Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File:                     W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier:          PbDZUjrFzmqLKTynlYdZITUjlVXiijl5L4dOwILuKrk=
Subject key identifier:   01:8B:71:61:78:07:F4:F0:BF:5A:10:0F:ED:6A:8C:79:55:35:97:F8
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       019CAAC5FE0EDC55D07AF20BDB32C5C5E3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number:          194E
Signing time:             Sun 01 Mar 2026 19:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:28 +0000
Files and hashes:         1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
                          2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
                          3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
                          4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
                          5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
                          6: Kmr3pHYGiQ8rF_aLCLdEEAuSJv8.roa (hash: c6JJRLSE54Sg8jCWe6ZQVWMUaGOPCZrrRi0owG58GPg=)
                          7: Pvn1sDVjILuUf8msJ5VZP479WF0.roa (hash: jZ6WQLkfwl/0u9y6sf/wa468+lQRBSAIQn7x5A7+mJI=)
                          8: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
                          9: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
                          10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: b2z/sCjlIUNhqGgrjyIJ7xNn2xXQAdMr3rhXSM9H5rk=)
                          11: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
                          12: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
                          13: mqe-2S01wCRmbYGtBayg02FrRsw.roa (hash: fOY9uvamxbATZPUQraK6vr94VAZu6K4zqsGp75pWFSk=)
                          14: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
                          15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
                          16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
                          17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c5:fe:0e:dc:55:d0:7a:f2:0b:db:32:c5:c5:e3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Mar  1 19:00:28 2026 GMT
            Not After : Mar  2 19:00:28 2026 GMT
        Subject: CN=018b71617807f4f0bf5a100fed6a8c79553597f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:8f:24:35:5e:d7:fc:ba:89:f4:93:3a:ef:
                    61:a1:54:0d:65:83:ab:f0:51:29:86:32:eb:93:96:
                    55:c1:52:fe:35:be:c3:33:33:a2:77:2a:1b:8e:26:
                    42:82:a7:0b:4e:be:a5:fd:fb:94:df:c1:61:e9:e0:
                    0d:f3:76:fd:31:83:4a:b7:f5:04:c2:6a:f9:0d:98:
                    8f:37:05:d5:76:4a:d2:be:e2:18:41:b6:f8:70:1a:
                    09:0b:7c:1d:1b:ff:91:8d:48:2e:ff:db:d1:03:53:
                    2b:fd:9e:aa:e6:0e:4a:71:7e:f0:8c:72:02:33:dd:
                    b5:e5:20:4e:07:0c:a7:e7:3c:61:65:e9:0a:e4:f9:
                    e0:4c:3c:e3:3e:e9:36:0f:32:3b:9a:ba:d0:66:83:
                    87:1e:5e:43:ff:84:79:ec:59:c9:a1:37:d3:29:d6:
                    66:bf:b8:c0:8d:5b:44:26:cf:54:6d:be:24:16:8e:
                    ae:ba:0b:e8:3d:d4:91:9b:b1:23:d8:ad:6e:be:c8:
                    40:62:83:92:00:89:a4:ac:eb:0c:1b:d3:8a:d7:ba:
                    11:07:c9:d1:17:af:15:6f:10:c7:17:c8:23:68:b9:
                    6b:f2:37:1a:db:a8:47:80:42:7c:c9:de:57:48:d2:
                    30:08:15:d7:16:15:4d:ef:1f:7a:48:12:2a:32:96:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:71:61:78:07:F4:F0:BF:5A:10:0F:ED:6A:8C:79:55:35:97:F8
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:7b:13:e6:06:83:d9:32:ab:75:c3:13:96:d2:ef:b0:04:
         bd:1f:25:87:05:f8:6c:41:39:8e:c8:8e:52:dc:3b:93:d6:13:
         e5:13:e4:bf:1f:d8:13:39:0d:c8:ab:38:57:af:2f:58:fc:d1:
         a3:e9:fc:7b:a5:bf:3f:bb:e1:7e:0d:df:5a:87:f6:fc:9f:74:
         0d:81:aa:21:a9:fd:3e:74:55:2c:d4:9c:f5:fa:0e:8d:52:bf:
         4b:ca:d4:e8:5e:17:eb:65:e4:b4:95:c3:35:07:d5:9e:bd:bc:
         a1:fb:17:78:22:32:28:de:59:86:a5:fe:1c:16:cd:fb:87:28:
         27:5b:58:b8:02:cd:6f:3b:7d:35:48:c4:f4:00:a5:0a:cd:7b:
         25:5d:af:be:5f:f0:c2:a2:09:ac:19:69:50:87:b6:09:34:10:
         c2:12:a5:e1:6d:03:fe:c8:53:00:6b:9d:8f:e7:89:74:1a:1b:
         0e:81:18:a1:54:e9:53:16:42:4d:95:10:0e:a5:2a:38:b3:ba:
         2f:48:26:e3:9e:f6:73:62:4a:7c:81:f4:e0:68:12:af:da:43:
         2d:79:a7:f3:24:f7:96:6e:d3:fe:cc:00:d2:26:11:3c:d4:ea:
         59:d1:8c:cf:83:1b:b7:08:f0:5b:31:d2:95:17:94:5c:b5:8c:
         d9:b1:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:16 2026 by rpki-client