Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File:                     BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier:          bCEAkrwS/tjtxZvGV1muFeZSAPZBxUNJi1RXMJ5PWcc=
Subject key identifier:   A3:DA:94:1A:65:B7:15:99:B7:79:71:E7:C5:23:1B:3D:A0:B4:6A:2D
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer:       /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial:       019EB7337D7A2069954F94075999C5F780B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 15:01:05 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:05 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:05 +0000
Files and hashes:         1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: 7ooYGY7QDRa3Aqo51DSJ4HOu2NrY/KqFe5YTDIfuCME=)
                          2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:7d:7a:20:69:95:4f:94:07:59:99:c5:f7:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
        Validity
            Not Before: Jun 11 15:01:05 2026 GMT
            Not After : Jun 12 15:01:05 2026 GMT
        Subject: CN=a3da941a65b71599b77971e7c5231b3da0b46a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:a5:c5:37:b8:00:05:97:db:c2:f7:a8:36:
                    fe:70:b2:60:c6:20:0b:96:d8:6e:dc:d8:c6:a2:13:
                    0d:50:fc:94:ea:40:7b:34:cd:39:87:b9:59:59:53:
                    b8:fb:55:41:bd:97:d4:37:af:51:8f:91:6f:fd:06:
                    cd:1e:dc:3a:d1:a2:22:9a:a8:46:4b:1e:23:a2:fe:
                    fb:e8:c9:f3:d4:94:0a:b4:64:d7:06:a1:88:a4:6a:
                    3e:8a:02:25:6c:75:2c:9f:c7:e6:84:e2:50:30:91:
                    51:54:a4:a5:ff:fa:d7:e7:e2:b9:50:a8:64:a1:9b:
                    da:dc:53:4c:2f:9c:27:bc:cc:0d:5d:33:34:9c:3f:
                    ea:d9:68:7e:3f:03:5a:b8:72:df:eb:14:0b:27:10:
                    15:6a:69:13:1a:22:70:fc:94:89:6b:95:b9:a3:33:
                    bb:a3:1f:42:4e:08:6e:4d:bf:05:af:95:6f:e6:02:
                    67:71:c5:d8:46:1e:ac:60:72:9d:06:0a:aa:67:4e:
                    15:eb:e6:f0:a4:65:22:7c:ae:b0:10:37:c5:04:3f:
                    ba:c3:14:37:66:99:98:5b:f6:64:1e:08:08:41:54:
                    b6:e3:b3:a0:c0:97:c6:a4:4c:04:1e:e5:e2:e8:d1:
                    42:36:16:b8:70:85:1a:5b:c9:37:02:84:94:b6:49:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DA:94:1A:65:B7:15:99:B7:79:71:E7:C5:23:1B:3D:A0:B4:6A:2D
            X509v3 Authority Key Identifier:
                keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:b8:ed:9d:91:41:0b:2a:4c:cc:67:f7:7b:97:6b:59:8d:
         fc:1e:ee:ed:fb:66:d3:92:fc:ef:d1:b4:79:ee:fd:0d:71:f2:
         66:80:9e:b1:08:82:a5:ec:60:ac:6b:b1:83:0b:27:6c:08:3c:
         d9:83:51:81:63:b8:b1:21:6b:da:1f:58:7d:d5:fe:ce:59:68:
         14:8e:46:87:39:71:48:3c:6e:67:cc:18:ea:dc:f3:e1:d7:9a:
         b9:f9:16:e6:45:21:1d:7a:82:8b:8c:95:4e:7c:d5:6d:d8:98:
         0f:b2:c3:43:94:2d:7d:0c:da:2b:7c:68:09:51:39:dc:14:8c:
         3d:c6:40:f6:81:b7:07:be:7f:24:e0:4f:f6:72:45:71:69:3d:
         cc:0f:7e:22:8f:48:f9:45:e6:e9:35:e7:02:91:2a:78:0b:3e:
         46:f5:1f:8f:be:ff:ee:ba:e0:f0:2c:45:1e:e5:ec:87:36:19:
         2a:e6:14:1e:e8:88:9c:83:dd:c6:70:03:ed:e3:92:93:fb:d2:
         43:7e:81:7c:80:40:ba:00:a7:1c:54:bf:21:94:ee:aa:8a:21:
         10:eb:48:76:a8:f3:ed:b6:ee:36:86:fb:46:c6:35:cc:27:61:
         a1:77:b9:bd:e0:07:aa:07:e0:c4:85:a2:8e:c9:24:aa:83:e8:
         90:aa:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:12 2026 by rpki-client