Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File:                     W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier:          Nm99mNrMYur/AcpyzjSXL+N6xeNONHS+xs69Rn6RjPY=
Subject key identifier:   D9:4F:94:F1:32:1F:E1:F6:65:03:63:B8:E0:7D:7E:E5:47:87:DC:98
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       019FAB2CC76551CF1A3A13C25B6EDF9D5C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number:          1AEA
Signing time:             Wed 29 Jul 2026 00:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:05 +0000
Files and hashes:         1: 1-7frTVZStgUdMEk5TWpRTrsgY0o.roa (hash: +e6lh1zvCBWrwHGq3xH1hP8cfzW6lYCqHG0y2TSkaME=)
                          2: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
                          3: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
                          4: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
                          5: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
                          6: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
                          7: Pvn1sDVjILuUf8msJ5VZP479WF0.roa (hash: jZ6WQLkfwl/0u9y6sf/wa468+lQRBSAIQn7x5A7+mJI=)
                          8: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
                          9: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
                          10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: pn4oA25CTXrOG5OSmnL/cSMy8QRCFkwJghkJuYVBcJA=)
                          11: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
                          12: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
                          13: iahQbW1iBfEY46yiqbkn59Z1NKE.roa (hash: yJG/O2diEJVVBoUaMPlh2OydqeIUx1X535CinLs/Ess=)
                          14: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
                          15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
                          16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
                          17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:c7:65:51:cf:1a:3a:13:c2:5b:6e:df:9d:5c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Jul 29 00:01:05 2026 GMT
            Not After : Jul 30 00:01:05 2026 GMT
        Subject: CN=d94f94f1321fe1f6650363b8e07d7ee54787dc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:5f:7d:e2:62:91:df:d9:98:85:21:8c:fc:
                    c9:8e:c9:f1:9b:de:17:89:a7:8c:20:3e:d3:15:39:
                    0f:33:6d:b1:b4:1e:3f:43:27:77:91:79:7b:6f:48:
                    bc:71:03:65:a3:af:c5:20:ab:40:ee:3a:e1:a3:ab:
                    12:7d:ae:74:0a:02:5e:99:e1:34:4f:4b:45:bc:97:
                    df:f8:0a:cb:4c:47:e5:38:60:09:2e:d1:ea:3b:88:
                    a5:ad:17:a2:b3:66:e8:7b:93:d7:7e:b1:d5:dd:1d:
                    a0:34:34:98:22:2c:e9:db:85:63:19:71:bb:de:1e:
                    f6:15:96:81:9a:42:a1:07:16:37:75:59:57:00:8e:
                    43:5f:9c:25:e2:58:84:73:06:a4:fd:e5:42:90:9c:
                    6b:36:17:5b:f0:a2:c5:66:9a:8a:88:58:1c:a9:1f:
                    de:bf:bd:05:6f:54:ca:d9:44:ea:22:41:72:65:1f:
                    30:cc:5a:5d:a5:ca:27:3c:cd:db:37:3a:71:45:d1:
                    09:57:80:4c:bd:ca:a2:b4:df:8e:bb:68:ae:2f:06:
                    bf:c4:e7:68:b3:2d:ba:2e:51:36:93:30:0b:55:04:
                    a5:3c:d7:89:bb:31:0c:77:cc:e8:4f:a4:f0:95:9b:
                    55:d5:f6:eb:0b:8e:7f:e6:7e:54:35:5d:65:d4:2c:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:94:F1:32:1F:E1:F6:65:03:63:B8:E0:7D:7E:E5:47:87:DC:98
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:26:66:db:9d:30:08:aa:a9:72:90:c2:00:e4:0f:13:df:
         8f:7e:c3:a7:41:b5:27:77:ae:ae:4e:08:5d:f8:a0:8f:8d:2f:
         a0:50:42:fd:c3:1e:54:c7:24:d9:58:9d:18:b2:93:1d:e5:7d:
         79:96:f4:cf:b8:fa:46:1c:58:bd:ec:4a:79:8e:93:26:ed:f3:
         eb:66:0a:37:f7:83:be:24:5a:37:9e:bd:1d:82:c1:17:91:83:
         46:8e:dc:b1:dd:f7:74:11:0a:d5:52:ef:52:fc:b5:dd:85:c9:
         6c:4e:74:91:e6:6d:11:81:45:ec:7c:5d:14:92:78:40:57:1f:
         bd:da:e3:72:f8:0d:dd:e3:96:dc:26:b2:ee:bd:ae:2b:aa:f2:
         71:07:22:b2:e4:62:5f:e6:82:cb:19:4c:ce:f5:29:b7:37:bb:
         78:2f:cf:29:92:44:7b:31:d6:84:2d:93:fc:99:bc:7b:d2:b0:
         ee:49:1d:53:10:d7:6c:5c:e3:07:74:4e:3f:49:28:bc:ba:4e:
         2b:14:16:ae:23:e9:12:ea:1d:a6:6d:a5:b4:1f:87:96:0e:44:
         fe:c2:e5:bf:20:ee:0d:37:9a:1d:50:8e:4f:be:80:52:38:74:
         8b:bb:7f:02:db:5f:4a:c8:8f:18:8c:8b:2d:9e:73:d3:ce:33:
         f5:56:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:05 2026 by rpki-client