Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.mft
File:                     BW-2sCFSMAIpy3g9sYmAZapYGE4.mft (raw, json)
Hash identifier:          cuVrpFXCuxEqbWUUvlHCCrVzTwnzK4fvJnSp2bmazhg=
Subject key identifier:   C6:8E:48:E7:85:0F:4E:C7:D4:14:A2:69:60:44:FB:A0:2B:B8:51:7E
Authority key identifier: 05:6F:B6:B0:21:52:30:02:29:CB:78:3D:B1:89:80:65:AA:58:18:4E
Certificate issuer:       /CN=056fb6b02152300229cb783db1898065aa58184e
Certificate serial:       019F8343080501152C729A00804FEB4D086D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.mft
Manifest number:          51
Signing time:             Tue 21 Jul 2026 06:00:35 +0000
Manifest this update:     Tue 21 Jul 2026 06:00:35 +0000
Manifest next update:     Wed 22 Jul 2026 06:00:35 +0000
Files and hashes:         1: BW-2sCFSMAIpy3g9sYmAZapYGE4.crl (hash: Y7DoicTFKTlUDYtcg66X0ak4+PaUR1QMmQPR1uD2umk=)
                          2: S4d9N3eRCzG6cv-01zgVSYVRBnI.roa (hash: OqQ6fUh17AlaGXnzjvI96x9GHOXjooSQPkdslNxK5mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:43:08:05:01:15:2c:72:9a:00:80:4f:eb:4d:08:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056fb6b02152300229cb783db1898065aa58184e
        Validity
            Not Before: Jul 21 06:00:35 2026 GMT
            Not After : Jul 22 06:00:35 2026 GMT
        Subject: CN=c68e48e7850f4ec7d414a2696044fba02bb8517e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:cf:09:97:72:22:4d:b6:06:f1:e8:03:79:
                    c3:97:e4:fb:6a:98:8f:fa:83:f9:96:ca:ce:b9:d1:
                    a9:e8:29:2e:54:ba:4e:03:46:92:7f:3b:2d:42:a2:
                    00:78:17:12:b2:cc:83:57:08:49:08:68:81:3f:1e:
                    81:50:50:c3:17:00:e8:46:80:e5:a1:f0:d6:d2:95:
                    db:41:db:ca:55:d3:9d:79:2e:72:ea:36:05:95:5d:
                    65:cf:1c:6e:f8:28:7f:7a:e8:98:9c:bf:2e:9a:40:
                    90:f9:0a:3d:d9:f3:5c:87:74:01:b4:39:06:78:2c:
                    a6:6e:da:f1:ff:f0:58:04:8c:da:68:57:fd:34:e1:
                    73:e8:96:49:a8:df:f0:c8:cf:ef:6f:bb:64:59:94:
                    46:06:8f:b1:9d:00:fd:89:ce:d0:86:ba:ce:c8:81:
                    c0:6c:09:93:38:f2:99:f9:15:8f:cd:ae:e5:59:ea:
                    94:40:87:61:64:5d:7d:2a:f7:23:20:b6:a1:60:09:
                    99:7e:b3:7c:02:5e:dd:d3:be:f2:d4:ae:76:9a:29:
                    80:72:a1:4e:97:9e:ac:db:4c:0c:d3:e0:9d:46:44:
                    eb:d0:68:d5:5c:45:8a:69:5e:33:ec:36:78:a7:b5:
                    d3:48:c7:2c:a4:29:77:29:b4:81:fb:76:ae:6d:1d:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:48:E7:85:0F:4E:C7:D4:14:A2:69:60:44:FB:A0:2B:B8:51:7E
            X509v3 Authority Key Identifier:
                keyid:05:6F:B6:B0:21:52:30:02:29:CB:78:3D:B1:89:80:65:AA:58:18:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:a3:26:2e:51:21:0a:e0:c3:c3:fc:f3:42:43:bb:83:13:
         a7:79:a5:38:67:56:3e:f6:af:5e:6c:f8:12:78:79:7f:56:b0:
         e8:16:ec:df:a3:06:32:f7:6e:31:4c:5a:3c:72:88:f0:db:f3:
         ca:1d:ac:4a:b9:63:35:44:f7:de:0c:c0:c6:69:f6:b0:45:e5:
         fd:9f:74:57:d3:09:b3:41:3a:b6:13:dd:e6:a9:62:b2:ee:02:
         43:1a:11:d7:54:8f:d0:92:70:2d:85:88:7a:8b:21:b9:ec:f3:
         5c:50:f1:bd:ed:b4:43:a0:3e:6f:9c:ce:6f:25:02:3c:9b:80:
         2e:ae:e5:ec:37:e8:18:ed:a2:5a:a3:34:9e:91:41:fd:7b:7f:
         80:2a:77:83:34:ae:5a:7c:50:c1:f8:c1:8c:70:64:c4:8f:06:
         fa:ce:74:d8:ae:15:3e:10:6d:07:f5:c4:91:02:44:71:89:b2:
         59:12:79:32:7d:fc:fa:d5:12:88:a2:63:b8:05:26:b0:23:d7:
         40:83:1c:6b:9e:72:c2:25:b7:c1:83:46:61:77:be:8e:d9:c4:
         3c:4d:e0:f3:50:12:cd:97:7c:88:b6:3a:fb:ce:38:9c:c5:40:
         73:78:fd:fc:71:a9:c0:b3:fa:e8:19:a1:a3:2b:f0:26:14:4a:
         0d:0f:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:20 2026 by rpki-client