Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Q8sge17/2nhMjJYEWNIONOKJT/509RjRLpIba6Vt3HI=
Subject key identifier:   49:FB:B2:E3:03:67:2E:19:16:9B:ED:58:D0:0A:44:21:49:EE:59:F6
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E05F59E90425CC8EA77BDADAFB2E2594D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          112D
Signing time:             Fri 08 May 2026 05:00:43 +0000
Manifest this update:     Fri 08 May 2026 05:00:43 +0000
Manifest next update:     Sat 09 May 2026 05:00:43 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: btbrmt77CjBi6fdkXM4JEB+wM3Hd2PHG/6o7DKphz/E=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:05:f5:9e:90:42:5c:c8:ea:77:bd:ad:af:b2:e2:59:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May  8 05:00:43 2026 GMT
            Not After : May  9 05:00:43 2026 GMT
        Subject: CN=49fbb2e303672e19169bed58d00a442149ee59f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:8c:8f:0e:38:cb:b7:5d:be:2e:9f:d0:ee:
                    b7:c3:10:06:a6:d8:ca:37:96:7e:d4:57:ee:6c:00:
                    0d:8d:df:e1:16:c3:b8:d0:36:71:a2:04:e0:f5:18:
                    8f:da:64:04:46:ce:34:31:b4:28:3f:24:f6:e1:e0:
                    c0:4b:32:06:a9:3e:b8:e1:89:f8:45:e5:79:49:c6:
                    5b:5e:da:ce:21:9e:77:23:a5:9f:c5:de:54:9b:de:
                    d0:9e:bb:ed:78:a0:60:5e:95:0b:1e:37:45:c2:06:
                    4a:29:43:08:d7:d7:1c:49:c9:ef:31:e4:0b:15:f9:
                    3f:46:8b:b8:bc:7f:d5:89:4c:61:33:08:71:08:f7:
                    a8:27:3c:72:a6:bf:58:7d:3e:5e:b1:cf:74:a9:47:
                    70:c1:18:82:67:bb:d1:df:0a:7a:61:b6:89:30:3d:
                    d9:b6:a5:84:08:a2:9b:94:85:96:f2:c9:cc:76:df:
                    1c:83:3b:cd:2f:02:e7:0f:e8:26:2b:5c:7b:04:8b:
                    2a:ed:86:7f:93:30:6a:c5:eb:bc:ae:45:d7:66:4e:
                    ba:54:8c:11:a1:79:dd:69:2b:3c:75:68:1e:b3:ab:
                    80:d9:ee:64:97:c8:59:80:36:2a:0b:7a:25:95:d1:
                    06:8e:f7:0a:8f:91:81:1a:14:89:93:85:02:7c:b4:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:B2:E3:03:67:2E:19:16:9B:ED:58:D0:0A:44:21:49:EE:59:F6
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:1a:01:9a:e9:61:b6:e6:43:54:94:42:08:29:35:59:14:
         6f:80:93:eb:c1:51:ae:4b:59:25:d7:f4:bd:c7:dd:1d:4f:e4:
         50:d1:90:91:dc:04:44:07:57:1c:08:6d:0d:58:4e:e9:e8:59:
         ab:ee:2d:c2:51:3e:a4:78:e3:66:46:93:18:30:af:8a:15:ae:
         a2:34:ca:7b:0b:1d:d4:30:84:0d:b1:2f:6b:7b:d0:3f:f3:4c:
         91:5f:2a:e8:cd:e7:ee:1d:b9:3f:9a:15:28:98:e6:a6:a9:7a:
         fa:39:24:37:b3:53:95:5f:60:2a:15:b1:36:ef:e7:94:00:f3:
         7a:66:8e:db:98:0e:57:ea:c1:cd:7a:bc:aa:d2:e0:46:5c:fb:
         2a:34:d7:f0:26:39:62:0b:b0:63:d9:76:da:f0:d9:df:5b:27:
         a0:46:e8:a1:0f:19:79:78:eb:44:dd:cb:f2:1c:26:bb:c6:ca:
         5a:74:28:ed:07:c7:ff:18:7a:f7:40:21:46:71:6e:2f:c5:c7:
         d5:95:20:19:dc:f3:74:0d:c1:cb:90:f2:f5:d8:0c:03:d9:a2:
         c6:4e:8e:f8:ef:87:33:ee:e0:cd:6a:82:f7:c8:6a:1e:2c:81:
         b2:f1:0e:b5:06:15:7f:4b:7e:e6:20:aa:c9:80:9f:5b:1c:3b:
         0e:55:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 09:59:51 2026 by rpki-client