Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Wpe371bKb5PmoWejkpE6znWRkL0aeEcSTLm+sEFJKaA=
Subject key identifier:   87:F6:CE:41:48:91:B5:C4:E6:CC:04:FD:94:29:B7:BF:2E:DA:F2:6F
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E3FE5C88F11B57D0509F64943AAA04478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          114D
Signing time:             Tue 19 May 2026 11:01:24 +0000
Manifest this update:     Tue 19 May 2026 11:01:24 +0000
Manifest next update:     Wed 20 May 2026 11:01:24 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: Yv5Whlgj6QDyS9/Y948tkxMiA5VmsodicUGsHIMahIo=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 07:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3f:e5:c8:8f:11:b5:7d:05:09:f6:49:43:aa:a0:44:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 19 11:01:24 2026 GMT
            Not After : May 20 11:01:24 2026 GMT
        Subject: CN=87f6ce414891b5c4e6cc04fd9429b7bf2edaf26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:f8:e8:9b:04:56:09:8f:36:26:58:c8:79:
                    58:cc:3d:51:09:b0:ea:4e:10:85:92:0d:82:1d:f1:
                    a8:c2:ff:7f:ca:9e:a3:84:ac:4b:47:83:15:bf:d8:
                    7f:d8:83:de:79:4a:1a:30:3a:1d:e0:24:29:6d:fb:
                    6e:f7:e9:0d:3c:b6:37:77:3e:01:d3:1d:37:1e:db:
                    1c:4c:a3:da:8a:6d:44:be:73:93:2d:ed:23:48:8f:
                    ff:43:72:09:eb:b2:90:d4:0b:1d:f8:d4:a7:9d:d8:
                    03:6b:67:4d:60:c7:00:1b:82:56:fd:77:98:b4:20:
                    a4:03:bf:1e:11:f1:59:66:11:95:c7:ff:e7:bc:e8:
                    a2:96:7d:77:9b:2e:f2:98:25:c6:f3:eb:10:17:57:
                    5e:6b:b7:8d:80:7a:69:55:38:91:2f:ab:d4:db:d9:
                    8c:7f:68:8f:17:1e:55:57:e8:8d:83:44:ee:18:9b:
                    88:b8:7f:03:27:f7:1c:1e:23:38:ff:a6:c3:4a:de:
                    5d:6e:3d:07:7b:d6:8f:e2:a0:ce:98:19:77:d8:cb:
                    55:78:24:f0:2b:31:28:f8:bb:4c:64:91:c4:47:d6:
                    45:f5:5e:00:26:19:99:d3:36:a5:18:df:f7:29:5a:
                    a8:1c:41:97:83:4f:ec:78:8e:0a:13:42:a9:76:7c:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:CE:41:48:91:B5:C4:E6:CC:04:FD:94:29:B7:BF:2E:DA:F2:6F
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:97:fd:0c:45:32:63:bf:91:0d:db:34:a0:34:6b:9d:ba:
         e0:03:c4:78:02:56:bb:41:8c:df:9a:a0:fb:3d:7e:1c:ae:67:
         c4:e4:a7:be:fb:3f:21:09:a3:52:70:32:3b:33:51:3e:ca:e8:
         0b:9e:2f:91:47:76:eb:af:4d:9a:a5:2c:67:b4:46:fb:2e:bc:
         c7:b6:dc:c1:de:81:d3:a4:1f:43:5e:4d:d6:14:92:fb:9d:62:
         22:30:d5:43:5d:61:2e:ea:a6:a9:c8:6b:30:58:48:08:82:fa:
         87:ac:79:13:a2:48:a1:82:a9:79:23:17:95:a5:1e:3b:79:43:
         cf:cf:b5:05:8d:8c:6b:a4:e6:c1:fa:14:b3:33:e3:9e:51:ea:
         c7:24:cd:c4:a1:90:64:56:fb:45:bd:a4:88:de:b4:89:93:d0:
         2d:40:8e:a6:f2:c7:f7:85:96:e1:3d:90:88:12:5e:67:9b:8b:
         a0:ce:3a:24:85:24:98:33:5f:b3:36:99:b0:8c:47:53:1c:74:
         af:3c:99:b5:46:ae:21:02:00:bd:e5:5b:20:b1:3d:1f:af:f6:
         6d:7b:3a:81:90:ba:76:4d:e6:fa:80:22:fb:76:c0:74:3d:d7:
         1c:23:2f:6e:b1:1c:a7:85:f0:1d:8b:f5:c5:a4:a1:9e:4d:70:
         42:3f:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 12:57:22 2026 by rpki-client