Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          N+6SOXgRv6bKPof5BxwAjf70J9IUNvFNY8v3w7lGfh4=
Subject key identifier:   F9:74:9C:F8:1B:99:08:E5:93:C6:9E:7E:B5:8B:64:DD:17:5A:30:4C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019D3B2FA93FF5D3FE227B0A1C5250AA7BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          10C4
Signing time:             Sun 29 Mar 2026 20:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 20:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 20:01:12 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 7nHU5d9Rz4npI95iqinKvWLVcTHaQgDmxPkGY2CKcTI=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3b:2f:a9:3f:f5:d3:fe:22:7b:0a:1c:52:50:aa:7b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Mar 29 20:01:12 2026 GMT
            Not After : Mar 30 20:01:12 2026 GMT
        Subject: CN=f9749cf81b9908e593c69e7eb58b64dd175a304c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:fa:ed:33:29:25:63:bd:98:67:b7:e3:dd:
                    eb:02:4f:a3:ce:bd:d2:b3:e7:cd:a9:be:29:5e:4d:
                    f0:f6:bc:ec:3f:8c:64:e1:77:dc:04:e1:b0:e0:67:
                    ae:7a:28:48:a8:1f:ef:95:bd:00:e1:d6:38:c0:92:
                    6a:c9:60:4d:dd:84:de:ad:96:ee:22:58:d8:05:02:
                    d4:65:e2:8f:2d:f7:5f:c4:62:ea:62:23:95:7f:4a:
                    1b:5b:33:2a:bd:82:24:c6:78:40:c9:14:f5:07:5f:
                    c8:e3:97:16:a4:7a:36:78:b4:e4:7e:71:c8:ff:60:
                    bd:45:c0:07:39:ae:4a:59:ea:bf:74:9d:b6:5c:f4:
                    4f:78:de:d2:7e:f3:f5:2e:7d:3a:9b:e2:b7:31:c1:
                    0d:60:f6:b1:ab:be:e7:ae:f0:c1:0a:b2:4f:9a:56:
                    af:e3:fe:95:79:68:c0:17:f6:31:36:39:07:f7:bb:
                    41:49:5f:f5:56:46:ac:27:41:07:ee:21:57:e0:1b:
                    07:c1:10:a1:d0:db:88:95:28:d3:0c:39:6d:8f:9d:
                    07:be:8d:72:ba:33:ff:cc:37:ad:f8:e8:ac:5f:d6:
                    6f:96:c4:7a:b9:e2:68:00:10:8b:f2:72:c2:f6:7b:
                    41:1a:33:db:41:1c:7f:56:05:d1:41:e4:1d:4f:7b:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:9C:F8:1B:99:08:E5:93:C6:9E:7E:B5:8B:64:DD:17:5A:30:4C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:55:4b:09:5d:76:9a:6a:0f:62:62:d8:76:ef:b0:ba:03:c2:
         d2:a6:ae:a4:7e:44:bf:a3:93:f6:47:45:48:97:4d:6e:54:02:
         82:cd:33:ea:09:0a:a1:a4:f9:e0:3c:ff:37:ea:f4:7e:82:76:
         80:ff:00:f1:18:77:8f:48:d8:8e:b6:e6:7c:69:15:46:15:8d:
         18:a4:dd:da:6c:21:8b:34:b3:02:a8:03:e8:ab:4c:a7:1f:4f:
         54:07:3f:8e:f3:c5:91:b4:16:02:c4:33:20:c5:a4:27:ea:3d:
         a2:6d:91:e9:81:e4:e5:82:91:9f:c5:a4:8e:53:d8:9d:7c:41:
         58:73:36:26:1e:42:8f:06:03:82:3d:35:5f:e7:53:92:b5:11:
         00:9f:40:68:1d:dd:cd:80:f2:2e:99:a1:14:16:9f:68:ae:df:
         ec:67:26:15:a3:ac:5f:1c:eb:b3:55:bb:bd:ef:e3:ea:e9:2c:
         6f:32:be:26:79:23:51:27:bd:e6:44:57:f4:31:7c:26:d2:3c:
         e2:50:58:ec:b7:fb:0e:9c:d3:c3:3f:3f:49:e1:04:76:df:89:
         77:b9:e1:a7:6f:b5:14:c7:8e:24:cb:f8:3b:84:5b:ef:67:f5:
         f0:ed:8e:76:95:7c:46:61:99:15:0c:59:32:ab:c1:fb:79:50:
         33:65:ff:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ07L6k/9dP+InsKHFJQqnvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwMzI5MjAwMTEyWhcNMjYwMzMwMjAwMTEyWjAzMTEwLwYDVQQD
EyhmOTc0OWNmODFiOTkwOGU1OTNjNjllN2ViNThiNjRkZDE3NWEzMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jf67TMpJWO9mGe3493rAk+jzr3S
s+fNqb4pXk3w9rzsP4xk4XfcBOGw4GeueihIqB/vlb0A4dY4wJJqyWBN3YTerZbu
IljYBQLUZeKPLfdfxGLqYiOVf0obWzMqvYIkxnhAyRT1B1/I45cWpHo2eLTkfnHI
/2C9RcAHOa5KWeq/dJ22XPRPeN7SfvP1Ln06m+K3McENYPaxq77nrvDBCrJPmlav
4/6VeWjAF/YxNjkH97tBSV/1VkasJ0EH7iFX4BsHwRCh0NuIlSjTDDltj50Hvo1y
ujP/zDet+OisX9ZvlsR6ueJoABCL8nLC9ntBGjPbQRx/VgXRQeQdT3seBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl0nPgbmQjlk8aefrWLZN0XWjBMMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1VLCV12
mmoPYmLYdu+wugPC0qaupH5Ev6OT9kdFSJdNblQCgs0z6gkKoaT54Dz/N+r0foJ2
gP8A8Rh3j0jYjrbmfGkVRhWNGKTd2mwhizSzAqgD6KtMpx9PVAc/jvPFkbQWAsQz
IMWkJ+o9om2R6YHk5YKRn8WkjlPYnXxBWHM2Jh5CjwYDgj01X+dTkrURAJ9AaB3d
zYDyLpmhFBafaK7f7GcmFaOsXxzrs1W7ve/j6uksbzK+JnkjUSe95kRX9DF8JtI8
4lBY7Lf7DpzTwz8/SeEEdt+Jd7nhp2+1FMeOJMv4O4Rb72f18O2OdpV8RmGZFQxZ
MqvB+3lQM2X/Tw==
-----END CERTIFICATE-----
Generated at Mon Mar 30 02:11:51 2026 by rpki-client