Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Sh1L4GnGf0dRqCCnzSuX7G3jauALmIWjcC+ZoUZm+TI=
Subject key identifier:   88:41:B8:3C:61:B7:EA:2A:01:BA:6D:AD:32:5E:48:3D:06:0F:A6:7E
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019DA943F94CE500F547ED1EBF8861E1C067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          10FD
Signing time:             Mon 20 Apr 2026 05:01:37 +0000
Manifest this update:     Mon 20 Apr 2026 05:01:37 +0000
Manifest next update:     Tue 21 Apr 2026 05:01:37 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: U57asIsmuIih1ErN4POwKfamnza7FSQVlxX/UJCIdRQ=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a9:43:f9:4c:e5:00:f5:47:ed:1e:bf:88:61:e1:c0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 20 05:01:37 2026 GMT
            Not After : Apr 21 05:01:37 2026 GMT
        Subject: CN=8841b83c61b7ea2a01ba6dad325e483d060fa67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:46:69:14:2b:18:21:1f:3b:4e:90:c2:3f:
                    bd:f5:a0:51:76:75:a6:ba:21:2a:6d:1c:76:40:04:
                    49:8d:e6:4d:10:55:30:bd:61:de:5c:76:a0:b5:b6:
                    3b:40:dc:65:2f:f3:4a:d5:56:59:7b:e3:99:62:dc:
                    e7:00:13:b8:1e:a3:04:27:0f:1c:79:89:5a:c4:9c:
                    5c:23:86:ac:bb:75:a8:86:85:17:65:07:ce:01:45:
                    6d:bf:05:b0:c5:75:c8:f8:4d:d7:0e:d5:c1:da:1c:
                    41:c9:c4:0d:5c:42:3d:81:fe:e2:63:73:a7:1d:f5:
                    00:a5:7f:79:b7:46:33:3e:1b:ce:11:b6:dd:a3:c3:
                    31:a1:31:d7:51:33:d5:2d:37:15:29:63:ca:17:94:
                    50:12:ba:b9:0a:7b:9b:a6:95:fd:6e:e5:7a:19:09:
                    82:12:20:68:12:40:8b:c0:61:fb:80:4d:ce:12:6b:
                    94:10:d9:eb:41:89:52:86:ee:b5:3a:d6:c3:9e:3f:
                    41:a2:9e:28:5e:58:ca:5b:11:9c:a6:53:81:6a:11:
                    3a:c5:4e:cf:4e:1f:b9:c1:13:45:b3:4e:74:65:d4:
                    85:1c:f9:f3:25:44:e2:74:78:52:58:14:ce:1e:d8:
                    ae:5b:d7:81:45:3c:c4:d0:61:b6:f4:41:aa:a5:43:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:41:B8:3C:61:B7:EA:2A:01:BA:6D:AD:32:5E:48:3D:06:0F:A6:7E
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:69:db:84:c0:66:b0:c7:75:02:69:48:85:21:c7:81:11:82:
         e3:a8:83:75:81:d5:1a:4f:ee:d1:3f:7c:8b:86:35:5f:c6:95:
         69:91:85:54:b1:77:4c:fb:95:1c:c8:84:fb:00:98:74:6f:c3:
         ae:77:2d:2a:75:f4:45:dd:2c:1c:fe:4c:9b:38:97:9b:3f:b6:
         06:9f:e3:1d:6d:97:ee:2e:43:0a:ce:05:39:b6:12:f3:88:0a:
         08:a8:49:4f:21:3d:72:c1:db:f0:ea:c1:e6:ae:2a:b6:d1:ba:
         de:5f:42:de:be:2a:18:0a:67:0b:c4:0e:1d:70:eb:67:9b:a0:
         d7:46:11:34:77:cb:d8:29:eb:e8:8f:5c:23:79:f3:d7:17:6f:
         b5:1f:88:18:62:ff:54:55:e0:48:f9:56:33:4a:eb:1e:cc:74:
         ad:7e:f5:54:88:a5:99:ad:87:ae:71:b3:89:6e:b6:f9:76:c1:
         04:18:20:fd:6f:61:4a:c3:a9:e8:b8:dc:29:78:a8:a8:03:1d:
         81:70:b8:9a:f4:93:76:75:8f:de:53:3f:ba:95:53:c3:cb:9c:
         4a:f2:26:50:a1:9b:95:5e:64:77:b6:75:17:62:4f:c9:04:22:
         0f:72:3d:22:03:6f:57:0d:7c:90:b7:f1:0f:04:ec:6c:e6:44:
         cf:b6:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:28:37 2026 by rpki-client