Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File:                     bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier:          XNX1F8h3OKpGxlb1a/OETLh6mjYfy1cblaci7+NZw40=
Subject key identifier:   E3:B3:42:3D:39:99:2F:64:AF:23:71:5E:43:08:87:28:B7:F2:4B:53
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer:       /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial:       019CE410B5A6435D0A6C8969DF5CECD4E125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number:          0F44
Signing time:             Thu 12 Mar 2026 22:00:25 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:25 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:25 +0000
Files and hashes:         1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: LImEg/SoNXOdTCuYmMQNhT6NAbrE7uDZAyWURR/GMpg=)
                          2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
                          3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:b5:a6:43:5d:0a:6c:89:69:df:5c:ec:d4:e1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
        Validity
            Not Before: Mar 12 22:00:25 2026 GMT
            Not After : Mar 13 22:00:25 2026 GMT
        Subject: CN=e3b3423d39992f64af23715e43088728b7f24b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:08:6a:75:3e:14:ab:5f:d5:19:0b:b2:80:
                    89:51:24:80:6c:e5:df:c2:c4:3b:d7:64:05:ec:e7:
                    1a:a5:e4:00:79:f6:03:36:a8:83:fa:e0:e9:d1:22:
                    24:7d:7f:d2:16:96:b5:9b:b1:28:4e:63:95:bd:c5:
                    fe:1e:73:eb:3e:a9:a1:12:31:4b:f5:28:04:ef:7f:
                    7f:6e:9d:4e:99:e5:93:0d:aa:1f:43:a7:52:94:9c:
                    16:75:6e:6c:8f:f1:e1:49:d7:85:00:2a:5c:0d:ab:
                    9c:c9:f2:2f:7a:0d:71:b5:cd:d1:53:aa:7c:7e:d0:
                    cd:a6:38:af:59:ca:d5:8c:94:e8:2d:31:43:6d:ee:
                    f3:b4:24:ee:6f:14:96:a9:71:25:70:05:2a:aa:7a:
                    24:51:a9:a9:13:28:1e:b1:95:45:ae:a3:d1:1d:42:
                    49:90:8d:dc:b6:fe:61:bb:54:da:b2:41:46:98:98:
                    4f:67:01:20:5d:d0:d6:14:b9:49:77:26:86:34:8f:
                    28:7c:38:82:2d:8b:bb:17:7d:69:bf:de:a9:ac:47:
                    de:1a:4e:72:fe:fa:d5:06:67:83:d0:4e:93:8e:15:
                    14:09:6f:69:c6:e8:23:d1:c7:0b:9a:21:f4:0e:05:
                    3c:6e:62:f2:72:b9:a2:b2:41:5f:87:64:1b:89:63:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:42:3D:39:99:2F:64:AF:23:71:5E:43:08:87:28:B7:F2:4B:53
            X509v3 Authority Key Identifier:
                keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:19:70:d0:a4:cd:ab:36:f8:6b:5a:bc:26:cb:c3:73:45:b3:
         5c:cf:c5:1d:a1:8f:c6:3a:2f:a6:92:d3:76:8d:66:dc:eb:f2:
         1f:51:d1:72:48:fa:ce:87:d2:27:1a:e3:86:4a:1a:b3:e6:6d:
         c0:f1:b4:da:a3:7b:f9:2a:10:25:84:64:5e:2a:24:4a:31:e6:
         6d:e7:36:35:c5:3a:da:ec:fd:9b:bd:68:4f:c4:fc:0e:e2:0e:
         a7:82:e1:62:db:67:0c:10:42:df:0f:b1:c8:78:67:c0:f5:26:
         dd:3c:d7:86:5f:19:18:47:df:f3:fe:18:b6:35:ff:aa:d8:a6:
         5b:e5:08:5d:1d:28:1b:54:6b:e0:f6:1d:15:f8:82:72:c0:ab:
         a1:2b:00:ef:08:6c:41:ae:3f:79:d4:7f:22:dd:e0:9d:fd:03:
         bc:2b:57:7d:68:65:0c:10:a1:07:f8:1b:7f:c9:44:0c:74:c9:
         35:b2:dd:cc:73:48:f1:69:e8:3d:ae:07:be:4d:6c:aa:80:d4:
         8a:e3:0a:33:fa:8b:a7:10:4e:89:ef:f2:81:a3:70:cf:3f:a0:
         99:e5:2f:d3:50:39:dc:e3:e4:ae:b6:88:10:6f:2b:fb:b5:b3:
         72:d6:77:68:55:56:6e:34:96:e6:30:46:20:28:99:7d:66:06:
         81:02:36:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkELWmQ10KbIlp31zs1OElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw
NGQwNWQwHhcNMjYwMzEyMjIwMDI1WhcNMjYwMzEzMjIwMDI1WjAzMTEwLwYDVQQD
EyhlM2IzNDIzZDM5OTkyZjY0YWYyMzcxNWU0MzA4ODcyOGI3ZjI0YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxIIanU+FKtf1RkLsoCJUSSAbOXf
wsQ712QF7OcapeQAefYDNqiD+uDp0SIkfX/SFpa1m7EoTmOVvcX+HnPrPqmhEjFL
9SgE739/bp1OmeWTDaofQ6dSlJwWdW5sj/HhSdeFACpcDaucyfIveg1xtc3RU6p8
ftDNpjivWcrVjJToLTFDbe7ztCTubxSWqXElcAUqqnokUampEygesZVFrqPRHUJJ
kI3ctv5hu1TaskFGmJhPZwEgXdDWFLlJdyaGNI8ofDiCLYu7F31pv96prEfeGk5y
/vrVBmeD0E6TjhUUCW9pxugj0ccLmiH0DgU8bmLycrmiskFfh2QbiWONaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOzQj05mS9kryNxXkMIhyi38ktTMB8GA1UdIwQY
MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt
MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0
LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURlw0KTN
qzb4a1q8JsvDc0WzXM/FHaGPxjovppLTdo1m3OvyH1HRckj6zofSJxrjhkoas+Zt
wPG02qN7+SoQJYRkXiokSjHmbec2NcU62uz9m71oT8T8DuIOp4LhYttnDBBC3w+x
yHhnwPUm3TzXhl8ZGEff8/4YtjX/qtimW+UIXR0oG1Rr4PYdFfiCcsCroSsA7whs
Qa4/edR/It3gnf0DvCtXfWhlDBChB/gbf8lEDHTJNbLdzHNI8WnoPa4Hvk1sqoDU
iuMKM/qLpxBOie/ygaNwzz+gmeUv01A53OPkrraIEG8r+7WzctZ3aFVWbjSW5jBG
ICiZfWYGgQI2Sw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:32 2026 by rpki-client