Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          fvlFJMB4+xmD66xCsrJT9VlHxDvBCgG+Mti6BvKD1ng=
Subject key identifier:   AF:AE:FE:E9:26:37:5F:8B:B5:A5:75:BA:83:B3:25:04:E4:6E:88:B8
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       019F1943041207179524EFCC29861D5B46E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0C47
Signing time:             Tue 30 Jun 2026 16:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:50 +0000
Files and hashes:         1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: 2t2vTpIumjz0XG7U6qY1F/Ley+/0191SzbkKUWTK2K8=)
                          2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:04:12:07:17:95:24:ef:cc:29:86:1d:5b:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Jun 30 16:00:50 2026 GMT
            Not After : Jul  1 16:00:50 2026 GMT
        Subject: CN=afaefee926375f8bb5a575ba83b32504e46e88b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:84:29:02:8d:0f:c1:45:46:83:0a:23:64:
                    54:a2:87:09:2b:11:8c:0f:86:83:95:8c:26:05:9c:
                    7c:b0:a2:d1:b6:dd:8a:45:ff:ad:81:97:f0:e6:a9:
                    98:3f:0e:05:56:8d:cc:15:49:64:5a:f2:51:45:42:
                    f5:cb:c3:53:05:22:b7:4c:40:dd:72:6f:15:b6:e2:
                    c6:a3:cf:c9:f3:0a:5b:31:41:d6:37:9c:05:36:3a:
                    b7:e1:6e:f0:8a:fe:af:b4:7b:19:83:65:21:3c:4f:
                    a4:98:9d:42:63:09:4c:63:48:ba:87:7d:22:30:88:
                    f2:a7:9d:36:66:03:e2:3d:8e:71:81:05:8e:13:61:
                    e2:6f:5d:0b:ae:84:0d:57:af:f4:d5:eb:e6:f6:3d:
                    b8:b8:ab:0f:c5:d7:22:48:ad:59:3c:f8:ca:8f:27:
                    9b:c9:9a:d5:2c:ea:48:f1:a1:fd:6c:7e:e3:e0:5d:
                    f8:cb:15:06:6d:60:f1:fe:42:ec:ec:c0:cf:a9:a4:
                    1b:a4:d6:25:c0:f9:58:31:d1:5c:91:62:d8:f0:84:
                    1e:82:be:03:8f:0b:95:5f:df:ee:49:99:fe:f3:56:
                    1b:41:a9:0a:2d:5e:d0:16:ed:b7:c1:79:ed:ee:b2:
                    26:a3:04:6e:fc:98:90:88:5d:21:4b:b7:0d:67:8f:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:FE:E9:26:37:5F:8B:B5:A5:75:BA:83:B3:25:04:E4:6E:88:B8
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:ea:5e:a6:c6:a2:c7:79:cd:17:2f:af:7a:1b:14:8a:cb:
         fa:5d:d9:50:38:4e:b7:7c:38:1a:03:88:c0:c0:fb:ac:01:b4:
         a5:95:ae:e4:c8:ea:67:e0:34:e0:a1:1e:9d:e4:ef:3b:bb:a9:
         cf:47:23:39:7b:05:5e:e4:5a:fa:52:23:43:d5:d0:8d:46:25:
         39:1b:09:3e:72:24:e8:2f:83:69:eb:c2:6d:25:3a:18:ca:8b:
         5e:2a:e4:cf:9e:b1:c0:92:11:e2:82:a0:81:df:11:6e:12:58:
         82:45:9e:c4:4a:d5:ca:f5:62:e8:32:de:2a:7e:4d:14:ae:5d:
         a3:07:b6:f8:2c:e6:a3:20:94:b3:de:f9:67:5d:25:b2:2c:c2:
         2d:41:dd:de:34:5c:65:13:7c:e4:95:4c:11:91:12:b9:81:7d:
         7a:e0:c0:92:0e:28:9a:03:06:5b:06:b0:25:5a:24:c5:03:42:
         9a:8f:6a:fb:4f:91:7e:f9:75:ec:f5:70:06:06:e0:6b:55:ea:
         ae:a5:96:dc:0a:9c:1a:94:11:f9:45:6a:c6:38:17:8b:88:61:
         ea:27:3c:fb:e8:e7:26:34:3c:8c:80:40:e7:35:04:0f:28:6f:
         28:e2:a4:bd:5a:4c:34:2b:c8:ca:f5:d8:39:43:7b:d7:be:0e:
         52:e9:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:46 2026 by rpki-client