Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          WkpN1ppeNe65n623VgNLdDU7xYl2D7NS1FXzHStgT7I=
Subject key identifier:   13:06:50:0D:44:C7:B9:D4:67:69:7A:81:4F:26:D4:4A:8B:5F:2E:A2
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E3A1D91A5149B5FBEE5C6E51DB807428E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          114A
Signing time:             Mon 18 May 2026 08:04:36 +0000
Manifest this update:     Mon 18 May 2026 08:04:36 +0000
Manifest next update:     Tue 19 May 2026 08:04:36 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: vdwRUFLNM3hqqewVzRGh6H2IJ50dRkxH0eGCp4Z1x4g=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 19 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3a:1d:91:a5:14:9b:5f:be:e5:c6:e5:1d:b8:07:42:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 18 08:04:36 2026 GMT
            Not After : May 19 08:04:36 2026 GMT
        Subject: CN=1306500d44c7b9d467697a814f26d44a8b5f2ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:be:7b:96:36:b1:1d:82:a4:65:f9:d8:43:
                    d4:0a:3e:f9:ca:eb:6f:e2:d9:4a:b0:1c:50:6d:1b:
                    c6:55:e1:38:9c:5e:d6:80:f4:e4:d1:75:23:6e:96:
                    70:8f:78:44:dc:bf:48:3f:b1:74:0b:7a:d6:53:d8:
                    d6:32:7f:14:3a:83:c3:8a:7c:09:77:52:6c:93:85:
                    f6:3c:d5:65:f8:9f:e0:69:86:35:7e:81:f9:d5:58:
                    39:64:88:c5:b4:c3:83:ba:fc:9b:1e:58:58:cb:8e:
                    45:cf:de:c7:a9:a0:85:d1:a5:59:f5:8e:7e:4d:bb:
                    d7:97:69:50:24:f7:d7:6f:63:e4:e2:63:b2:9c:1b:
                    16:5b:5f:f2:17:e3:04:82:5d:ba:2a:4a:41:c4:31:
                    ea:4e:88:34:1d:5b:4d:80:fd:82:a0:53:75:44:ad:
                    c2:d2:bc:3b:dd:ca:0d:59:0a:9a:4b:69:83:b7:0a:
                    2f:35:41:77:66:98:e5:7b:ce:cd:d3:d5:a5:04:94:
                    f2:59:8b:b7:91:eb:3b:28:b6:a8:f1:eb:e9:ca:13:
                    b5:d2:8f:3e:4b:c0:11:b2:05:db:aa:0a:37:a4:ad:
                    93:ce:00:28:c5:30:54:4f:04:4d:87:53:f1:9f:3e:
                    96:cd:51:23:a5:68:5f:8a:c9:12:14:0a:87:ba:10:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:50:0D:44:C7:B9:D4:67:69:7A:81:4F:26:D4:4A:8B:5F:2E:A2
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:95:39:00:97:6f:99:76:27:34:68:bc:2d:a5:e2:2e:84:
         db:3c:39:dd:64:45:53:1e:77:39:ba:3f:5d:6c:07:e7:40:03:
         c0:d3:fb:dc:1b:93:2e:ea:3d:55:58:9c:1d:eb:89:02:7b:20:
         a2:5a:e9:d3:dd:d5:84:84:5f:9a:f6:be:13:52:0a:ba:9a:e7:
         da:25:04:47:7b:9a:10:72:a0:76:44:d4:10:6e:f4:83:4b:73:
         a3:b6:7a:87:b1:6d:88:07:1a:b1:10:cd:ab:5a:82:c6:ca:36:
         09:c3:9e:07:40:5e:52:a5:93:ff:e7:ad:0a:a8:c4:eb:be:fd:
         b3:04:88:39:1c:c2:35:4c:ac:38:bb:df:ad:0a:f8:70:01:3a:
         18:fa:e8:b6:00:cd:85:b6:fe:72:ef:4e:7d:fa:92:91:cf:d7:
         c1:58:39:21:8c:70:6a:04:c3:c0:f2:d7:c7:ab:d7:37:cf:23:
         9e:2f:fb:b9:d3:8e:d6:37:12:da:f7:11:cc:1c:39:74:27:4a:
         32:dc:45:c5:96:7e:f8:a5:91:56:33:39:93:c4:4c:0c:de:cd:
         17:71:dc:b3:d7:bb:bc:e7:21:27:5e:73:35:40:fd:5d:bf:1f:
         9a:d9:53:46:4f:b5:74:7b:d8:d5:63:a4:75:3b:6b:08:00:18:
         1d:8a:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 12:16:19 2026 by rpki-client