Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File:                     bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier:          vW1TzhDb8Try1as2+MqT9jvA5JzdotL4Qf4fC/3p7TQ=
Subject key identifier:   2A:56:9C:58:33:8E:B6:D6:49:8E:F1:35:F2:F3:1A:5B:7C:8F:EC:4E
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer:       /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial:       019FFA240F0D92F7FA9A2CB83925F47D43BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number:          0D5B
Signing time:             Thu 13 Aug 2026 08:01:34 +0000
Manifest this update:     Thu 13 Aug 2026 08:01:34 +0000
Manifest next update:     Fri 14 Aug 2026 08:01:34 +0000
Files and hashes:         1: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
                          2: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
                          3: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
                          4: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: VAdmt9AfEgKnF+2VjnyO0SN0Ox5kPuBsxAleRmgT/Xs=)
                          5: mUzfsxNnbwnbzrFO6bbwJeRdqc8.roa (hash: WPhw5sZ8yc7m47awa7yiemQPPC2O/BN9I1sjAnPg0uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 08:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:24:0f:0d:92:f7:fa:9a:2c:b8:39:25:f4:7d:43:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
        Validity
            Not Before: Aug 13 08:01:34 2026 GMT
            Not After : Aug 14 08:01:34 2026 GMT
        Subject: CN=2a569c58338eb6d6498ef135f2f31a5b7c8fec4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:04:01:80:cd:27:50:3d:8d:3f:47:ba:83:
                    ef:95:6a:97:d8:f6:ce:4f:11:7c:0b:8d:d7:17:f2:
                    41:20:0d:4d:cb:1d:a7:2e:ba:81:40:4b:85:70:1e:
                    b7:24:1e:b4:99:20:7e:47:50:10:19:c9:32:df:84:
                    88:d4:aa:33:f3:d5:f5:e1:ce:f4:86:f1:fb:1c:20:
                    c9:04:a1:5f:c6:00:46:28:47:e3:bb:a0:d8:c6:33:
                    a4:f3:f3:46:e0:35:f5:5c:4e:bd:e9:25:6b:81:42:
                    49:f7:2c:17:45:d1:b0:62:3c:b6:32:e5:94:bc:e3:
                    d3:30:56:b5:1e:e2:41:84:bd:55:9c:24:6d:9d:18:
                    73:6b:39:3d:36:88:a0:59:92:e9:63:ec:b5:d5:a5:
                    73:27:b9:ae:44:2d:16:ff:06:ad:ad:13:7a:0a:c4:
                    cd:e2:09:e9:48:6a:15:af:49:21:c8:d0:df:df:29:
                    77:40:8e:9b:31:a4:13:a2:8c:58:34:5f:44:5b:61:
                    01:dc:ab:73:a7:cb:05:63:eb:11:e5:b7:50:7d:86:
                    37:40:a7:b8:55:b0:2e:73:5c:9c:e5:db:c7:e1:f1:
                    3d:d1:ef:4c:7e:1f:ef:cc:84:af:2e:6b:82:27:55:
                    39:78:55:d6:01:b9:ac:d1:16:e0:4e:89:70:bd:ab:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:9C:58:33:8E:B6:D6:49:8E:F1:35:F2:F3:1A:5B:7C:8F:EC:4E
            X509v3 Authority Key Identifier:
                keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:2d:0c:b9:68:70:eb:50:8b:2b:95:9a:0e:91:b4:07:c5:
         48:cc:e9:7d:53:81:0f:ee:8f:88:ae:30:08:82:db:b6:78:a0:
         6c:ec:66:72:85:f2:e2:73:3b:cb:53:55:ee:b0:24:75:99:cb:
         06:4c:7e:d3:e2:db:b6:da:93:19:8d:63:64:1b:8d:b7:b7:eb:
         ba:45:35:57:3e:eb:21:81:2c:86:7f:17:f0:2a:5a:47:7d:61:
         d9:db:c2:cd:d9:75:1c:fa:f6:aa:9b:60:ba:f2:ce:c7:b7:fc:
         fb:29:71:3a:76:83:95:4d:f6:bb:2f:bc:31:5f:5c:96:53:8f:
         ed:e3:e0:06:f3:c1:fe:8d:e8:36:83:b2:48:ba:a0:5f:f8:9d:
         4c:c9:52:7f:6f:fe:c9:d8:64:bc:f9:a4:8a:6e:78:02:c2:ad:
         05:31:01:27:8c:16:23:05:58:de:c5:a9:46:1e:f4:c7:97:67:
         b6:b9:e2:08:e3:a4:13:cf:92:ed:c8:7c:b6:d9:ff:fe:c1:53:
         bd:d1:17:c0:cf:54:26:9a:12:23:7b:be:82:03:df:18:ca:be:
         19:d7:4e:3d:7a:50:5b:5e:a8:e0:2a:a6:f1:3e:78:a9:87:7e:
         1e:0e:3e:5e:9a:58:66:29:ea:6c:28:28:03:ba:b1:72:95:f9:
         bd:70:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:04:23 2026 by rpki-client