Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          TUIwUaoEBcWJ0cQQBVHuo7ZRlDU5o9YD1oAkbW4xLCk=
Subject key identifier:   4A:B6:38:E6:36:AE:C1:5E:B9:11:D6:3A:04:5B:8B:24:5E:A4:6F:C2
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A0C2FB660018460D5F3C6DF56F97E0B781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          129A
Signing time:             Mon 21 Sep 2026 08:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:50 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: sV0eT1sNE+gv4FdGjAZvrY4PUExxnRTy5Dj7qVQ3Bek=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:66:00:18:46:0d:5f:3c:6d:f5:6f:97:e0:b7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Sep 21 08:00:50 2026 GMT
            Not After : Sep 22 08:00:50 2026 GMT
        Subject: CN=4ab638e636aec15eb911d63a045b8b245ea46fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:46:ca:9b:5f:be:62:dd:bd:d3:b2:1d:9f:
                    5e:56:f4:4e:a4:92:ce:8b:69:ae:9b:db:30:79:ea:
                    b1:ee:44:a2:b8:df:b5:2b:bd:35:1c:7c:5a:4b:80:
                    3f:93:25:b0:67:dd:1b:0a:d7:2a:4b:a3:25:f2:41:
                    78:c9:9f:56:d0:a8:48:a8:a9:11:0a:d6:31:3f:c0:
                    b7:8e:57:81:00:34:23:ba:18:ff:07:ab:b1:a2:78:
                    60:e4:a6:87:72:ba:4b:23:bf:65:5f:d1:b5:b6:78:
                    95:34:9e:f1:df:7b:e6:2a:a2:15:9a:30:a7:5a:8e:
                    b6:6a:e8:e8:78:f7:98:c8:a6:c7:3b:a6:7a:d2:ce:
                    9e:af:d1:3d:13:02:c3:cc:6e:d8:1d:e4:cc:58:d5:
                    9f:0e:66:69:f1:9f:d3:31:42:8f:31:3e:08:9c:47:
                    75:10:3b:98:97:8d:c1:9b:9b:ae:49:1f:5b:04:5c:
                    e2:de:39:b8:7f:d2:25:4e:bc:90:b7:0d:86:7b:8c:
                    07:9a:bb:d6:b6:94:4c:f6:5c:d7:1c:15:4c:bd:9e:
                    04:67:7e:f7:62:7c:1d:16:13:b4:86:60:2f:71:ae:
                    31:af:0f:be:b2:9e:c4:62:7d:b4:6a:27:d6:d6:4e:
                    bd:be:12:f2:b4:22:25:45:f5:2d:92:ce:a4:f9:6d:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B6:38:E6:36:AE:C1:5E:B9:11:D6:3A:04:5B:8B:24:5E:A4:6F:C2
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:45:28:23:cf:3c:7d:f6:9d:9b:4e:7f:23:6a:9e:26:0c:87:
         31:69:f0:94:f3:ee:85:4d:60:a3:b9:a9:1d:28:b4:00:c0:91:
         01:2b:f3:fb:73:9f:ae:44:12:1c:02:69:6f:c2:e9:55:ab:6a:
         59:4b:ad:d5:aa:ad:8d:4c:1b:e7:03:c1:f4:65:45:4c:e5:86:
         c9:dd:cb:10:0a:30:1a:8a:b0:1e:c9:ca:f3:ba:cc:59:e4:bb:
         b9:e0:5c:e0:94:69:a1:bb:90:91:ac:4c:6e:19:5f:6c:81:16:
         f2:02:d4:47:5b:86:3f:42:76:6e:7a:06:c2:14:40:3b:27:cb:
         9b:03:df:9d:99:fd:d5:5c:71:97:56:42:af:9f:19:14:5e:ba:
         09:b1:90:dd:73:35:40:6c:44:c6:2e:92:04:d0:71:b6:a4:1c:
         23:2b:50:3a:8a:ec:7b:01:75:4f:c9:68:79:f9:5f:67:45:39:
         5c:cd:fd:18:42:8b:3d:f8:bf:3d:1d:29:6a:4a:52:a1:df:ab:
         a7:d9:45:30:f6:b5:88:57:88:ad:ba:6b:da:81:4e:31:a3:b6:
         c4:88:9c:87:68:51:ec:75:92:6f:7b:45:72:7c:1f:ba:4e:7b:
         95:2f:99:b4:8a:2c:0c:ae:a2:cf:af:a1:ba:47:49:45:30:60:
         d5:1d:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:11 2026 by rpki-client