Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          yO2C/n9Rgc1w/NRgVL2ZQmlFovvFwEcpRBtPQ3kdKxo=
Subject key identifier:   78:02:BF:9A:7C:94:88:F6:14:BF:F0:43:04:DC:F3:D4:7F:9A:17:2E
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A0133EE628DABD810E357A7CEB855209D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          123F
Signing time:             Tue 18 Aug 2026 05:01:24 +0000
Manifest this update:     Tue 18 Aug 2026 05:01:24 +0000
Manifest next update:     Wed 19 Aug 2026 05:01:24 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 3pas42S4AFDWP8xo/pmEaTQq8VkGEJsHKVnGhDWGYnw=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Aug 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:13:3e:e6:28:da:bd:81:0e:35:7a:7c:eb:85:52:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug 18 05:01:24 2026 GMT
            Not After : Aug 19 05:01:24 2026 GMT
        Subject: CN=7802bf9a7c9488f614bff04304dcf3d47f9a172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:ea:b8:be:be:c7:6c:58:dc:1a:e3:d6:2d:
                    d0:8d:5e:2c:ee:08:57:95:52:d2:37:4d:ac:b2:05:
                    3f:2b:28:2e:65:2d:78:2b:6f:8c:82:8b:08:32:ab:
                    1c:d2:0a:41:de:8b:53:67:3c:0b:21:9a:3c:7f:27:
                    53:4b:50:7d:b9:e0:6a:65:e7:f1:ec:e6:44:20:29:
                    66:14:95:e1:dd:ee:be:55:4e:ad:08:66:ea:ae:68:
                    6a:a9:f8:41:53:14:7d:3a:85:2a:42:7a:48:9d:6e:
                    15:bd:77:d9:27:f2:27:65:d8:83:4b:b3:c3:86:3c:
                    7f:2e:4d:a1:fe:2c:3e:bd:8d:dd:a3:e6:02:5e:2c:
                    21:05:60:f4:15:14:ea:3d:48:ee:70:ef:ff:ac:e9:
                    7e:8e:d3:d8:af:73:5d:4e:83:48:08:69:e4:97:b8:
                    55:3e:cb:82:d0:64:85:ed:9d:ac:9d:7f:b0:80:a8:
                    43:8f:86:23:93:a8:eb:10:fc:da:2b:3f:6d:ac:21:
                    d4:97:20:79:ca:d6:71:11:f6:4b:75:e1:54:5c:39:
                    9c:9b:08:d5:1c:2b:4c:21:c7:39:a0:4e:6d:7b:2d:
                    af:65:33:e6:31:43:97:2a:6b:9a:c7:68:fb:51:e0:
                    be:4e:f0:26:6c:96:ec:5f:54:3c:fb:ba:8e:d4:a1:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:BF:9A:7C:94:88:F6:14:BF:F0:43:04:DC:F3:D4:7F:9A:17:2E
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:63:2f:74:8d:fb:3e:8f:62:a9:72:f3:e0:66:61:7c:ef:cd:
         f8:e8:98:5b:c5:aa:7a:e4:af:09:9a:2f:f4:ca:1e:d8:61:fc:
         7f:a9:93:15:0c:dc:3c:2a:80:c0:d2:9a:57:32:65:bc:a8:65:
         09:f2:09:40:ed:ee:8b:55:2e:a3:9b:e0:1f:1b:dc:2f:ef:69:
         7a:f6:22:27:6a:a6:4e:f8:9f:55:f9:06:f8:af:5b:5a:5a:c6:
         12:61:c4:d3:11:d9:97:b4:ff:4d:1e:a2:07:a0:42:a2:7b:ba:
         ae:61:be:95:3a:d7:99:f1:29:30:66:32:21:14:d3:ab:40:30:
         09:99:59:e2:5f:08:ad:9f:f6:e0:60:7f:ec:fb:52:c0:7f:90:
         c2:48:c4:e9:36:85:02:de:98:f5:0c:c3:17:4d:59:ba:fe:94:
         62:0a:7b:18:92:33:8c:f9:d0:d2:69:32:22:77:00:35:27:d0:
         5e:24:9b:c2:f4:92:12:1e:11:26:97:0d:6e:c3:17:20:33:a5:
         70:82:b4:cd:3b:28:99:f7:60:23:1f:53:ed:ba:2b:7f:ba:17:
         45:64:a3:72:01:91:a2:84:71:b9:23:5a:81:29:2a:4e:05:22:
         56:95:b1:ce:81:8d:52:05:fd:ea:77:1c:63:22:95:43:bd:99:
         60:af:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 10:06:08 2026 by rpki-client