Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          B/Qnk9OxZdi44ZYmpPBs00SD2tgL2woSCo1P5WWan6w=
Subject key identifier:   DC:5E:D3:F2:F9:69:FD:C5:B4:4E:11:56:FE:F2:B8:08:F4:E7:CF:92
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FD383D0604475020B3FD378B5C3F4AC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          121E
Signing time:             Wed 05 Aug 2026 20:00:58 +0000
Manifest this update:     Wed 05 Aug 2026 20:00:58 +0000
Manifest next update:     Thu 06 Aug 2026 20:00:58 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: M20wjUfDMLD5N51c0kQl6WDyQru0pKccc++uI1W8ofc=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:83:d0:60:44:75:02:0b:3f:d3:78:b5:c3:f4:ac:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug  5 20:00:58 2026 GMT
            Not After : Aug  6 20:00:58 2026 GMT
        Subject: CN=dc5ed3f2f969fdc5b44e1156fef2b808f4e7cf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:54:3a:4b:f0:be:54:ae:77:bd:ac:d5:5c:4f:
                    c9:4e:99:b3:b8:16:f0:19:e0:ca:ba:72:f6:7e:36:
                    d0:27:0b:39:ba:dd:8f:d7:08:92:9f:97:6b:eb:54:
                    15:d9:25:97:b7:70:a5:ac:97:39:e9:56:cb:8f:df:
                    46:1c:2b:8b:d6:66:85:07:eb:26:c6:ee:ed:a2:30:
                    8b:d3:9f:ff:50:3a:f9:4c:06:cc:56:f8:cb:19:7d:
                    85:fa:48:6c:d3:6f:21:2f:78:8c:4c:ba:09:bb:b1:
                    21:e1:8f:03:69:3d:78:4c:2a:42:1f:7d:77:3d:ee:
                    17:89:38:4c:39:ac:39:4b:0e:09:49:0e:b4:2f:68:
                    e1:cc:e2:ed:c4:4c:64:3f:dc:38:0d:0d:57:ac:14:
                    ea:f2:d8:23:ba:9f:5b:d9:4a:45:aa:d4:5a:36:63:
                    03:54:74:f4:63:ca:fe:c1:95:1b:d9:7c:fa:9b:37:
                    f5:5f:c5:b3:a6:64:e6:28:e7:20:82:7c:86:82:c0:
                    1c:f0:6f:b2:21:18:c8:78:8c:fe:d4:22:b7:22:b1:
                    31:b8:07:c8:79:f1:53:c2:ee:d2:f0:a3:aa:9c:28:
                    39:2c:66:35:20:4a:37:39:d7:4f:3a:a0:10:a6:e7:
                    27:c1:df:56:e0:71:f3:fe:b4:cd:e1:e3:b5:89:86:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:D3:F2:F9:69:FD:C5:B4:4E:11:56:FE:F2:B8:08:F4:E7:CF:92
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2c:70:2a:17:dc:34:8b:78:fa:b0:22:ce:b6:c6:6c:07:7a:
         46:3b:e5:d8:0d:09:4c:d0:c8:58:37:1e:4f:f9:70:9b:9d:3b:
         92:c3:d0:eb:f6:7b:cc:f7:93:36:c4:6e:64:2b:69:7d:55:0c:
         44:7b:fb:e8:c9:80:8b:82:1e:f2:5a:db:3a:8b:ef:a6:f8:31:
         73:d2:f1:03:4c:20:52:03:03:d2:73:17:8b:0d:ee:05:5f:06:
         a0:9c:60:ba:e4:cc:24:86:20:46:5f:a5:b3:6f:58:9e:8b:83:
         b5:30:1a:3d:78:2e:fd:81:05:76:b7:a1:5e:5e:58:7e:8a:f7:
         6a:ed:1c:37:1d:80:38:54:3e:f4:c4:81:88:d8:92:a9:1e:18:
         fa:4d:a7:b5:ea:f6:0c:f3:7f:36:4b:02:19:c3:3e:45:d9:56:
         0e:5f:3f:7f:4f:80:17:fc:7a:49:94:04:2a:1b:89:94:5d:6d:
         f3:28:5a:3d:34:3b:eb:eb:11:b7:01:af:af:d4:7c:ef:65:85:
         5b:0f:09:4a:74:4f:c7:c3:2d:e1:45:54:e7:25:fe:03:21:19:
         10:8e:e4:3d:dc:a2:40:d3:89:6e:53:f3:af:fe:41:4d:5b:90:
         ff:f3:6f:d5:71:21:b7:d7:fd:b0:07:37:c8:65:d7:78:57:74:
         a3:d8:b8:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Tg9BgRHUCCz/TeLXD9KxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwODA1MjAwMDU4WhcNMjYwODA2MjAwMDU4WjAzMTEwLwYDVQQD
EyhkYzVlZDNmMmY5NjlmZGM1YjQ0ZTExNTZmZWYyYjgwOGY0ZTdjZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41Q6S/C+VK53vazVXE/JTpmzuBbw
GeDKunL2fjbQJws5ut2P1wiSn5dr61QV2SWXt3ClrJc56VbLj99GHCuL1maFB+sm
xu7tojCL05//UDr5TAbMVvjLGX2F+khs028hL3iMTLoJu7Eh4Y8DaT14TCpCH313
Pe4XiThMOaw5Sw4JSQ60L2jhzOLtxExkP9w4DQ1XrBTq8tgjup9b2UpFqtRaNmMD
VHT0Y8r+wZUb2Xz6mzf1X8WzpmTmKOcggnyGgsAc8G+yIRjIeIz+1CK3IrExuAfI
efFTwu7S8KOqnCg5LGY1IEo3OddPOqAQpucnwd9W4HHz/rTN4eO1iYZYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxe0/L5af3FtE4RVv7yuAj058+SMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwixwKhfc
NIt4+rAizrbGbAd6Rjvl2A0JTNDIWDceT/lwm507ksPQ6/Z7zPeTNsRuZCtpfVUM
RHv76MmAi4Ie8lrbOovvpvgxc9LxA0wgUgMD0nMXiw3uBV8GoJxguuTMJIYgRl+l
s29YnouDtTAaPXgu/YEFdrehXl5Yfor3au0cNx2AOFQ+9MSBiNiSqR4Y+k2nter2
DPN/NksCGcM+RdlWDl8/f0+AF/x6SZQEKhuJlF1t8yhaPTQ76+sRtwGvr9R872WF
Ww8JSnRPx8Mt4UVU5yX+AyEZEI7kPdyiQNOJblPzr/5BTVuQ//Nv1XEht9f9sAc3
yGXXeFd0o9i4pQ==
-----END CERTIFICATE-----
Generated at Thu Aug 6 02:27:16 2026 by rpki-client