:
                    0d:d5:8c:0c:7e:81:ff:c6:86:9a:bd:59:c0:03:2a:
                    f3:cb:20:30:e2:bd:01:51:f0:e8:89:43:2d:f5:14:
                    da:5a:48:00:8d:aa:17:28:a0:8f:71:61:ca:80:db:
                    7f:92:7f:34:ea:34:c1:c4:86:5d:b6:05:e1:36:93:
                    86:44:06:50:23:0b:4f:f3:86:d4:62:fb:9f:df:f9:
                    27:a3:7e:bc:b9:22:7e:94:74:1e:d8:81:6d:f2:d2:
                    38:ab:e4:2d:7c:c5:0e:97:e3:aa:a9:c4:d4:42:b7:
                    8d:af:d8:70:4a:2c:c9:eb:78:68:98:6f:f4:d7:62:
                    f8:58:de:fe:11:6b:07:68:30:bf:73:f1:f4:9e:71:
                    fd:fb:2c:07:62:f0:4b:12:8e:8d:69:63:1c:27:da:
                    56:c1:39:59:81:31:9f:86:3d:5d:7a:92:f0:15:26:
                    43:27:54:62:9f:f7:05:6f:0f:22:b6:2b:90:5e:61:
                    47:60:ea:b1:cd:8c:40:bb:c2:e2:69:3c:e0:34:ec:
                    f7:27:bc:f3:00:63:83:80:b5:c7:f5:cf:da:a6:c4:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:9F:F4:F9:9C:9E:7B:70:80:55:3A:33:C9:E3:1C:93:3D:53:FB
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:2e:a5:61:05:8d:cf:41:01:9a:f7:ea:ed:f3:85:a4:19:
         cf:02:ab:fe:20:c1:c0:e9:fb:dc:71:e3:e8:d1:1e:2e:f5:ea:
         58:66:75:f1:2a:d9:60:a7:c9:7a:46:5c:a2:4e:69:3a:5d:93:
         b6:fe:d4:fe:ce:57:8e:e2:d3:88:0c:a0:f7:fd:5b:6a:a2:2b:
         ce:25:7b:94:3f:37:23:cc:80:f7:47:9e:56:5a:e5:f0:14:4c:
         00:cc:59:bd:4f:5c:a3:e7:42:98:25:20:92:8d:25:3b:f3:18:
         45:1a:ee:71:08:2b:d4:10:26:b9:5b:ef:ff:95:0e:f8:9a:d9:
         a1:4e:c7:65:11:ba:a1:cb:7b:31:85:86:aa:98:9d:38:8f:82:
         d5:91:d0:3a:17:c2:69:05:c3:d4:8b:dd:14:57:aa:be:da:06:
         d1:90:df:37:d6:18:de:44:08:d4:3c:6e:ff:9c:2f:b6:1f:a7:
         b8:a3:01:d0:3c:d1:72:fb:9e:20:b0:bc:4f:e1:b5:19:c1:9a:
         4a:e4:5c:0f:b1:84:d0:75:de:73:29:cc:95:bd:ea:ea:bc:60:
         46:f2:9a:c7:8e:3e:ca:78:1a:90:28:58:48:3d:41:ad:a4:32:
         c7:a4:1d:25:bb:d5:56:2a:33:1b:63:6e:9e:a5:be:41:8e:7f:
         57:4a:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:41:55 2026 by rpki-client