Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          2wwEtOOA8fPOlEwDt5CfYuDUB4lWOpglDThHOfOy0BU=
Subject key identifier:   89:EB:3A:F0:54:38:D7:E2:B0:84:75:25:C8:FA:3A:7F:33:85:60:61
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A10A708BA14C398A9FF8241ACC96618B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          12BF
Signing time:             Mon 05 Oct 2026 05:01:50 +0000
Manifest this update:     Mon 05 Oct 2026 05:01:50 +0000
Manifest next update:     Tue 06 Oct 2026 05:01:50 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: z6vSKQKlJFZol7zMCVwRVuRPGozuvGJ0VNmvBE6hwvg=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 05:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:70:8b:a1:4c:39:8a:9f:f8:24:1a:cc:96:61:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Oct  5 05:01:50 2026 GMT
            Not After : Oct  6 05:01:50 2026 GMT
        Subject: CN=89eb3af05438d7e2b0847525c8fa3a7f33856061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:ef:ac:0f:89:60:8c:8f:79:98:1b:f9:85:
                    53:3b:05:11:be:89:24:89:19:10:86:cc:cd:e9:e1:
                    3a:ed:72:a4:4a:72:0d:77:8e:fc:cc:75:7f:4d:b6:
                    b5:bc:c7:03:60:78:00:fe:44:66:6b:dd:36:b6:c7:
                    36:fc:93:b4:7e:43:90:81:d7:1c:2f:bf:09:16:6a:
                    12:7d:f9:02:f8:7f:fc:27:c7:67:e3:b7:bc:53:66:
                    54:9e:80:f3:0f:1b:cd:c8:12:e2:93:14:8a:32:a0:
                    6c:86:aa:2b:89:50:2f:7a:7a:64:b8:9b:b3:26:8d:
                    f9:b2:7d:82:27:8e:81:da:fc:97:29:57:68:0a:13:
                    60:eb:21:6d:9b:8b:1e:d3:a4:8e:08:4d:19:3a:dc:
                    bf:26:59:c7:ae:ad:78:3a:38:6c:f9:ec:7e:23:94:
                    46:f5:90:3f:f6:43:4f:58:29:aa:b9:ef:ce:b1:79:
                    b6:a2:a5:3d:81:e8:b7:5b:0f:47:e1:b1:8e:a0:03:
                    12:16:ef:b1:95:19:96:29:20:29:71:74:3b:ce:b5:
                    31:aa:0c:d8:0b:71:17:36:c1:b5:bd:dd:a4:29:1b:
                    94:55:ef:97:10:ca:4c:68:78:ff:ea:9e:72:37:cc:
                    46:08:18:b7:3f:49:85:bd:b2:14:c8:8e:bc:73:4c:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:3A:F0:54:38:D7:E2:B0:84:75:25:C8:FA:3A:7F:33:85:60:61
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:72:f4:f5:8c:63:ed:86:c4:aa:a3:4b:d9:31:5c:8a:32:
         da:5c:09:33:a8:cd:c8:92:2d:b5:4e:b2:ad:80:d6:b4:08:62:
         ed:1a:35:33:2c:e3:c1:89:ef:ec:c4:20:d2:db:3d:ce:b9:6a:
         3b:d7:bb:bb:e8:94:8e:34:3a:10:2b:df:7a:fa:d2:a3:af:52:
         bf:de:71:98:40:41:72:af:e9:a6:b5:ac:e0:3d:5b:85:e8:9e:
         7c:23:cf:81:c3:89:fd:d6:93:cf:84:cf:df:34:20:8c:64:f1:
         82:c3:37:09:e0:96:6b:c5:c5:79:1f:7d:60:6b:4e:59:5c:09:
         88:75:af:0a:31:a3:a3:a5:e8:49:43:2b:10:11:68:7b:12:9c:
         54:ba:fc:92:37:d4:f8:02:ed:74:f2:fe:c2:97:ec:f4:bb:cc:
         cc:db:7b:88:d2:4c:a4:30:67:25:71:52:b6:2c:39:6f:ca:5e:
         34:88:39:31:39:47:36:c2:d4:6c:d8:e2:da:0d:f4:9e:eb:17:
         ff:8c:7f:a8:ce:3d:20:f9:da:8e:88:a8:f7:5e:00:13:bf:93:
         9d:f3:bf:55:74:84:9d:aa:ae:c6:5d:c9:8e:f5:1f:ec:d0:e3:
         34:f8:96:c0:c9:71:10:b0:e5:f0:29:29:36:53:2f:80:f4:08:
         b5:b2:6f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:06:59 2026 by rpki-client