Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          WR+bq5JiedeBI9w3ZRr2DOXA3YauRqMaHbS4D/N5exc=
Subject key identifier:   BC:40:E8:8D:D1:12:A8:06:25:83:04:EA:BD:50:AD:8E:A8:D1:B1:5D
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A14E07BE7C2230F6F5D1CEF619D9664310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          12E2
Signing time:             Sun 18 Oct 2026 08:01:32 +0000
Manifest this update:     Sun 18 Oct 2026 08:01:32 +0000
Manifest next update:     Mon 19 Oct 2026 08:01:32 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: MewGULCvbDrnGwh3nxp+tychY2he5CbqY/Ztyg2BHQI=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:07:be:7c:22:30:f6:f5:d1:ce:f6:19:d9:66:43:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Oct 18 08:01:32 2026 GMT
            Not After : Oct 19 08:01:32 2026 GMT
        Subject: CN=bc40e88dd112a806258304eabd50ad8ea8d1b15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:21:8e:11:4f:35:72:31:38:4e:52:c2:91:
                    1a:6e:cc:cb:b6:56:66:9d:47:71:9f:d0:48:c0:99:
                    73:a9:d8:86:01:c1:ee:d1:26:54:50:4c:76:58:72:
                    56:e8:31:fd:68:90:a8:51:49:b4:ad:40:c2:44:67:
                    df:0a:be:c8:5f:ed:0c:01:35:2e:7f:d7:a4:a9:30:
                    07:7b:49:8e:7a:cb:5f:ae:7f:93:f8:c9:b7:28:ae:
                    55:2c:a0:64:a7:50:6f:ac:ca:c4:19:dd:48:5c:c6:
                    06:b1:83:cb:50:68:96:22:12:45:bb:6c:d8:2d:44:
                    8e:c7:c7:a7:bb:49:b2:59:fd:f6:90:19:40:96:22:
                    1a:62:15:ce:aa:ae:07:19:11:9c:9f:64:12:e0:bb:
                    06:ff:5d:79:f7:24:48:cd:e3:31:e0:c6:48:56:73:
                    fd:65:d3:ef:f0:90:24:ab:90:e1:b9:a2:b1:d0:18:
                    95:8e:8c:f4:59:52:41:3f:ca:83:11:d4:d5:29:04:
                    be:27:98:62:62:f5:02:ff:a3:ea:95:59:47:96:fa:
                    6e:94:d0:a5:16:c4:63:b4:4f:5d:5a:86:be:72:37:
                    56:88:46:78:a8:b8:82:65:6f:d7:1e:06:48:8b:bd:
                    f9:1d:96:ba:b9:76:90:bd:6f:ce:ab:84:83:f5:e8:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:E8:8D:D1:12:A8:06:25:83:04:EA:BD:50:AD:8E:A8:D1:B1:5D
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:41:f9:8a:83:9d:87:ae:c0:8b:74:07:ec:33:af:bd:35:0f:
         81:46:5f:04:27:5d:db:a3:d0:22:d8:63:b4:90:a4:8e:fc:c9:
         15:50:c8:92:d2:c3:e8:2a:9c:e3:f6:b7:96:22:59:4e:35:b6:
         0a:3e:40:2e:2c:ec:fe:6f:0a:1d:ea:6a:fe:15:11:fc:d0:14:
         62:62:7f:14:3d:9f:4e:f3:17:fe:d9:e5:2a:40:e1:51:8f:6d:
         a8:55:bb:81:c5:36:25:13:79:df:b4:82:62:7d:2e:18:4a:b3:
         df:8c:a2:e7:c5:7d:40:40:29:4e:ce:3f:d5:b0:fb:45:a3:3b:
         7d:bf:0d:22:96:07:88:10:81:7b:f8:79:d5:96:ad:2d:d0:a6:
         a5:da:33:17:18:de:af:99:82:e8:23:b7:71:29:d9:11:78:6b:
         46:ff:f0:14:01:33:a8:6b:3a:5a:5f:b1:20:b0:f1:17:6b:2f:
         bb:63:b0:03:0c:23:94:d6:dc:1d:ba:7d:47:3b:0d:6e:73:4e:
         bf:f1:d4:11:d0:2b:b1:93:35:e0:c9:1a:a0:bb:32:29:52:8f:
         be:73:b1:af:9b:a5:ad:0b:8d:2e:86:03:79:53:0b:d1:e7:b9:
         74:2d:2f:8d:2f:a1:ed:76:e4:02:75:b3:bf:42:95:7f:c3:87:
         40:7a:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:38:49 2026 by rpki-client