Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          AxpR9AKI7TeTToLmgLo6t8Ou6oiKsdu3a2Ds/ZoP3ls=
Subject key identifier:   DF:96:B1:5B:E4:AA:9B:DC:AA:C5:7E:12:E1:FB:C1:43:69:CB:36:05
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A0A415A19B372B3422B1E5CF523C6B8F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          128A
Signing time:             Tue 15 Sep 2026 08:01:16 +0000
Manifest this update:     Tue 15 Sep 2026 08:01:16 +0000
Manifest next update:     Wed 16 Sep 2026 08:01:16 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: aKJWEhZjKhDijADUu6FaeTtroHEnrG2j7HNoAQu4k3I=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a4:15:a1:9b:37:2b:34:22:b1:e5:cf:52:3c:6b:8f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Sep 15 08:01:16 2026 GMT
            Not After : Sep 16 08:01:16 2026 GMT
        Subject: CN=df96b15be4aa9bdcaac57e12e1fbc14369cb3605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:ae:77:e5:a4:fa:4f:12:82:19:7f:a8:54:
                    4d:27:75:f4:16:59:57:3d:20:2d:dd:f8:e4:d9:a2:
                    5b:28:1c:a4:70:e3:d5:c5:7c:51:fc:a2:fb:2b:fc:
                    9a:2c:4c:e7:95:35:03:aa:08:9f:17:1e:33:aa:f0:
                    fe:fc:03:32:5b:89:fb:d8:94:09:34:23:3b:d4:07:
                    90:85:35:bd:87:df:26:11:54:b1:da:7a:c9:8a:35:
                    c9:cb:ea:28:d6:5f:20:a3:11:b5:2c:88:53:41:d0:
                    4c:f5:14:9f:79:29:fb:b8:8d:9d:76:37:45:b7:06:
                    19:99:b1:35:c1:21:cb:2e:05:5b:64:f5:1e:0d:c2:
                    3c:03:19:e8:96:c1:02:99:64:0e:ee:17:a0:ff:5e:
                    07:fd:5b:01:2d:e7:a2:90:de:07:7c:b2:98:23:77:
                    3a:11:76:2b:94:4a:48:06:7e:77:fa:9f:65:3a:4d:
                    ea:03:b0:ed:25:55:c5:b6:03:16:c1:19:aa:35:ec:
                    26:fd:06:f5:79:3b:4e:b5:f3:33:71:c7:17:3a:7f:
                    e4:40:bf:fa:ec:2b:b1:50:25:6e:92:93:30:a0:75:
                    55:03:f3:b6:8c:37:7f:23:fb:b1:74:11:75:38:be:
                    de:d7:1f:61:a0:ed:39:a7:cf:d8:8b:c8:6b:90:ab:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:B1:5B:E4:AA:9B:DC:AA:C5:7E:12:E1:FB:C1:43:69:CB:36:05
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:08:67:66:a6:a6:b8:e4:f4:ad:9e:77:8b:39:f8:2d:dd:b8:
         2a:bd:48:2a:dc:ee:f3:3f:8e:9c:26:20:3f:b9:ab:7f:ad:27:
         73:ca:51:3d:34:ae:48:06:30:35:60:f4:b2:49:d9:8a:a7:f7:
         6c:4f:a2:6f:8b:f7:d1:67:dd:27:98:9a:cf:fa:5a:00:35:ca:
         9e:cf:22:70:9b:d6:a5:20:08:2f:11:ea:e3:35:be:21:9e:f6:
         e6:97:bd:c8:9c:68:a0:43:62:38:61:a7:2b:26:b8:8b:3c:53:
         75:e5:f5:ee:7f:df:f2:ec:c9:6a:2d:2d:26:c3:d3:8d:08:dd:
         6e:2f:72:7b:db:b5:55:3d:d2:64:69:f4:1e:7c:dd:10:1d:56:
         31:e9:4d:9a:ab:73:be:ac:20:e6:0d:c5:47:a4:b5:8a:cb:32:
         ed:0d:c4:52:67:a2:c5:6e:44:bf:da:71:ea:60:8b:a5:43:40:
         a1:42:a1:0b:b6:87:5e:dc:5e:8c:34:e2:e1:59:b7:68:32:61:
         35:be:f5:b4:d7:fa:f4:8f:50:81:9c:93:c9:68:92:8d:0b:c6:
         ba:f9:af:c3:9b:0a:58:ca:8c:2e:96:e8:bd:fa:27:53:63:f7:
         6c:1d:89:57:b4:a7:5e:ab:da:d1:69:4a:4e:4b:3a:b2:2f:6b:
         76:e8:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 17:17:30 2026 by rpki-client