Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          coVzgSGFOYb/PGQ4uGsalnF4jxyfz/bILuEuVHndcdQ=
Subject key identifier:   2F:A8:31:32:AA:49:8E:9B:D6:5B:0F:DC:B7:8A:A5:D3:8C:C1:D7:A1
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FAED2B8A4B1B580D152029BFE72878A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          120B
Signing time:             Wed 29 Jul 2026 17:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 17:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 17:01:13 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: yhurpE4qfoTJnOQRSxgDXy5uxGYfEwY2cxhQBmyFtqk=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:d2:b8:a4:b1:b5:80:d1:52:02:9b:fe:72:87:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul 29 17:01:13 2026 GMT
            Not After : Jul 30 17:01:13 2026 GMT
        Subject: CN=2fa83132aa498e9bd65b0fdcb78aa5d38cc1d7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:f1:50:c6:74:86:33:27:b4:cc:a8:39:35:
                    20:ab:eb:b7:f9:cf:d5:bb:56:0d:3b:3b:ab:a2:82:
                    22:b8:27:a6:05:ca:6b:5f:d7:e8:a1:ca:d8:fa:69:
                    81:6a:14:7e:00:4f:6e:f6:69:aa:1a:c3:b6:8e:e4:
                    3d:7a:ec:31:61:62:6d:c0:65:8b:78:13:82:a9:7c:
                    44:eb:cf:51:bc:7a:e1:ec:a1:38:80:08:e6:26:09:
                    88:fe:41:66:b4:49:4e:58:1c:f2:d5:d2:ad:48:47:
                    fa:ca:ef:85:ea:e8:91:49:99:60:0a:68:93:57:e6:
                    4a:e2:49:3e:56:08:05:21:3a:c7:5f:99:01:b3:a4:
                    8d:e7:06:0d:be:77:d9:f1:54:b5:22:fb:bd:3e:9b:
                    7f:b9:7d:81:3e:6d:c5:34:2b:a7:62:ae:58:ee:ba:
                    d9:00:af:4c:7b:25:ea:7c:44:9f:12:97:dc:54:5c:
                    b5:43:17:cc:61:83:76:1d:fa:26:8c:ab:c5:f3:47:
                    fe:84:63:ba:8d:3e:23:e6:bb:43:12:71:45:57:05:
                    17:b2:47:a9:7f:af:3d:0c:54:8d:9f:65:c5:9c:b0:
                    4c:da:97:f4:6b:0c:87:8d:c6:0d:1f:b4:82:9d:76:
                    44:bd:e2:5c:f1:69:00:94:1c:a7:e0:90:5a:e9:87:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:31:32:AA:49:8E:9B:D6:5B:0F:DC:B7:8A:A5:D3:8C:C1:D7:A1
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:97:b5:e6:d8:4e:05:ff:66:5f:bd:90:0b:d4:8c:cc:8e:
         5e:a4:b3:bc:b7:9a:de:f4:1c:be:35:2f:7e:30:ad:d1:e0:70:
         ea:a3:75:bc:39:a1:22:cc:4b:20:d5:07:1c:e4:45:c8:31:55:
         03:94:84:06:b2:ad:be:de:ba:13:83:d2:f3:5d:03:8c:3f:ba:
         3a:33:50:85:1e:d5:38:83:38:f2:b7:1f:19:5b:eb:9f:8d:72:
         8c:92:da:64:fa:1a:0c:1d:34:1a:c1:08:6f:4c:e3:64:c3:dd:
         24:00:b1:c5:32:c9:fa:a1:b2:86:fd:6c:47:0f:e7:21:d5:dc:
         1d:f9:5f:06:51:84:c5:18:48:ba:71:0b:e9:2e:ef:98:8e:fc:
         70:f6:a9:e1:a8:5b:07:aa:78:aa:06:ee:dc:2a:7c:0f:a3:0b:
         8f:e4:70:17:c4:bb:b3:eb:78:50:ac:b1:5f:fe:b1:38:34:36:
         12:44:c4:0f:1c:1a:25:92:05:18:86:5f:6f:dc:24:85:fe:17:
         48:10:a8:df:cd:cb:0f:bb:27:25:38:d8:e3:9e:17:b9:ef:2f:
         e3:72:80:da:91:59:5e:b7:e4:89:77:6c:66:7b:c0:54:ab:39:
         34:1d:e8:af:b8:7b:53:78:fe:e0:ac:ae:d5:38:e6:21:ad:91:
         35:04:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:25:37 2026 by rpki-client