Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          uW8yioX0eEt/cZx20A7vZI7OZQrNf+jm158PQhatLek=
Subject key identifier:   A0:FD:D2:12:CF:F6:61:AF:96:DB:44:90:9A:1D:0F:2B:66:06:36:14
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       019F935C09508E81AE68ACD8A8BE5F3A4DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 09:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:50 +0000
Files and hashes:         1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: qrR+YwgdeiS3wm39o1aN/Aot/OA0vP6c11nqk/djd54=)
                          3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
                          4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:09:50:8e:81:ae:68:ac:d8:a8:be:5f:3a:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Jul 24 09:01:50 2026 GMT
            Not After : Jul 25 09:01:50 2026 GMT
        Subject: CN=a0fdd212cff661af96db44909a1d0f2b66063614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:c7:02:9e:70:05:5c:24:fc:7a:7d:42:55:
                    36:d5:af:db:c2:9b:89:bf:48:76:f0:a4:1a:c6:f4:
                    ab:92:43:4f:98:ea:b5:94:58:3d:1f:9f:b0:92:aa:
                    9c:69:04:86:44:1e:12:0f:25:dd:c8:1a:f9:b6:91:
                    fa:30:39:bc:5d:d2:a2:73:54:4f:fa:62:61:48:0e:
                    88:c3:9c:23:a7:ce:9d:c4:1f:fd:73:20:02:80:89:
                    a7:bf:d6:05:1e:63:49:4f:98:f4:23:09:fa:04:6b:
                    0e:61:aa:c3:55:2f:9b:1f:65:f0:a1:7c:a9:d3:c8:
                    42:a6:a7:a7:81:2a:bd:02:6d:1e:0a:1b:48:cb:9b:
                    cf:8a:e2:3c:8b:7d:e4:25:d5:f6:0f:e1:78:0c:68:
                    c4:4f:42:2b:6d:32:f0:68:75:2e:f2:d9:7c:fb:0d:
                    75:3d:8b:3b:eb:0c:96:f1:c8:aa:3c:aa:f6:b4:66:
                    b3:1e:8f:1c:bd:06:a9:64:44:39:4f:fe:06:9b:49:
                    04:30:e8:51:42:9f:c3:1a:55:d0:0d:73:ce:ce:bd:
                    ef:00:15:ee:c1:41:fe:23:5c:f7:8f:b7:0c:49:e6:
                    9d:46:71:64:ac:2b:5b:68:b5:fb:64:b4:6b:8e:9e:
                    63:dd:9b:d3:f4:9f:eb:bb:bf:da:e2:37:8b:10:99:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:D2:12:CF:F6:61:AF:96:DB:44:90:9A:1D:0F:2B:66:06:36:14
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ef:24:cc:d1:fa:60:ed:e8:67:75:29:09:17:95:4e:a4:8a:
         76:14:7b:bd:39:ef:65:df:f9:5c:24:5c:00:c5:ae:17:81:b7:
         37:e9:d3:9f:82:53:71:df:13:24:1a:a9:c7:6b:60:64:c5:6c:
         62:bc:c0:d3:b5:0a:89:5e:72:de:e3:f1:99:2b:4f:1b:4f:3a:
         b4:61:74:c7:10:1f:5d:e5:52:a1:b5:60:2d:27:6f:94:23:ea:
         9e:f4:fd:a2:87:49:cb:e5:36:b3:eb:9e:ad:f8:40:6d:57:c9:
         ac:a7:7c:81:a4:15:03:e0:3a:e6:73:35:1a:ad:6c:43:82:9d:
         3c:9e:39:5f:79:2f:04:37:d0:93:bd:5d:61:db:24:d5:fd:c9:
         38:bf:58:52:e1:eb:ee:28:a5:94:c4:2b:31:44:13:2a:c4:2e:
         dc:5e:17:8c:dc:43:e2:e8:1a:68:87:c7:52:8c:96:df:b2:bd:
         76:dd:c1:a1:47:09:a2:2b:92:a5:58:9d:44:14:2b:63:3a:cd:
         6e:83:69:df:da:48:b5:3a:6e:74:74:e6:1a:55:e7:52:7a:89:
         6c:98:9b:81:ee:b6:35:af:94:1b:96:db:08:27:bb:98:62:bf:
         aa:58:aa:80:6f:ff:72:4e:b5:d1:c8:f4:be:1d:df:91:f7:2b:
         b1:23:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:09 2026 by rpki-client