Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          1gYvomZNgDW9L/EoFlRCqlqrSNSlAolfkF2t1qlxNPU=
Subject key identifier:   CF:4B:D3:6A:81:8E:A2:D4:4E:13:2B:98:40:7F:FF:F6:55:AF:90:A1
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A007A880CD816E064DA94BC637F78081AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1239
Signing time:             Sat 15 Aug 2026 23:01:18 +0000
Manifest this update:     Sat 15 Aug 2026 23:01:18 +0000
Manifest next update:     Sun 16 Aug 2026 23:01:18 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 1pwutVvtcK0tTGg2zirXgXtvNPtu188URFyPMPaBlwk=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:07:a8:80:cd:81:6e:06:4d:a9:4b:c6:37:f7:80:81:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug 15 23:01:18 2026 GMT
            Not After : Aug 16 23:01:18 2026 GMT
        Subject: CN=cf4bd36a818ea2d44e132b98407ffff655af90a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:c9:e4:de:ad:07:40:a6:63:70:2e:10:2c:
                    11:54:a1:d5:37:49:83:a3:e0:65:75:6b:85:78:3a:
                    3e:82:c5:df:02:10:50:65:3a:84:ae:84:c3:59:9a:
                    15:b6:17:23:84:02:d9:98:8e:91:c9:e2:cb:3d:47:
                    20:b7:24:b2:d3:2b:70:f5:94:15:3b:a3:76:c0:0f:
                    51:53:13:e1:42:a5:28:3c:a7:cf:5d:d9:fa:fe:73:
                    89:fe:61:f1:ab:48:3d:41:71:ed:40:99:63:53:22:
                    4d:a6:5f:b2:20:ba:f7:0d:64:f2:ac:4e:dd:75:0b:
                    f5:3d:e8:83:47:d2:b3:4b:30:26:ab:20:3c:98:a7:
                    c1:78:42:07:07:78:61:e7:4f:38:4c:eb:75:39:c2:
                    b6:3d:58:98:21:c4:1b:d1:7b:bd:b6:71:6f:a7:ee:
                    5a:62:7b:42:96:82:53:95:a0:11:45:63:a2:54:5b:
                    d5:f1:0f:43:5d:20:a0:90:31:e8:44:6a:59:24:6f:
                    2b:51:23:cb:ab:7c:5f:d3:e7:af:6a:95:7b:9b:ef:
                    b0:21:90:fd:e2:6d:af:e7:9a:ad:4f:d1:eb:ff:8e:
                    2c:f9:00:22:00:f3:09:f5:36:f1:0e:83:96:cb:5b:
                    97:51:04:5c:23:de:47:36:d7:a2:83:61:e3:0a:f2:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:D3:6A:81:8E:A2:D4:4E:13:2B:98:40:7F:FF:F6:55:AF:90:A1
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:e9:6f:b3:cf:44:93:f2:30:9f:c8:e7:5b:a8:4c:97:4d:
         0a:7b:ce:94:6b:82:8a:7d:4e:c9:41:0e:1b:a2:0d:be:ff:0f:
         88:94:62:1e:ac:ca:b6:f4:5b:cb:06:f3:c9:7c:2f:6f:9e:71:
         6d:87:df:f7:f2:ff:4a:fa:a9:04:31:ed:f2:0d:bc:f0:09:ae:
         68:ac:6b:d7:31:f8:f5:39:eb:71:63:a4:f8:8b:f8:ed:e9:9f:
         4b:b1:ad:3d:64:46:3b:41:8a:75:36:fd:a8:28:d6:bd:6d:e4:
         96:96:5d:60:57:18:90:76:b0:f8:fd:af:5c:7c:d0:1d:9b:b7:
         82:77:02:41:f2:46:af:5d:c9:ea:30:cc:4c:88:54:9d:92:24:
         b6:6f:25:1e:1f:54:6c:9c:09:40:78:e7:1e:11:c0:17:7b:60:
         8d:7b:18:a7:6b:41:9c:8b:f2:75:d2:84:b9:d8:a6:cd:c7:37:
         35:2e:13:54:57:39:ec:5e:f7:bd:09:d5:62:a1:41:50:8f:72:
         90:6d:5f:d2:08:38:64:7f:4f:e7:24:2a:db:3e:c5:cc:05:1a:
         02:74:26:08:ec:9a:92:af:46:84:54:61:87:ae:2d:1f:86:52:
         0e:1f:61:b0:ba:e6:b5:e1:f8:2d:59:f2:8a:a6:71:00:53:4b:
         74:d3:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 08:18:43 2026 by rpki-client