Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File:                     W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier:          9LLMBD6tqo2Tob5Ym8poMPgpyMZjEuBEcyZu5kg+x58=
Subject key identifier:   F9:D8:5D:97:86:90:BC:B7:39:34:81:EB:43:BE:8C:D3:6A:86:FA:6B
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       019D9850B6DE034C1967854E0AB4C956F6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number:          19C9
Signing time:             Thu 16 Apr 2026 22:01:59 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:59 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:59 +0000
Files and hashes:         1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
                          2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
                          3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
                          4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
                          5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
                          6: Kmr3pHYGiQ8rF_aLCLdEEAuSJv8.roa (hash: c6JJRLSE54Sg8jCWe6ZQVWMUaGOPCZrrRi0owG58GPg=)
                          7: Pvn1sDVjILuUf8msJ5VZP479WF0.roa (hash: jZ6WQLkfwl/0u9y6sf/wa468+lQRBSAIQn7x5A7+mJI=)
                          8: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
                          9: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
                          10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: pHtHe14lrU8Ya95MGnZlbTSyzD82aIPtTH34cYbK9ZU=)
                          11: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
                          12: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
                          13: mqe-2S01wCRmbYGtBayg02FrRsw.roa (hash: fOY9uvamxbATZPUQraK6vr94VAZu6K4zqsGp75pWFSk=)
                          14: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
                          15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
                          16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
                          17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:b6:de:03:4c:19:67:85:4e:0a:b4:c9:56:f6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Apr 16 22:01:59 2026 GMT
            Not After : Apr 17 22:01:59 2026 GMT
        Subject: CN=f9d85d978690bcb7393481eb43be8cd36a86fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:d7:cd:49:8c:5c:ca:62:65:f4:8a:1b:69:
                    17:d6:1b:31:2f:71:50:64:c7:88:8a:43:78:fa:8e:
                    7a:24:09:cd:b7:73:45:57:dc:87:01:4e:0c:81:4e:
                    9c:e9:85:99:3e:bd:fa:bf:42:a8:08:33:84:4d:7c:
                    fe:56:e7:0c:8e:4c:8f:a3:42:0c:29:49:83:88:52:
                    88:ab:81:af:bd:f8:2f:ef:09:5f:56:1f:c7:7a:5d:
                    e2:26:96:bd:f8:67:28:fb:0f:c2:70:ef:ff:12:47:
                    c0:01:85:8d:7b:8a:cf:d4:20:df:37:4c:da:d8:c0:
                    74:2f:71:7d:d2:77:80:f8:4d:f9:84:6d:e5:e8:76:
                    eb:c2:94:d7:e7:5d:66:f2:df:fe:3b:d0:48:92:c7:
                    21:f1:fa:70:81:53:29:fd:fe:d9:84:55:74:06:3d:
                    81:76:25:22:2c:53:a2:aa:f1:0f:ee:b9:84:86:b9:
                    eb:0d:4d:74:72:1f:5a:e3:77:c1:e8:80:f4:40:3b:
                    07:e1:f5:d9:8d:ed:e8:bb:e7:8a:ed:9b:20:02:88:
                    7e:ed:4c:de:24:bf:05:01:3f:47:94:db:00:61:6b:
                    75:bd:d7:11:38:d2:a1:39:c8:ab:bb:51:b4:cc:4a:
                    4d:9d:66:40:f1:a3:77:d5:d9:da:2b:e1:4b:12:55:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:5D:97:86:90:BC:B7:39:34:81:EB:43:BE:8C:D3:6A:86:FA:6B
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:26:a9:5d:6a:c4:2d:6f:0e:23:d4:05:86:7d:60:b9:70:
         0c:dd:c0:0f:05:a5:28:1d:c6:47:77:9f:4a:89:c3:83:6d:ea:
         01:2e:2b:63:dc:dc:22:d8:21:79:7f:8e:45:ba:fe:5a:84:11:
         42:90:ab:e6:49:12:ca:4f:65:b7:61:76:91:88:fa:ec:54:b1:
         61:f8:08:ed:9e:73:51:c3:48:41:a6:8a:1f:ab:fc:f2:f3:48:
         a2:87:81:fc:76:d1:d2:ab:18:a8:df:6d:a7:54:13:55:c4:1d:
         e0:c3:ca:bf:0e:d8:c6:83:f5:4d:99:78:71:c8:1e:84:cb:b1:
         9c:b0:6c:16:56:9a:0a:00:98:c4:50:8e:2d:8c:95:e6:6c:76:
         35:8e:2a:74:a7:b8:19:d5:2a:06:bc:70:70:3b:3b:54:e0:9f:
         b3:bd:e3:73:b5:9c:1b:38:29:bf:7d:3d:07:9e:e5:a4:ff:97:
         18:2a:f6:2d:f0:3e:bb:39:b1:3a:ba:a4:08:7c:63:56:1d:89:
         9d:64:bd:f1:9b:54:bc:88:a7:58:18:8a:9f:8b:9d:77:84:fa:
         64:d4:fd:e1:95:7b:e5:26:da:f6:66:42:cf:bc:c4:3f:76:18:
         dc:42:39:d9:96:e8:53:34:cd:73:57:71:9d:10:26:f7:16:47:
         d6:c0:4c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YULbeA0wZZ4VOCrTJVvauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYwNDE2MjIwMTU5WhcNMjYwNDE3MjIwMTU5WjAzMTEwLwYDVQQD
EyhmOWQ4NWQ5Nzg2OTBiY2I3MzkzNDgxZWI0M2JlOGNkMzZhODZmYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d/XzUmMXMpiZfSKG2kX1hsxL3FQ
ZMeIikN4+o56JAnNt3NFV9yHAU4MgU6c6YWZPr36v0KoCDOETXz+VucMjkyPo0IM
KUmDiFKIq4Gvvfgv7wlfVh/Hel3iJpa9+Gco+w/CcO//EkfAAYWNe4rP1CDfN0za
2MB0L3F90neA+E35hG3l6HbrwpTX511m8t/+O9BIksch8fpwgVMp/f7ZhFV0Bj2B
diUiLFOiqvEP7rmEhrnrDU10ch9a43fB6ID0QDsH4fXZje3ou+eK7ZsgAoh+7Uze
JL8FAT9HlNsAYWt1vdcRONKhOciru1G0zEpNnWZA8aN31dnaK+FLElWoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnYXZeGkLy3OTSB60O+jNNqhvprMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ4mqV1q
xC1vDiPUBYZ9YLlwDN3ADwWlKB3GR3efSonDg23qAS4rY9zcItgheX+ORbr+WoQR
QpCr5kkSyk9lt2F2kYj67FSxYfgI7Z5zUcNIQaaKH6v88vNIooeB/HbR0qsYqN9t
p1QTVcQd4MPKvw7YxoP1TZl4ccgehMuxnLBsFlaaCgCYxFCOLYyV5mx2NY4qdKe4
GdUqBrxwcDs7VOCfs73jc7WcGzgpv309B57lpP+XGCr2LfA+uzmxOrqkCHxjVh2J
nWS98ZtUvIinWBiKn4udd4T6ZNT94ZV75Sba9mZCz7zEP3YY3EI52ZboUzTNc1dx
nRAm9xZH1sBMow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:46 2026 by rpki-client