Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          ZprGPyqhdbbsDIuVbYD3q3ZOWGL5cNEoOrxybUQarUE=
Subject key identifier:   CE:68:6D:06:89:CD:F1:4F:12:E1:80:BE:5D:C4:14:C3:03:A2:63:8E
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019F0E8944DD30AA31E1B643CFCA0F1F7EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11B8
Signing time:             Sun 28 Jun 2026 14:01:44 +0000
Manifest this update:     Sun 28 Jun 2026 14:01:44 +0000
Manifest next update:     Mon 29 Jun 2026 14:01:44 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: yybehgxWWsxi7oFipe9roLl+dYoDg8QDv0KKrWGS0L4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 14:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:89:44:dd:30:aa:31:e1:b6:43:cf:ca:0f:1f:7e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jun 28 14:01:44 2026 GMT
            Not After : Jun 29 14:01:44 2026 GMT
        Subject: CN=ce686d0689cdf14f12e180be5dc414c303a2638e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:a7:11:24:24:f8:a1:37:cb:7f:a0:79:c3:
                    d3:d6:1e:44:db:40:bd:19:e9:59:18:b5:d4:f4:48:
                    60:9f:73:5b:7f:fd:67:d5:82:06:b7:37:16:c1:62:
                    3c:22:a9:00:a9:24:3f:53:3c:ee:be:69:8a:ef:9c:
                    13:b6:a3:0a:98:58:b6:7d:60:f8:78:9e:e4:8f:57:
                    cb:77:f8:7c:9b:da:24:d9:25:f4:1d:ca:21:01:22:
                    1b:04:5e:c4:57:f8:88:69:16:f1:8b:cd:05:ba:70:
                    62:1f:09:03:dc:96:ba:3b:e6:fe:ab:74:fb:bc:28:
                    b0:ae:ff:f6:6d:57:2c:70:8a:9b:8a:b4:76:b6:aa:
                    d8:3c:03:90:74:36:4e:77:04:95:86:cb:08:a5:47:
                    6c:e8:6f:a2:8f:ed:84:76:29:68:6e:a4:63:3a:f3:
                    e1:5d:81:42:01:d4:29:93:7c:86:7c:7f:cb:6e:82:
                    82:b9:72:69:4c:e4:e5:3d:89:11:6f:31:18:a4:94:
                    7e:32:ad:b4:2e:40:62:47:c9:da:59:bd:91:0b:7a:
                    31:54:bb:2b:0e:e3:bf:be:88:bd:38:93:3c:81:97:
                    bd:c3:6a:63:87:22:d6:d1:9b:22:5f:61:09:e5:b3:
                    f1:a0:fd:24:84:06:bb:85:7a:c0:38:7c:69:43:8f:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:6D:06:89:CD:F1:4F:12:E1:80:BE:5D:C4:14:C3:03:A2:63:8E
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:86:47:c4:cc:77:e7:f8:a7:15:c2:42:65:5a:c3:b4:05:
         ae:de:59:98:fb:3f:40:a0:3b:70:45:fd:fd:9a:54:6a:76:dc:
         c7:8c:b5:02:0e:73:13:66:aa:52:70:19:f4:65:ee:87:d8:c7:
         f7:d7:dc:30:b1:9e:e0:db:9a:c3:2b:24:47:0b:ee:1d:5f:cc:
         5b:7c:f5:39:62:06:e9:ff:20:27:19:b1:53:34:72:aa:f7:20:
         86:c0:7f:ba:fd:3e:c6:15:c0:a1:d7:b0:6b:c5:8e:df:2e:2c:
         1e:4c:26:0b:c1:9a:fd:27:b8:73:c1:22:3e:1c:41:fa:62:cf:
         1b:fe:32:7c:f0:cd:72:5a:30:7e:54:ae:32:e9:cf:b4:f7:e9:
         f3:42:58:a2:32:24:cf:75:43:99:51:a8:92:16:15:2a:fa:9a:
         15:12:9f:1a:0f:da:fe:a6:fa:83:40:5e:b7:34:13:85:06:4d:
         da:e4:1c:31:f9:23:89:be:5f:1f:81:d1:16:09:55:02:eb:27:
         b5:ec:73:07:7c:27:8f:b3:92:9e:b2:26:4b:51:74:23:5b:27:
         5a:5c:0a:82:a7:55:3d:76:3f:83:e8:b5:52:45:28:c3:2b:e9:
         b5:96:62:33:f7:9e:51:cf:af:23:94:9f:ba:ac:d2:8e:4d:0f:
         b6:c5:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:57:13 2026 by rpki-client