Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File:                     BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier:          Nj4c613V1BRZ4JQY+7hE+8Lr/tmfqp6vjSICNUzRKUA=
Subject key identifier:   F7:39:33:B0:CD:87:1F:C6:25:50:DC:08:9B:1D:85:39:B0:DD:1F:05
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       01A140B9E52E1C117B7A13CFAC9EA144C335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number:          0F35
Signing time:             Thu 15 Oct 2026 18:01:27 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:27 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:27 +0000
Files and hashes:         1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: wWsxIc1WGumIcZ9+NGfM8OLR0WvOJKpoZU2+plpoXiM=)
                          2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:e5:2e:1c:11:7b:7a:13:cf:ac:9e:a1:44:c3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: Oct 15 18:01:27 2026 GMT
            Not After : Oct 16 18:01:27 2026 GMT
        Subject: CN=f73933b0cd871fc62550dc089b1d8539b0dd1f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:2f:3b:db:31:fa:e2:03:a2:4a:5b:f8:17:
                    2c:e4:54:7b:55:05:8d:dd:b3:b1:a1:ca:30:a8:c3:
                    b5:3c:bc:1e:64:cb:a2:c7:dd:0f:99:e4:d9:10:f9:
                    67:2a:4d:75:43:a8:a8:84:42:fb:9a:dd:ab:bb:91:
                    33:6f:e4:4b:13:cf:30:88:08:af:a5:40:f7:ac:71:
                    e9:14:dd:7a:6e:2d:44:37:b5:55:8f:4a:86:03:e1:
                    ce:fb:61:3a:ed:c2:4a:ad:08:25:b6:ba:5f:57:49:
                    7d:5f:7a:aa:aa:e3:bb:9d:c6:9f:76:b9:25:4d:d9:
                    69:7c:e8:44:87:28:22:63:67:8a:bf:28:48:0f:5d:
                    54:93:b5:61:ce:dd:2f:93:73:f9:66:e5:bc:b5:ff:
                    5b:d3:71:65:bb:63:80:07:a2:34:f4:d0:52:69:bc:
                    b9:d2:12:e7:f4:5a:ef:00:4c:5f:09:85:47:6c:e9:
                    51:a0:56:5d:10:dc:81:a1:61:04:9b:ee:75:33:df:
                    47:0f:5b:76:4e:cc:e9:18:93:41:ff:f2:6a:4c:81:
                    a1:8f:3a:1e:ca:60:32:83:71:5f:43:c2:a8:dd:19:
                    e3:51:69:b6:29:c5:f4:c2:d0:19:0e:c8:28:ab:8b:
                    6f:1f:01:40:65:11:3c:dc:f5:56:36:75:96:37:e3:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:33:B0:CD:87:1F:C6:25:50:DC:08:9B:1D:85:39:B0:DD:1F:05
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4c:c1:fa:8d:6a:81:df:5a:24:a4:a2:8c:3e:c3:33:ee:5e:
         8f:e1:96:b6:b5:d1:ac:66:97:4a:70:d6:4c:ed:6d:60:31:49:
         76:4f:cc:28:bf:3b:74:60:57:c0:12:e2:25:e2:6b:64:c7:f4:
         9b:e0:92:06:8c:57:e5:db:a2:08:97:5c:e0:9d:72:5a:75:76:
         e7:96:fd:b0:ee:7e:6d:6e:a4:f8:28:8e:47:8d:e6:10:c3:6a:
         4b:74:ca:a4:40:21:6e:6d:67:1e:31:4d:05:a4:a6:16:39:72:
         a8:28:46:f3:d9:2d:f7:a4:35:6a:3a:28:b2:88:87:3b:e2:ba:
         a3:8c:b8:fc:00:9c:69:23:5e:e1:a8:fc:84:ed:fd:5a:ec:80:
         0c:7a:8e:90:4c:1f:af:05:77:c3:17:60:cb:4c:e5:9d:1e:d5:
         e8:7d:76:99:0e:24:43:a0:e0:c5:97:8b:87:23:2e:36:ba:a0:
         48:80:17:3f:df:70:4b:eb:97:cd:4c:2f:4c:95:d2:56:bb:e8:
         5f:22:d0:70:73:97:cf:5b:ed:5c:82:81:95:eb:af:6b:0c:0b:
         57:7b:3c:02:99:90:d0:aa:48:7e:e0:6f:b2:7f:56:6a:cd:0d:
         b1:ff:b6:a1:16:e5:61:ce:62:5d:5b:44:1a:67:65:df:37:fa:
         48:e6:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:44 2026 by rpki-client