Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          UCZN6T5gQles28sVyu8mC7qcr/hGGCpKeAj9YSt4kYo=
Subject key identifier:   C5:BE:A4:8B:B4:E4:D2:31:5D:92:31:E5:95:77:6D:DE:B8:F3:74:17
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       019D27041FEE873D1C8FA47480B343849FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          063E
Signing time:             Wed 25 Mar 2026 22:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:14 +0000
Files and hashes:         1: AoU_pxzG_o6ZdZCCDWMVfDhpvWo.roa (hash: BRGrCuSHF/KxuLb2FPfCsu+om1pAKryDQAGzbDeUu7s=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: h0/oe69jb5VsQO4MKDq3Rgr1kuF6eqZPZspz0XEy8Wk=)
                          3: ZT9LL1knJk98OWBBZzmpd3KjJfI.roa (hash: 4/mqEiUwgyohdOIIeiQwV1R7+uiHz+P83MCY26loH04=)
                          4: cJF5A_gDXcusMmTN_YOw0UaFwN4.roa (hash: ZjhEvCJMp06qZY9/OCI+NL1nzY2YgF1mcLrDQRDzTXk=)
                          5: gBcIgtm5Fh2dgbWxMKlYqLrgkZc.roa (hash: HLdh1cV+6Q5Z9NDCAYRcbYgcdSu4gYhwR9qj/+weu2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:1f:ee:87:3d:1c:8f:a4:74:80:b3:43:84:9f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Mar 25 22:01:14 2026 GMT
            Not After : Mar 26 22:01:14 2026 GMT
        Subject: CN=c5bea48bb4e4d2315d9231e595776ddeb8f37417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:f2:49:d4:ce:f7:f9:92:ed:39:29:b7:eb:
                    12:e8:ec:92:2c:0b:c4:ec:f7:08:9d:7f:cd:21:3e:
                    ed:1d:d8:75:61:81:f2:19:68:86:5f:a6:4a:bd:16:
                    7a:9a:6e:f5:47:c3:02:5c:85:14:cc:7e:cf:a1:54:
                    63:09:fd:ca:ee:cb:e9:85:05:2d:e4:81:ff:3f:fc:
                    23:a6:6d:85:4f:aa:8a:8e:2e:ee:e3:2d:3c:50:da:
                    8f:79:bb:1b:7c:4f:c0:9a:91:03:41:56:5e:25:b0:
                    f2:4b:ca:43:2b:a9:e2:c4:5e:7c:d1:35:b4:bd:65:
                    1e:dd:54:ee:8f:93:f7:98:10:75:af:f1:d5:c7:67:
                    8c:6d:27:e4:16:2e:8d:91:bc:1e:fa:72:76:a2:47:
                    3d:5d:66:12:c2:3d:0b:d5:ed:60:32:0a:94:ea:3b:
                    01:bd:4c:b0:0a:ba:f6:73:f8:67:94:fb:1b:87:b0:
                    a5:d9:c4:e0:66:95:1d:e3:0f:8e:2f:65:ca:ce:c8:
                    6c:d0:ff:95:f2:db:30:a0:9f:05:fa:55:e9:57:97:
                    54:e5:0a:ae:fd:21:5b:c2:f5:7c:02:25:60:2a:57:
                    3f:a7:e4:11:d5:24:7c:02:d5:7d:82:46:34:3f:35:
                    64:e9:26:f9:92:2a:28:6f:dd:b0:a2:b5:9a:2f:66:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BE:A4:8B:B4:E4:D2:31:5D:92:31:E5:95:77:6D:DE:B8:F3:74:17
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:20:d0:02:a5:12:d0:a2:63:51:67:06:be:b7:f7:5b:7f:55:
         05:d8:80:72:2f:ae:99:42:13:fc:ae:e4:06:23:c8:4e:cd:1f:
         18:8a:ed:b6:f6:85:f5:4a:b3:ce:99:95:4c:13:0a:94:d2:d5:
         cc:e0:ec:cc:ad:bb:82:8d:ec:7e:41:75:d1:2a:ce:f7:be:fb:
         6a:51:bb:d8:5e:ac:f6:ff:04:41:e0:43:f7:cd:93:3b:00:39:
         0c:42:ec:84:9f:3f:67:b9:e7:e0:a9:01:eb:90:3f:c9:de:18:
         87:b9:56:4a:52:6e:f5:25:41:4f:32:4f:7f:49:00:c2:53:60:
         d3:e9:6d:45:01:97:9b:8f:28:59:75:4f:2c:e7:c2:fa:1b:f8:
         a2:83:fc:5e:ce:88:d3:17:6e:ea:ee:43:2f:a3:ee:14:8d:1b:
         33:37:cb:43:f8:69:29:86:cf:8d:3c:20:13:69:ae:d0:be:b5:
         33:a0:bf:25:21:dc:9c:07:2b:49:b7:90:76:7f:fa:ce:e5:6e:
         22:91:df:96:af:64:6c:ae:4e:02:f8:57:f3:1d:6d:06:0b:d7:
         81:56:54:20:73:d8:4e:47:41:17:6c:2d:d7:78:51:4c:fa:f2:
         a4:fc:8c:29:22:75:25:9a:72:1e:c6:13:7d:ff:6a:88:41:b2:
         57:9e:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:18 2026 by rpki-client