Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File:                     bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier:          vO78ATK+l8/joyWc9WQ8FvRVPjcZUG440w1aXOyuOuU=
Subject key identifier:   11:C1:91:38:0E:90:76:40:78:C9:36:F7:88:FA:9F:F0:21:7B:6B:8C
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer:       /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial:       019F9F27DE5E9D177CD2667E9C6CCA53C512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number:          10AE
Signing time:             Sun 26 Jul 2026 16:00:17 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:17 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:17 +0000
Files and hashes:         1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: fKtYeBLlQ4cfgH9zHozUKRQ/rAKWG8z3q+siMtjyDZk=)
                          2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
                          3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:27:de:5e:9d:17:7c:d2:66:7e:9c:6c:ca:53:c5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
        Validity
            Not Before: Jul 26 16:00:17 2026 GMT
            Not After : Jul 27 16:00:17 2026 GMT
        Subject: CN=11c191380e90764078c936f788fa9ff0217b6b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:fa:42:c0:21:8f:5b:b1:c4:29:a2:6c:93:
                    a2:c6:a6:13:49:94:f3:07:dd:47:bd:d0:3f:54:4f:
                    16:ca:f7:cd:8e:bb:83:c3:8d:fa:d7:ed:cf:5e:74:
                    e5:9d:79:f7:13:3c:99:7a:34:46:3a:d4:34:eb:f6:
                    d3:99:25:7a:db:37:11:f4:07:15:8b:06:9c:af:de:
                    fe:69:d5:2d:aa:e7:b3:94:0b:ec:4b:2e:ee:d4:1b:
                    bd:f8:9c:c2:ea:7a:07:12:f3:97:86:fd:22:ef:07:
                    e6:3d:d3:07:07:2c:13:f9:b3:80:0d:f9:7d:45:81:
                    ac:99:dc:f1:e3:45:e9:c8:7d:ea:8e:bd:50:1a:1d:
                    3c:b7:2b:0b:a6:5f:13:01:a2:0a:5d:21:d2:4b:2a:
                    71:9c:6c:2c:a0:7f:f5:e8:71:5f:34:ac:5f:02:cc:
                    64:b6:54:58:60:71:0b:65:16:c5:76:00:7c:58:54:
                    4e:0b:2c:cc:aa:6c:b9:5a:41:e1:0f:93:5a:fc:3d:
                    81:bf:b4:40:aa:fa:8a:dc:dd:1d:5a:22:9d:df:76:
                    4b:14:86:4b:1e:79:e9:c4:5a:24:09:fc:a7:4f:04:
                    fc:77:62:00:13:ff:e7:e4:83:16:88:25:14:07:ba:
                    be:00:bc:43:65:fd:5e:03:b4:e3:41:2d:38:99:4d:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:91:38:0E:90:76:40:78:C9:36:F7:88:FA:9F:F0:21:7B:6B:8C
            X509v3 Authority Key Identifier:
                keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dc:8a:0b:24:99:a0:50:65:e5:f6:fd:c5:1f:21:6d:23:66:
         90:c9:5b:1a:f2:85:e1:df:bd:65:07:5a:47:10:3b:fc:37:8b:
         1c:21:97:57:22:c6:b2:8d:ea:34:81:7a:ff:25:8f:9e:df:9f:
         9e:3a:8a:f1:f3:b3:c2:eb:1c:48:b2:2e:7e:73:ee:e9:29:e8:
         63:e0:3f:cb:e2:69:cf:29:bb:e5:1a:31:9f:c3:ff:27:18:ee:
         a6:11:57:6c:9e:ab:6f:5c:72:75:4e:f8:26:51:70:89:af:ab:
         53:bf:13:a8:45:2c:d7:f4:af:2b:e0:fb:1c:81:ed:76:dd:65:
         e4:ed:2b:a2:87:f7:0d:66:25:e8:53:97:81:a5:11:23:d3:8f:
         1a:6c:ed:5f:f7:c5:a5:11:45:73:63:e8:78:47:08:36:21:57:
         5c:2e:65:40:3f:bf:89:e2:85:4b:35:4b:2d:88:a2:6f:ef:e9:
         71:9c:f9:b2:60:c7:e8:52:64:4b:0e:78:f1:4d:7e:e1:97:ac:
         76:e1:2b:21:e5:36:50:ad:70:7b:f3:fd:3e:d4:f9:cb:d0:cc:
         11:80:4e:9e:a2:c5:3e:a8:ab:85:c5:f9:47:f3:13:12:26:5c:
         26:ea:3d:36:a8:14:15:c2:00:24:66:e2:9f:56:a7:47:36:9a:
         09:5e:60:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fJ95enRd80mZ+nGzKU8USMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjVmZTA1NWZiN2VkMDQzZDEwOTMwNzA0NWMwYWJkZjQw
NGQwNWQwHhcNMjYwNzI2MTYwMDE3WhcNMjYwNzI3MTYwMDE3WjAzMTEwLwYDVQQD
EygxMWMxOTEzODBlOTA3NjQwNzhjOTM2Zjc4OGZhOWZmMDIxN2I2YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCH6QsAhj1uxxCmibJOixqYTSZTz
B91HvdA/VE8WyvfNjruDw4361+3PXnTlnXn3EzyZejRGOtQ06/bTmSV62zcR9AcV
iwacr97+adUtquezlAvsSy7u1Bu9+JzC6noHEvOXhv0i7wfmPdMHBywT+bOADfl9
RYGsmdzx40XpyH3qjr1QGh08tysLpl8TAaIKXSHSSypxnGwsoH/16HFfNKxfAsxk
tlRYYHELZRbFdgB8WFROCyzMqmy5WkHhD5Na/D2Bv7RAqvqK3N0dWiKd33ZLFIZL
HnnpxFokCfynTwT8d2IAE//n5IMWiCUUB7q+ALxDZf1eA7TjQS04mU0eowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHBkTgOkHZAeMk294j6n/Ahe2uMMB8GA1UdIwQY
MBaAFG1l/gVft+0EPRCTBwRcCr30BNBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAt
MWI3NDllOTgxMGI0LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mNjA3OTgtMzIwMi00ODRiLTg2NDAtMWI3NDllOTgxMGI0
LzEvYldYLUJWLTM3UVE5RUpNSEJGd0t2ZlFFMEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdyKCySZ
oFBl5fb9xR8hbSNmkMlbGvKF4d+9ZQdaRxA7/DeLHCGXVyLGso3qNIF6/yWPnt+f
njqK8fOzwuscSLIufnPu6SnoY+A/y+Jpzym75Roxn8P/JxjuphFXbJ6rb1xydU74
JlFwia+rU78TqEUs1/SvK+D7HIHtdt1l5O0roof3DWYl6FOXgaURI9OPGmztX/fF
pRFFc2PoeEcINiFXXC5lQD+/ieKFSzVLLYiib+/pcZz5smDH6FJkSw548U1+4Zes
duErIeU2UK1we/P9PtT5y9DMEYBOnqLFPqirhcX5R/MTEiZcJuo9NqgUFcIAJGbi
n1anRzaaCV5g8g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:10:42 2026 by rpki-client