Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          +aNpYwkgB1kdK3/lU8/BD6f2wHr1KdiMvTEWspKl6K8=
Subject key identifier:   DB:D5:A1:0B:04:E2:83:10:4A:56:0D:A8:C8:41:97:25:94:BE:45:63
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019D8A5E2B0DE2B75BDC0AC8D93DEB19E042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          10ED
Signing time:             Tue 14 Apr 2026 05:02:00 +0000
Manifest this update:     Tue 14 Apr 2026 05:02:00 +0000
Manifest next update:     Wed 15 Apr 2026 05:02:00 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 24tYvR6YeIsYeXjrYbyuAApJgEkSu9NsQimxutrPVEg=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8a:5e:2b:0d:e2:b7:5b:dc:0a:c8:d9:3d:eb:19:e0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 14 05:02:00 2026 GMT
            Not After : Apr 15 05:02:00 2026 GMT
        Subject: CN=dbd5a10b04e283104a560da8c841972594be4563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:68:95:f7:7c:ac:ee:9f:94:e1:c5:fa:00:
                    82:b1:6d:85:ee:75:bd:02:5e:ef:a2:73:ae:7e:a5:
                    dc:d3:bd:70:73:45:96:4b:48:28:93:8b:0a:ae:67:
                    f5:8c:dc:36:50:6e:c2:0f:1d:a9:f2:68:11:07:3c:
                    e6:3f:17:06:1a:14:df:01:5e:8b:ac:88:40:06:42:
                    95:b4:c9:8b:11:79:19:d3:1e:56:b8:e5:93:4f:a8:
                    53:9b:44:56:e5:81:1f:9a:b8:5b:17:a7:31:0f:d5:
                    ca:ae:7a:5a:0c:a8:35:4f:55:8d:5a:88:a6:9b:d0:
                    7f:b1:a1:43:25:e5:23:03:d4:5b:df:e8:a4:37:af:
                    ab:b3:3b:4c:0f:af:22:b1:f2:e0:2d:4b:7d:8a:1f:
                    62:77:09:ce:66:d5:5c:8a:24:fa:f5:1a:69:74:29:
                    71:96:12:34:19:04:21:6e:5d:90:d9:88:a3:d1:6e:
                    98:c1:03:92:f0:c8:7c:d6:fe:0c:a5:58:a0:a7:d1:
                    99:9b:5e:79:ef:03:d3:43:1e:8c:3c:03:2a:f3:7c:
                    b9:12:29:5d:7d:cc:f3:71:1f:a8:78:e7:ca:a6:53:
                    8c:d6:a0:23:cb:b8:15:34:06:3b:55:bc:99:09:a6:
                    22:8b:7c:6b:56:b8:87:3a:c9:d8:a9:b3:8e:cd:b0:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:A1:0B:04:E2:83:10:4A:56:0D:A8:C8:41:97:25:94:BE:45:63
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:cb:b5:3a:4a:1b:ad:51:a5:ff:40:06:cc:b5:8d:a1:64:
         e0:f4:9e:7c:07:9b:3a:00:15:86:bc:f4:19:a0:df:dd:ba:b3:
         d1:99:ce:79:cb:6e:ac:4f:b3:18:b5:fa:68:cd:f5:2f:3b:16:
         66:88:19:40:bc:78:43:44:31:5f:60:45:fc:f8:4f:cd:00:7f:
         6b:bc:05:65:ba:9f:18:4c:a6:57:fa:68:c8:be:7b:fd:2a:f7:
         1e:bb:7d:f8:8c:1b:cf:ca:c9:a9:ca:a3:d5:9f:79:a9:ab:b3:
         fb:e7:86:a9:e3:da:22:13:fa:bb:c7:48:c7:28:f4:fa:d1:ad:
         9e:7e:42:bf:bc:c1:81:a0:08:df:cb:82:78:b9:a9:e4:2c:ea:
         9f:30:aa:a9:b8:fd:1a:45:60:c8:a2:48:4b:cf:65:73:af:08:
         25:3a:f3:6e:7d:93:8f:fc:e3:99:fd:d6:bf:af:d0:a1:9e:38:
         c3:9d:b9:38:c8:a1:01:b1:2e:2b:7b:91:79:6e:6f:3a:21:a3:
         c9:7d:cd:49:df:ee:21:ca:f2:51:e0:62:e1:ca:0b:f5:33:2b:
         7f:bf:cf:d7:ce:25:df:9a:0f:be:cb:5c:1f:bc:a3:bd:6e:44:
         2e:55:8f:68:8f:c4:64:73:59:33:e1:2b:1f:32:c3:d7:39:ce:
         61:77:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 07:10:50 2026 by rpki-client