Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          K2WNgNrOczBQmP2GdHXfaUF+tpLg/7Np2612Y2XkUW8=
Subject key identifier:   68:A9:2B:D2:CD:08:9A:49:35:68:4B:DF:D5:AB:67:A1:61:B3:C1:FD
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01A0F0792D74F933F397EAE22DD0BB3C81E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          0834
Signing time:             Wed 30 Sep 2026 04:01:08 +0000
Manifest this update:     Wed 30 Sep 2026 04:01:08 +0000
Manifest next update:     Thu 01 Oct 2026 04:01:08 +0000
Files and hashes:         1: AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa (hash: BRGrCuSHF/KxuLb2FPfCsu+om1pAKryDQAGzbDeUu7s=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: 8JMvGn9gjEnxgPC+1m2+wZZXrc6z4vkEdUuJ3TUyetU=)
                          3: ZT9LL1knJk98OWBBZzmpd3KjJfI.roa (hash: 4/mqEiUwgyohdOIIeiQwV1R7+uiHz+P83MCY26loH04=)
                          4: cJF5A_gDXcusMmTN_YOw0UaFwN4.roa (hash: ZjhEvCJMp06qZY9/OCI+NL1nzY2YgF1mcLrDQRDzTXk=)
                          5: gBcIgtm5Fh2dgbWxMKlYqLrgkZc.roa (hash: HLdh1cV+6Q5Z9NDCAYRcbYgcdSu4gYhwR9qj/+weu2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:79:2d:74:f9:33:f3:97:ea:e2:2d:d0:bb:3c:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Sep 30 04:01:08 2026 GMT
            Not After : Oct  1 04:01:08 2026 GMT
        Subject: CN=68a92bd2cd089a4935684bdfd5ab67a161b3c1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:20:c5:72:c2:0b:0c:64:cf:14:3c:4f:50:
                    2a:72:e2:04:85:f7:a5:2a:30:32:81:6f:a7:8a:4d:
                    60:a3:86:b7:36:df:97:24:e5:22:36:c5:36:24:6b:
                    d8:4a:5b:e1:d1:5e:c9:79:1c:13:85:b2:fe:f7:5e:
                    51:80:b2:26:98:fd:c5:cb:df:24:8f:a5:dc:d9:ec:
                    55:fe:09:36:e2:ef:8e:78:c8:9b:eb:b7:0d:b7:bd:
                    24:ed:4e:05:7a:83:72:50:7e:04:83:e3:f0:c3:11:
                    6b:c9:6f:26:06:21:53:db:12:6c:ed:31:90:60:cd:
                    a7:bd:b3:83:e7:4b:18:be:83:f3:2e:67:c3:ca:a3:
                    5c:7f:76:d0:9f:52:9f:0b:e7:6c:fd:d4:b2:57:bd:
                    5b:eb:3a:a9:f5:bd:1a:dc:59:d1:f6:bd:08:be:a5:
                    34:f4:ef:7b:3a:8b:9f:d0:12:ce:46:6b:91:3a:c7:
                    56:f8:cb:40:f2:65:4a:0c:85:b8:3d:64:bf:08:af:
                    80:5e:79:ee:08:92:ef:bf:db:57:23:66:a4:45:c4:
                    98:d5:4e:f0:ab:7a:43:36:a4:15:c5:3f:34:cb:1f:
                    8f:40:b6:a4:6a:e9:20:a8:8d:69:b6:04:5a:f3:18:
                    cc:af:e2:65:e7:aa:1d:94:be:bf:46:0e:6e:2d:57:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A9:2B:D2:CD:08:9A:49:35:68:4B:DF:D5:AB:67:A1:61:B3:C1:FD
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:00:d6:ab:42:63:a0:88:7e:5f:52:d1:3a:15:a0:4c:ee:56:
         61:2c:e1:4d:df:c3:28:a7:54:46:77:fb:c8:94:65:03:4c:89:
         44:87:e3:e5:78:18:ab:27:21:94:37:9e:f7:63:df:7a:ec:39:
         53:c1:94:65:c8:12:e8:c6:23:9e:30:bd:62:e4:62:cc:75:4f:
         d5:63:7e:8c:1a:34:32:45:16:c9:43:97:5e:92:8f:62:f2:ab:
         ab:36:b6:32:22:c9:de:a9:62:84:20:ab:d8:dd:dc:51:04:ba:
         33:f7:f4:91:77:fb:6a:d7:2d:6c:63:23:ff:e6:d5:18:ea:f7:
         6b:c6:76:4e:84:f9:c1:22:76:ec:e1:4c:b4:0e:dc:3a:b5:03:
         1f:8b:b9:06:7f:52:67:28:0f:5c:80:90:1d:e7:e3:b0:69:16:
         87:1b:d3:8c:19:ce:d7:77:82:29:c4:8c:e4:5c:63:70:c6:c7:
         eb:96:b6:3f:9e:52:b9:34:8a:7e:2e:f1:3e:63:70:45:9e:97:
         1a:5f:ed:75:a5:8d:30:63:7d:e7:8a:79:ba:b3:67:af:a1:42:
         29:63:23:d9:d5:57:85:e9:21:8b:e3:63:66:a2:e1:f3:e8:bd:
         3f:a3:d6:37:61:36:44:45:59:3a:68:75:fa:37:2a:db:e7:25:
         25:af:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:27:20 2026 by rpki-client