Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          wdNc3K9zgdBR4PJ3CJI6VeOLfAZQ+Eq9JAVrwzih5Ak=
Subject key identifier:   F2:15:88:33:E4:E2:DE:CC:91:49:86:39:3C:A4:A6:1C:CC:CD:49:A1
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A08341612D69CBD9681C78380AECEFC170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1279
Signing time:             Tue 08 Sep 2026 23:01:35 +0000
Manifest this update:     Tue 08 Sep 2026 23:01:35 +0000
Manifest next update:     Wed 09 Sep 2026 23:01:35 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 2fHEeleYzi12FHoH2edOl2EWvgVWq1Ag0zKcUMtk5E4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 23:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:83:41:61:2d:69:cb:d9:68:1c:78:38:0a:ec:ef:c1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Sep  8 23:01:35 2026 GMT
            Not After : Sep  9 23:01:35 2026 GMT
        Subject: CN=f2158833e4e2decc914986393ca4a61ccccd49a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:4b:50:47:8a:80:57:12:ce:bc:0b:10:69:
                    8e:b8:3d:f9:49:a0:d2:de:2d:d8:29:19:81:65:f8:
                    ed:c8:68:b3:72:97:1d:38:f0:9f:de:23:af:ff:02:
                    08:d5:fe:a1:54:c6:0a:a7:9d:ab:20:4d:fe:f4:1c:
                    73:80:98:f9:6e:86:f9:46:47:9e:76:6e:14:a0:ce:
                    7f:bb:29:4c:25:de:6f:d2:3a:d4:06:5d:f7:0d:87:
                    16:d0:08:31:b9:f9:70:c4:64:06:24:1a:c1:24:17:
                    53:91:c7:b6:1f:9d:0f:fb:e0:69:28:5d:a8:a5:c9:
                    6d:81:f2:ae:39:9e:a9:25:0c:06:ce:85:61:5e:cc:
                    12:cf:79:a9:4b:56:7f:ed:15:c9:f5:09:74:58:c5:
                    81:a0:1c:7f:15:1c:c9:80:19:a4:7a:0c:17:27:ab:
                    4e:73:bd:16:ff:36:03:6b:b7:d2:3a:f5:73:44:1b:
                    2a:00:5a:07:5a:dd:96:d7:90:97:36:54:0e:74:34:
                    eb:cc:d0:55:f4:0d:a9:44:cd:d5:eb:db:94:52:31:
                    4d:ce:56:8d:30:b8:5a:2d:b0:36:02:4f:2d:1e:c5:
                    3a:a5:37:90:46:04:75:3b:ba:ca:88:d1:37:89:6b:
                    c8:18:96:55:fe:78:f2:f8:5d:2a:c0:36:22:f7:52:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:88:33:E4:E2:DE:CC:91:49:86:39:3C:A4:A6:1C:CC:CD:49:A1
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:87:13:48:ce:f8:9e:28:65:74:ed:86:c1:ba:67:84:5d:
         19:33:c4:e8:09:56:1b:a7:a8:63:96:7a:a7:85:94:99:0d:c3:
         a8:3f:04:7b:08:f4:21:0e:05:8c:6a:d6:6b:b8:66:85:c7:e1:
         e8:fa:7e:df:18:98:16:fe:56:09:59:0a:81:af:fe:b3:2c:76:
         6a:7d:40:0c:cf:19:34:cf:e6:de:64:6b:f6:2b:72:ae:a5:51:
         b3:d9:a8:28:45:39:81:80:bc:7f:6e:ca:d2:bb:4c:e6:79:a4:
         1e:bd:fe:10:79:70:ab:d5:0e:5e:52:0e:fe:06:6f:ec:15:8f:
         36:fc:48:f6:6a:6b:f5:82:51:0c:e8:74:6f:82:df:c4:8c:61:
         cd:1a:df:d9:ef:b9:de:16:77:4b:31:2e:16:93:14:14:29:63:
         63:8d:5e:99:3f:9b:62:bf:d3:ef:40:73:b5:7b:b3:f9:8b:13:
         19:2b:87:16:10:dc:ab:d9:ac:bf:da:d9:71:31:d4:57:76:e4:
         6f:eb:a5:8d:15:c3:23:bd:98:f6:4a:75:d2:d9:d0:69:74:e1:
         9e:fb:bc:c1:4f:45:81:75:29:6e:5e:66:e5:52:32:66:af:79:
         cf:a9:69:f8:1d:32:5e:a7:fa:4c:1c:c5:4b:a5:1e:b5:13:1b:
         a9:1a:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 09:36:55 2026 by rpki-client