Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          ShBj/PwaaH//Lrlifx4P5TNCMefLQRyMV9Byy9ZOmHA=
Subject key identifier:   9A:A2:76:8E:40:C0:92:8C:7A:1D:98:FC:6E:CB:BC:4A:F0:4F:FB:81
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019EEDB49A5EA56DCA6737E2FCED4FB3197A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11A7
Signing time:             Mon 22 Jun 2026 05:01:36 +0000
Manifest this update:     Mon 22 Jun 2026 05:01:36 +0000
Manifest next update:     Tue 23 Jun 2026 05:01:36 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 4g6IvpmcBWV+yFPFGu0Giw9OnFGyw3P5BpNBchDWm3w=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ed:b4:9a:5e:a5:6d:ca:67:37:e2:fc:ed:4f:b3:19:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jun 22 05:01:36 2026 GMT
            Not After : Jun 23 05:01:36 2026 GMT
        Subject: CN=9aa2768e40c0928c7a1d98fc6ecbbc4af04ffb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:f4:72:0f:d8:79:92:33:5c:e7:4c:55:cd:
                    7f:b0:f9:a2:eb:63:0e:53:78:51:38:de:ef:9a:76:
                    11:b4:21:6b:d1:cd:1b:b2:fc:4e:f1:c2:5a:b5:d1:
                    47:78:f6:42:1d:ac:73:ec:85:87:ad:f2:c4:69:c3:
                    5e:3d:55:8a:df:5e:06:80:68:a2:2b:28:56:5e:5c:
                    f0:61:a7:7e:41:c3:af:36:aa:9c:0e:3b:6d:dc:45:
                    0f:0b:c2:2d:d0:d7:2d:f6:0e:75:ff:21:c9:32:42:
                    ef:c1:c9:44:df:1e:b4:aa:62:1f:d3:2b:da:b4:ae:
                    20:8a:74:89:84:98:35:72:64:da:d0:2d:8d:a3:05:
                    fd:c6:2c:03:e8:1b:07:a4:9c:0d:bf:4d:b3:44:e4:
                    dd:b3:b8:91:83:00:39:44:06:4b:33:01:a8:dd:0f:
                    0f:f5:98:bc:a2:a2:fd:2f:05:27:c2:f3:f3:67:8c:
                    66:b7:73:27:51:e0:00:3b:ca:1f:e4:0e:13:76:15:
                    df:bf:81:d2:c6:cc:f8:28:95:59:e2:3c:da:12:14:
                    f3:ec:c6:cf:76:af:ed:6e:cd:a4:6b:19:da:b0:e6:
                    af:41:6a:6a:79:27:29:ed:da:48:8f:13:73:fb:99:
                    e2:c9:58:32:26:78:07:8d:a0:25:12:9e:bb:96:e0:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:76:8E:40:C0:92:8C:7A:1D:98:FC:6E:CB:BC:4A:F0:4F:FB:81
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:75:eb:03:b3:8e:f7:36:ff:26:c5:c2:e6:bd:bd:ba:5e:f2:
         28:f3:50:de:c9:fa:06:0d:78:54:70:f1:65:6a:9a:ed:97:60:
         29:e5:71:02:ab:90:ff:08:25:1c:ee:ba:0a:07:c1:66:34:16:
         81:fa:cf:c7:c7:5b:a8:9c:b4:dc:06:7e:0a:1d:12:a0:51:ab:
         ec:c3:85:c4:79:6f:e2:20:53:a2:88:0b:48:0a:2c:30:fe:49:
         23:19:bf:f4:ad:90:76:c3:0c:04:bc:bc:f1:45:51:ee:44:d9:
         91:f8:af:4e:2a:3f:a1:db:d2:b1:23:76:40:59:a5:8a:88:67:
         a4:cd:b9:53:c4:0a:0c:23:e3:76:ba:e6:b1:a3:72:bf:d1:af:
         75:57:ee:c9:07:80:8a:d7:fb:73:49:75:f7:d6:da:08:a6:3f:
         d4:d2:99:4b:e0:4f:86:0a:32:69:76:8d:9d:9e:99:8b:5d:65:
         04:7a:2b:22:01:c4:19:57:26:2e:cd:df:f6:8b:9e:3c:cc:3f:
         25:ba:43:20:26:6a:88:31:1e:46:0e:b4:5c:0f:cb:87:45:8b:
         48:92:dc:eb:2d:a2:35:a1:6d:8b:ba:cc:74:f9:73:3e:8e:f2:
         35:cf:9d:2a:06:da:32:04:42:d2:aa:57:3a:a7:5b:4f:cf:f4:
         72:d2:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 13:27:46 2026 by rpki-client