Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          q2Hp6USLI4jpM2dZLsfKH2QDFHDl7Q7Ejnz1/1sLHjw=
Subject key identifier:   BF:FE:38:E8:0A:80:2B:12:7C:FB:5E:B9:84:A2:7F:46:24:6C:1B:5B
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E32616A7BD1C5DFD3888E6391F9DD5DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1144
Signing time:             Sat 16 May 2026 20:01:45 +0000
Manifest this update:     Sat 16 May 2026 20:01:45 +0000
Manifest next update:     Sun 17 May 2026 20:01:45 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: zNXrHqw5us4b7YaIrIMho7JyevN5vHRHk+VWPusG1t4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:6a:7b:d1:c5:df:d3:88:8e:63:91:f9:dd:5d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 16 20:01:45 2026 GMT
            Not After : May 17 20:01:45 2026 GMT
        Subject: CN=bffe38e80a802b127cfb5eb984a27f46246c1b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:ba:e5:8b:48:f5:25:03:f8:ca:44:c3:ef:
                    24:a6:df:7d:c5:5b:36:d6:8c:da:6d:25:07:5e:cb:
                    6d:3f:93:4e:89:f6:df:77:8f:27:6e:3e:2e:6e:b2:
                    8f:6c:1e:a6:dc:3c:2f:1f:be:95:e7:44:33:f5:f2:
                    4d:65:ba:65:dd:fd:96:30:21:d3:2a:65:0b:47:fb:
                    31:c2:b6:cd:32:0a:13:a2:66:d2:85:c1:51:2c:ce:
                    83:5f:14:1e:b5:e7:07:20:1e:cf:65:55:d6:ed:5d:
                    ab:3c:57:85:80:3f:d6:6b:27:4e:be:55:07:49:37:
                    24:fb:b4:97:1a:ba:91:4e:f6:63:e6:92:60:2c:93:
                    51:db:1c:ff:a4:21:9b:af:fc:c5:db:98:df:48:d2:
                    80:c5:26:af:5a:b9:7f:ef:fb:ec:61:2b:96:20:c2:
                    12:62:46:96:5b:90:38:c4:ab:70:f4:e8:08:48:ed:
                    4c:6a:11:85:cc:ff:f0:ef:6b:15:f0:33:4d:ee:93:
                    dc:b7:eb:fe:e0:ba:c2:3b:ad:cd:71:94:b7:b1:62:
                    ff:1e:3c:c1:9f:15:55:12:85:74:b6:bb:78:50:2f:
                    95:db:18:64:6b:d6:f2:45:bc:04:f2:ea:95:48:5e:
                    17:d4:29:01:af:cf:7f:38:18:f2:fd:5f:57:db:28:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:38:E8:0A:80:2B:12:7C:FB:5E:B9:84:A2:7F:46:24:6C:1B:5B
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:ff:47:1d:63:c9:38:f1:c4:02:cb:55:61:61:0a:3c:75:
         e0:35:91:72:59:37:73:a1:c9:5d:a2:fd:c1:90:62:1c:32:f3:
         28:b7:78:0b:02:29:44:ab:cc:55:11:06:04:ac:5a:43:15:4d:
         cd:82:ce:5d:b7:b1:0f:35:37:d0:4e:ba:0f:c5:c6:81:2a:45:
         c1:a1:e0:0b:09:c6:78:f7:21:e1:3b:06:db:4c:61:13:ae:44:
         b4:60:ef:16:86:48:6e:1b:6d:50:89:b0:8b:fe:95:f1:42:e5:
         87:a0:d7:a5:5d:2a:d9:10:6e:a9:04:86:3d:ef:b7:5c:6b:6d:
         85:15:bc:35:c0:24:4f:9a:a6:00:55:ae:b5:4d:81:cf:9e:09:
         4d:07:5f:2a:3c:e7:82:61:53:87:2c:bf:e1:8e:e7:94:29:8d:
         bd:72:67:da:ff:1b:94:c0:5c:e3:c7:d9:3c:b7:87:99:fc:2a:
         71:39:c6:16:6e:de:83:f7:98:ee:f7:51:99:88:f9:ae:01:1d:
         43:96:a9:b8:50:35:17:50:42:7f:33:6c:63:b1:e9:12:96:59:
         82:8a:7a:bf:ea:e6:19:c8:12:4b:7d:36:78:49:e9:9e:4a:89:
         fc:36:87:88:e7:d3:d5:c1:7c:78:e0:1f:db:49:1d:d4:a0:41:
         4d:d2:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:44 2026 by rpki-client