Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          PnowdnQIIm1wTfK8eyxJ2ce0OJA5cJSu1u071uTNqh0=
Subject key identifier:   D7:79:53:57:6B:F1:15:B5:9D:F3:A4:2F:6C:72:C4:40:D2:BB:AB:97
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FA33C1E16FDB0F711D107B8EE7EB44EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1205
Signing time:             Mon 27 Jul 2026 11:00:53 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:53 +0000
Manifest next update:     Tue 28 Jul 2026 11:00:53 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: dwaaIMfeAkB5j429/F62UMg2i0wLdUrUDPiA5LEVhZc=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:1e:16:fd:b0:f7:11:d1:07:b8:ee:7e:b4:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul 27 11:00:53 2026 GMT
            Not After : Jul 28 11:00:53 2026 GMT
        Subject: CN=d77953576bf115b59df3a42f6c72c440d2bbab97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:91:bf:cc:e5:a5:cb:6a:32:34:a0:3a:c7:
                    97:aa:40:5b:36:77:3f:99:a7:a5:32:e0:4c:60:ce:
                    d5:b6:7f:db:21:44:a3:3a:7f:a6:9a:fe:71:83:74:
                    60:26:c4:9f:84:af:80:f6:f8:73:aa:21:f4:44:a6:
                    6e:4d:74:cb:70:36:d7:0c:bb:d0:ef:c5:d7:29:06:
                    68:ac:45:c5:28:3b:f3:27:6e:e3:13:7c:d3:56:ff:
                    aa:1a:2d:52:68:a5:dc:5d:54:e1:14:ef:72:1d:70:
                    ed:9d:e1:41:d6:07:1b:a7:11:bb:c6:12:9a:98:62:
                    02:9c:20:8b:cb:0e:4d:77:fc:62:f0:d8:7f:8c:c2:
                    6c:e7:fa:a5:c8:ea:5e:d3:4a:20:e8:8a:d1:a3:8e:
                    e0:f7:78:b9:69:c1:63:54:23:ee:dd:b4:02:2f:22:
                    b7:21:b9:e6:7a:bb:4d:5a:cf:19:6c:9f:17:07:4e:
                    89:f4:cc:41:83:29:a1:83:ca:8e:ad:c8:1e:36:18:
                    b8:2a:3e:8a:fa:d8:32:91:07:74:d8:bb:98:3c:47:
                    b3:1c:75:27:d3:cf:f9:31:fc:97:21:4b:f1:96:79:
                    7e:8c:db:e5:30:72:01:30:5b:42:1b:e8:8c:dd:2f:
                    95:af:39:95:75:3c:5e:cc:5e:b7:29:34:bb:24:fa:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:53:57:6B:F1:15:B5:9D:F3:A4:2F:6C:72:C4:40:D2:BB:AB:97
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:4f:4a:57:a9:89:7f:2a:8b:b4:ee:1f:49:94:a3:84:07:
         da:ef:b5:d4:ba:0a:bb:9a:4f:1e:a8:ba:5c:7c:50:73:da:a8:
         60:8c:58:0d:9f:ba:00:11:ff:c0:aa:ba:d6:44:c9:a4:a9:64:
         c4:d5:3a:f2:59:ec:cd:cc:0b:00:28:0f:06:f7:5d:66:ff:a0:
         a7:01:74:22:02:cb:74:18:a4:6f:11:9d:1d:fb:ef:05:cf:17:
         7e:5b:d9:6f:23:2d:3f:27:75:a7:73:a7:98:8e:51:b8:d9:cc:
         db:44:17:43:cd:9a:81:31:67:be:bb:9e:02:c5:15:53:69:ac:
         07:17:33:90:46:07:ae:95:74:ff:36:86:47:17:2d:1a:f7:b2:
         a2:c2:c7:23:95:29:a6:0c:24:b7:ea:01:fa:09:50:95:b1:cb:
         2c:39:73:75:ff:d5:bd:99:32:c2:9c:1a:b6:ef:50:d7:cb:24:
         a5:ae:b4:85:33:fa:75:5f:8a:cb:1e:de:8e:04:eb:2a:1b:89:
         2e:ce:97:bd:3e:f0:11:e3:9e:1c:d0:5b:cd:42:44:f4:5a:1f:
         ef:35:c7:51:37:87:4a:75:c9:09:11:b1:ad:8a:20:72:39:42:
         39:ca:2e:3b:33:a3:45:0b:57:dd:dc:e7:f2:3c:51:16:02:3e:
         10:0f:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:54:20 2026 by rpki-client