Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          gUwTtLQSOkFhPGXAMobggDYsScj/YF0bNNRYrHk6XP4=
Subject key identifier:   B6:A6:AF:D1:D8:87:9E:A0:C5:E2:4E:05:2C:08:60:C9:2F:CD:E2:05
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019D149096BCFFA761EE1B1CDA05DDABC574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          10B0
Signing time:             Sun 22 Mar 2026 08:01:53 +0000
Manifest this update:     Sun 22 Mar 2026 08:01:53 +0000
Manifest next update:     Mon 23 Mar 2026 08:01:53 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: iZFEicKC9j+jfVx3SHLVJdNTZ6/MMvf7Rti9ZJhN8Sc=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:14:90:96:bc:ff:a7:61:ee:1b:1c:da:05:dd:ab:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Mar 22 08:01:53 2026 GMT
            Not After : Mar 23 08:01:53 2026 GMT
        Subject: CN=b6a6afd1d8879ea0c5e24e052c0860c92fcde205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:a9:9a:53:68:61:27:e1:f9:a1:98:f7:c0:
                    8d:64:1e:85:e8:b9:f5:8e:cb:cc:1c:bd:52:c9:36:
                    c4:27:46:90:92:25:14:e2:16:3e:80:dd:d9:56:cb:
                    ed:97:49:ca:77:d1:07:e6:0d:40:db:0f:44:c4:e9:
                    f5:c3:ef:78:b2:86:bc:bd:c1:b3:75:63:3d:be:bb:
                    1d:4c:b6:dc:a0:4a:c3:7f:f1:4c:6c:8a:e7:7f:97:
                    30:09:dc:25:d5:bc:9a:63:d5:3a:ff:51:17:d7:09:
                    02:d5:2a:e5:b3:8d:0a:fc:7a:73:c2:5c:be:68:77:
                    6d:5e:89:00:54:3e:df:f5:54:e7:02:03:93:dc:98:
                    e5:cd:ab:ef:b4:ee:c1:1d:7e:8f:0c:83:77:4a:22:
                    4d:44:d4:5f:bd:c9:4e:d7:c1:ef:8e:fe:f3:ab:a6:
                    cb:33:82:fa:dd:cc:fa:ac:35:e0:3e:6f:c9:a1:1f:
                    20:e8:83:2b:df:c4:36:37:97:0b:dc:d8:ab:2b:4a:
                    ac:9d:34:2a:21:1e:37:5a:3b:86:31:c3:ed:b4:80:
                    d1:8e:4e:7a:bc:1f:82:1f:ff:fe:09:2d:bc:f8:8d:
                    10:04:7b:d2:c8:4b:e3:09:78:09:01:5d:30:fb:66:
                    52:ed:22:00:d5:94:36:43:63:4b:99:64:2c:0b:99:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:AF:D1:D8:87:9E:A0:C5:E2:4E:05:2C:08:60:C9:2F:CD:E2:05
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:06:c7:50:83:83:eb:60:26:93:e5:c6:5e:e6:9a:f7:be:53:
         df:71:50:a5:de:45:f8:dd:30:d2:22:da:50:9b:8d:a7:f9:4b:
         05:ff:ef:fe:78:11:dd:8f:8f:aa:05:a4:af:3b:d2:aa:4e:71:
         bc:b0:92:a1:85:9d:c9:28:0d:e9:cc:53:6d:34:ca:de:63:e2:
         4b:a0:e5:d1:b9:f9:09:7b:15:ea:83:17:cb:36:da:33:ef:43:
         74:22:20:a5:63:3b:34:9c:ae:ee:91:1d:ad:86:bb:64:55:7f:
         01:77:c2:08:96:6b:4c:dd:0c:03:e2:d3:b7:72:39:0a:d5:02:
         6f:c1:09:c9:6f:c7:7a:47:a3:7c:d7:a4:59:aa:6f:45:2d:13:
         18:24:83:73:46:c8:3e:51:2a:48:fe:41:88:75:bc:83:7f:2a:
         35:b3:bc:af:5c:8e:e2:1e:d6:4a:05:81:de:65:e4:e4:69:18:
         56:72:4e:3c:fb:dc:61:0b:2b:28:2d:75:18:37:d3:56:85:a5:
         6f:d0:47:d3:da:6c:05:99:3b:e1:d2:e0:d5:6c:33:ee:f3:e7:
         db:51:12:28:b8:bc:1c:6f:1d:9b:5f:4b:6e:e4:3d:92:40:7d:
         21:7e:5b:33:61:53:30:d4:6b:92:ec:90:0e:fa:93:66:2c:33:
         6a:ce:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:09:34 2026 by rpki-client