Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          J2pVYR5LlrVWxtjAP/8zUtN4HU2JS675BF/rQLUYta0=
Subject key identifier:   B4:78:FC:C7:31:53:03:B0:CD:38:21:22:CE:59:36:39:C7:77:2A:2C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E60BA441FC3364FFA44EE3EC272D47073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          115E
Signing time:             Mon 25 May 2026 20:01:20 +0000
Manifest this update:     Mon 25 May 2026 20:01:20 +0000
Manifest next update:     Tue 26 May 2026 20:01:20 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: oB7tvS2578Y1ff6Tek9E01MBF/zCt5zVUgI5WxYsWF8=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:ba:44:1f:c3:36:4f:fa:44:ee:3e:c2:72:d4:70:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 25 20:01:20 2026 GMT
            Not After : May 26 20:01:20 2026 GMT
        Subject: CN=b478fcc7315303b0cd382122ce593639c7772a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:63:81:b1:d2:0e:c1:ef:8c:07:e7:6f:0a:
                    68:eb:82:7c:8f:8a:80:b7:7b:b0:ba:e6:71:69:b1:
                    9b:79:0d:7d:42:63:e1:0b:65:9f:1a:19:cd:99:0c:
                    ea:e3:da:23:c1:b3:9f:d6:1a:36:a5:d8:72:ad:fb:
                    87:a0:76:fd:21:7f:c8:6b:2b:32:80:bf:0b:5e:17:
                    16:88:27:bd:96:20:5c:2d:36:ec:58:fa:32:ec:14:
                    bf:f8:d1:b4:d2:30:c9:49:75:ae:91:85:c1:71:2c:
                    c7:4f:63:e2:5b:24:11:2c:33:00:ec:e4:f1:fd:03:
                    49:1e:a7:bc:73:fe:e2:8e:7e:bc:75:66:0f:4c:22:
                    1a:83:f8:88:f5:bb:f2:3f:24:0b:f6:ce:9c:00:d1:
                    f5:3a:29:6b:5c:f3:7d:89:50:de:af:44:9e:8b:4d:
                    11:22:06:a7:18:b1:0b:7f:3e:78:5d:e9:ee:65:02:
                    da:6e:3f:96:89:6e:54:92:7e:0f:64:ae:b2:41:4e:
                    3e:af:38:49:5f:b1:b7:ad:0e:81:c0:c4:a3:5f:e0:
                    38:f5:ab:61:41:b2:79:6d:36:27:4e:a8:c3:d9:b6:
                    d5:36:d7:39:e0:66:74:7c:61:1f:0b:9b:bd:b0:b7:
                    ae:0c:4c:25:99:8c:b4:01:ad:5f:9b:4b:b9:2d:92:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:FC:C7:31:53:03:B0:CD:38:21:22:CE:59:36:39:C7:77:2A:2C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:ea:79:e6:3a:3f:1c:93:82:de:29:2e:f0:82:3c:3e:06:
         84:a6:bf:54:1d:da:81:a3:c7:5e:b4:2b:7b:a9:c8:81:cb:c0:
         12:3a:3b:f0:c6:dd:54:87:18:de:7e:4e:e4:e4:e3:5b:5b:92:
         38:70:e9:88:06:92:28:8b:b1:4d:68:da:9b:a8:57:a7:67:77:
         9f:67:87:c6:e5:87:e4:cf:eb:ca:a1:40:36:67:5e:bd:f0:8a:
         27:31:7b:79:dd:a9:22:bb:54:3f:3b:2d:55:b9:38:33:5c:c6:
         0e:aa:43:f1:28:99:ec:cd:ff:f2:e2:61:fe:4c:ad:a6:b9:14:
         11:ae:a1:a6:8a:f5:93:1d:65:fc:06:53:d6:27:32:95:9b:b7:
         f8:39:7a:b9:d2:37:64:0c:73:c4:96:d8:ea:a2:cb:a4:03:4b:
         39:44:33:64:0e:ad:61:b5:d6:c5:c9:3f:28:99:1b:fb:81:ca:
         2e:ac:00:a9:c7:c1:16:90:ca:be:de:5c:ba:f5:f2:67:b0:43:
         ed:74:9c:0e:1e:3a:18:3d:dd:55:11:c9:c0:74:04:06:b9:e0:
         08:15:5f:53:72:f1:a5:78:03:4c:94:e0:47:3b:da:62:c6:2b:
         6c:ac:99:c0:28:1a:8c:3f:51:24:13:dd:2a:b9:86:97:87:b0:
         9f:12:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:03:16 2026 by rpki-client