Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          9GgLeaebqBszg5iro920Cl+Thl0txU2vzVqYBQj13hg=
Subject key identifier:   A9:79:AE:B5:C8:25:96:FB:FE:B2:AC:EB:ED:6A:A3:B5:94:92:C6:FA
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01995E331A8F1CB0B445D0B3F60EECA35BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0EBF
Signing time:             Thu 18 Sep 2025 19:00:31 +0000
Manifest this update:     Thu 18 Sep 2025 19:00:31 +0000
Manifest next update:     Fri 19 Sep 2025 19:00:31 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: X3u94ZhOZoA5dIpiTFfRHTlUXz8.roa (hash: D+34uSmSIVe37vBbkbdrgmetspmAMB587SxWGB7MVpE=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: BIYzMZcuofVszqarwvCm+ie5dR/Jj5x3gBXD2+r/CKo=)
                          5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5e:33:1a:8f:1c:b0:b4:45:d0:b3:f6:0e:ec:a3:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Sep 18 19:00:31 2025 GMT
            Not After : Sep 19 19:00:31 2025 GMT
        Subject: CN=a979aeb5c82596fbfeb2acebed6aa3b59492c6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:d3:b7:64:ff:1e:f0:bc:5f:14:68:4e:6a:
                    fe:2f:7e:02:f4:9f:bd:e4:fb:64:7c:f8:d7:29:97:
                    78:bd:2d:c3:c2:4f:60:35:ac:80:8f:f0:a0:ad:97:
                    73:28:fa:9d:90:72:30:e0:7f:54:1f:6b:1f:fe:50:
                    95:0f:0b:7b:19:5e:57:d4:e7:d1:d9:93:2d:31:c6:
                    b9:84:88:a1:01:e3:25:b2:26:c7:b9:32:93:ae:43:
                    b0:f3:ad:a4:85:6e:8b:1b:73:df:5d:aa:0d:8c:6d:
                    7b:a3:d5:e6:57:da:d1:11:40:88:49:b3:98:1b:bd:
                    fd:e2:e0:e5:1c:f5:95:4a:fc:5e:c8:16:e6:89:85:
                    05:93:04:41:bd:8b:2f:12:48:93:c0:b7:01:9a:fa:
                    60:77:75:a3:86:ca:38:ad:3e:88:66:2f:ec:33:f0:
                    5d:8a:f1:66:b3:b4:fd:df:dd:61:58:af:34:6e:6d:
                    b5:07:12:a6:69:96:d9:ca:58:e1:4d:b3:ca:aa:e4:
                    93:40:89:98:27:40:32:79:e7:48:6a:b8:4c:6d:7c:
                    9d:bf:e7:68:8c:f8:42:a6:22:b4:09:eb:dc:5b:9d:
                    d4:f9:70:3f:c6:e8:dc:3e:55:a8:a3:50:59:3b:1c:
                    b4:8f:35:e4:5f:b4:4a:1b:b7:a3:57:48:ce:7e:d4:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:79:AE:B5:C8:25:96:FB:FE:B2:AC:EB:ED:6A:A3:B5:94:92:C6:FA
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:df:b6:1b:9b:e3:9a:cc:3b:88:4c:8e:02:f8:cb:65:0b:3a:
         3f:06:5b:09:37:57:5b:fc:02:44:33:3b:07:e0:5d:fe:a9:55:
         cc:26:ca:3f:60:71:0a:b9:44:d4:46:c6:f0:6e:cc:1b:12:b6:
         83:b8:48:ce:47:19:9a:8c:c4:bc:bd:25:1d:7d:94:ce:bf:a0:
         95:82:2e:8d:c3:f6:d9:13:74:81:c5:58:d6:80:02:7a:c4:6d:
         a0:3a:4a:d0:07:86:65:bb:20:30:fa:30:0f:2f:7b:6e:a7:27:
         f7:d1:03:13:cc:a2:a6:98:0d:bf:ea:9d:39:25:da:33:51:39:
         06:82:0c:9b:a0:ab:5b:ee:34:0c:ed:c0:d1:65:73:59:81:ea:
         af:1c:89:a6:54:01:bd:61:a9:28:80:21:20:63:50:ef:d7:83:
         da:e7:70:1d:31:38:45:ad:33:b0:5b:2a:a0:5b:66:ce:c3:ba:
         83:eb:77:e7:6a:a9:08:81:57:c8:f0:18:30:0d:5e:e6:13:82:
         ce:58:ee:c6:e9:76:50:c8:77:30:41:4b:76:c5:c7:d8:b2:9c:
         61:99:ee:51:5f:2f:08:9a:a2:e3:08:8f:fe:a2:9f:f9:1b:44:
         2f:30:6b:12:eb:83:32:e5:f9:12:ad:66:41:1f:02:87:61:88:
         c0:e4:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:20:11 2025 by rpki-client