Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          yF13hFjnPj/EyQy7GuftixDEUMFg3W/gP8KBWhS9JHc=
Subject key identifier:   AE:EF:5A:18:97:14:14:58:EF:05:CD:BF:A9:8B:75:F2:C8:5E:88:87
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E4F592494EED19BCDAE748C7DC8CFA323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1155
Signing time:             Fri 22 May 2026 11:01:42 +0000
Manifest this update:     Fri 22 May 2026 11:01:42 +0000
Manifest next update:     Sat 23 May 2026 11:01:42 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: C7Os2sVJHplQUL1t/bjUzbTYDhZxAXmj3yiPf/wewpU=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:59:24:94:ee:d1:9b:cd:ae:74:8c:7d:c8:cf:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 22 11:01:42 2026 GMT
            Not After : May 23 11:01:42 2026 GMT
        Subject: CN=aeef5a1897141458ef05cdbfa98b75f2c85e8887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:c2:e7:cf:04:44:08:15:0b:0e:51:60:e5:
                    48:d9:32:16:4f:a9:fd:3b:f1:0f:40:90:76:fe:ae:
                    50:42:16:eb:54:72:ce:bc:48:9f:33:fa:79:58:2d:
                    21:5d:23:e9:48:73:84:ce:f0:19:23:5d:18:dd:8b:
                    38:b1:3b:e6:7b:12:58:14:8b:96:dc:25:62:93:70:
                    41:45:ad:9b:0c:bd:3f:ed:0f:6c:14:7e:44:8d:9d:
                    50:31:92:b5:d4:fb:c2:8e:9d:ad:19:af:77:37:ad:
                    5f:41:f3:f7:2a:78:cb:9f:c2:86:d6:77:86:08:07:
                    6f:3b:85:c7:e3:93:74:47:22:35:5e:b6:c3:8e:19:
                    be:e8:e3:4d:e7:17:cf:eb:28:f1:b7:50:99:7b:bb:
                    cc:a6:be:a9:c9:53:20:25:fc:e2:1b:58:01:f0:0f:
                    b2:68:70:f7:18:d6:f3:39:b2:85:6f:db:f1:25:5f:
                    69:e9:8c:5f:3d:11:8f:d2:32:5a:4f:a6:98:55:0e:
                    1e:0d:57:f3:0e:36:2e:89:5d:4a:2d:95:6f:c3:79:
                    ff:10:f1:89:6c:93:0e:e3:ab:b7:16:23:c1:78:75:
                    be:44:f7:af:b9:47:a8:da:4b:9b:04:2e:6c:58:22:
                    ed:90:11:2c:6d:1d:5c:91:90:a7:e3:b5:7b:cb:d7:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:5A:18:97:14:14:58:EF:05:CD:BF:A9:8B:75:F2:C8:5E:88:87
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:1d:d6:7a:2d:e9:82:82:c7:b4:90:fe:ef:e4:b9:6c:7b:
         6d:76:21:c0:bf:87:d2:50:a6:0d:93:1e:45:09:fc:1d:b6:51:
         d7:43:5f:00:ca:77:ac:11:d0:af:f6:b3:d8:b6:97:8e:7c:cf:
         bd:27:2b:dc:cc:9e:51:ad:fb:a2:16:06:90:e1:5d:eb:8c:21:
         1d:8d:0a:b8:5f:13:3f:6a:56:74:68:10:df:2c:3f:83:68:7f:
         a2:a7:3e:c2:1f:6b:38:b7:8b:31:35:ee:f6:10:f9:7a:03:17:
         1e:73:fc:da:13:8f:a7:72:5c:53:3e:5b:cf:fd:29:a8:3a:48:
         cc:bb:3b:2c:d6:0f:41:67:7b:84:19:29:e8:08:41:bb:b4:9f:
         7c:38:75:f3:3b:ee:fd:34:5f:34:0f:35:15:0b:7b:52:67:73:
         e3:25:f1:6c:5f:77:57:a2:fd:40:4b:f6:56:c8:10:50:6f:25:
         09:5f:c0:d5:48:83:c7:d4:82:75:b4:a9:e5:f1:3c:db:3b:1b:
         7d:5b:ba:da:87:07:e4:7a:26:a1:67:1d:93:70:60:b9:30:a3:
         d2:51:e1:64:31:87:35:7e:5c:ce:08:c9:cc:3b:df:9c:93:ae:
         c1:ec:3a:46:df:17:53:28:f6:de:e4:15:27:d6:29:47:39:b9:
         d6:f4:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 13:56:40 2026 by rpki-client