Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File:                     W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier:          hnzXGYBeDzbGs6F7sNedtYPcN0Lz7UVRqvSn2fx4rQs=
Subject key identifier:   1D:52:E0:F5:F8:AE:BD:4F:B9:58:00:E2:BE:9D:61:06:D6:A1:80:EF
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       01A0D26E6EB4F32F289ED70560DF34B1F929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number:          1B88
Signing time:             Thu 24 Sep 2026 08:00:47 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:47 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:47 +0000
Files and hashes:         1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=)
                          2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=)
                          3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=)
                          4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=)
                          5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=)
                          6: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=)
                          7: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=)
                          8: Uzf4m6ysD6fics4liKliLa4lQgw.roa (hash: jrKKMJ7RRR+vR7ypBXAaBFSStsbNbLrn03HRtgN2PLU=)
                          9: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: 3Xsm4yizPsSS5eryc7fakpXW1go7DAR7VFJIpGpNqp0=)
                          10: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=)
                          11: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=)
                          12: iahQbW1iBfEY46yiqbkn59Z1NKE.roa (hash: yJG/O2diEJVVBoUaMPlh2OydqeIUx1X535CinLs/Ess=)
                          13: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=)
                          14: pa0maz8RzdAqPBYglEiUl6FWmh0.roa (hash: bOE0FSBYTEFSINx3pLoAdJvRYXXPgXPd0w77jq5s09o=)
                          15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=)
                          16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=)
                          17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:6e:b4:f3:2f:28:9e:d7:05:60:df:34:b1:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Sep 24 08:00:47 2026 GMT
            Not After : Sep 25 08:00:47 2026 GMT
        Subject: CN=1d52e0f5f8aebd4fb95800e2be9d6106d6a180ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0b:e2:c1:f5:5b:e3:d6:18:5b:7c:92:50:1a:
                    b0:bf:3d:bd:ce:e7:bf:ed:80:d5:dd:df:df:3e:01:
                    5c:13:c4:33:1d:48:27:56:98:42:7b:b6:f6:35:e1:
                    21:01:72:23:7d:3b:d6:8f:d2:eb:e3:8c:83:a0:93:
                    1d:31:2a:f2:a8:fa:74:c6:f0:ad:1a:10:09:6a:5a:
                    0d:3e:18:ab:f5:89:cb:c6:26:6a:ff:43:b9:91:db:
                    2b:cc:5b:10:d6:bc:a9:38:ec:e9:45:5f:78:7c:9a:
                    46:55:00:d3:d3:46:a0:6b:8e:66:7b:04:ea:2a:5e:
                    07:72:50:dd:d8:e3:4d:af:a1:71:1e:36:ac:c6:ba:
                    ab:32:76:99:07:04:ef:25:db:d8:31:a9:2f:2f:87:
                    8f:ae:e0:17:ca:a6:3a:f5:a7:e6:7f:52:6d:e0:83:
                    ed:55:1f:cd:ee:a2:bb:05:a5:10:1d:2b:a9:47:44:
                    a0:67:27:29:35:5f:48:78:87:b2:93:59:27:cb:da:
                    c0:d6:88:20:f2:14:a9:48:e6:fa:1a:57:02:72:3d:
                    cd:6a:5a:c5:1d:3d:9b:83:9b:8d:e6:52:69:c0:8a:
                    c9:c5:60:ad:db:15:67:2c:05:15:b8:51:d9:ce:e0:
                    0a:39:06:4f:4a:91:df:33:21:4e:d9:d2:cd:b7:9c:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:52:E0:F5:F8:AE:BD:4F:B9:58:00:E2:BE:9D:61:06:D6:A1:80:EF
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:dc:8d:62:1a:a6:12:86:46:a7:9d:98:ea:df:e8:53:e1:
         a9:9d:54:74:99:9c:ac:3b:42:33:cb:75:e4:29:f6:d6:7a:de:
         3c:de:37:a3:8e:64:b1:5f:67:2a:a9:f3:bb:6f:68:83:e0:34:
         56:1f:22:5f:b5:0b:57:96:de:e5:5b:9b:89:a9:a9:a8:35:44:
         43:ba:ce:2a:1c:a9:ba:25:f9:6e:bd:49:3e:53:53:8b:4b:13:
         24:35:64:11:a5:b2:0c:47:9a:38:65:2d:62:02:f5:e0:7f:17:
         b0:8d:e0:dc:78:9b:50:d4:64:66:ae:7e:5d:80:fd:de:30:11:
         a2:7c:a9:07:3f:37:90:25:8b:66:1b:ac:16:0f:29:ce:1e:b1:
         a5:b5:cb:6a:9d:9b:1a:e4:af:f2:23:5d:a0:fc:4e:c5:41:39:
         35:0d:4c:b4:2b:60:a9:28:87:41:18:d9:7b:81:8e:a5:c4:85:
         65:89:84:f1:92:9c:9a:63:99:a2:63:e0:42:df:3d:17:e7:de:
         32:ef:4a:f8:46:fc:e0:14:c0:56:f6:38:01:7a:1d:15:c4:bf:
         f2:df:2c:75:09:e9:15:4e:8f:84:5f:40:00:13:1b:3c:e5:d9:
         48:dd:41:27:96:90:fa:01:45:54:02:29:66:e0:8b:ac:d8:5b:
         12:bd:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:48:01 2026 by rpki-client