Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          io0eTBSB4ftVX5RgmrQqfXrZclx9BbAQbnWke3N74PY=
Subject key identifier:   B2:40:ED:2F:87:3C:CC:58:1A:CF:DC:8C:8B:A3:03:B1:8D:FA:43:35
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FC4114B1A4CB6014385D774A00B909ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1216
Signing time:             Sun 02 Aug 2026 20:01:35 +0000
Manifest this update:     Sun 02 Aug 2026 20:01:35 +0000
Manifest next update:     Mon 03 Aug 2026 20:01:35 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: YEFEdrXQxv3FDs3tYIq9nMWxvsiRNMABxH70e/ccCbg=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c4:11:4b:1a:4c:b6:01:43:85:d7:74:a0:0b:90:9e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug  2 20:01:35 2026 GMT
            Not After : Aug  3 20:01:35 2026 GMT
        Subject: CN=b240ed2f873ccc581acfdc8c8ba303b18dfa4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:72:14:08:05:2a:3d:1e:22:8f:28:c7:a0:
                    40:3c:c7:28:d4:7b:98:e0:81:d5:52:f7:f2:c9:dc:
                    a8:10:31:0c:21:2b:a8:c6:f7:20:0d:a6:9d:b8:94:
                    34:51:20:f5:bd:55:15:cd:88:f4:64:db:8a:4e:be:
                    5f:e2:bd:55:08:c7:e1:f3:20:1a:82:d9:76:9d:2e:
                    e7:2b:03:61:8d:6b:50:05:b5:c7:99:81:3e:ea:c9:
                    08:27:63:00:86:ac:48:1a:1d:6f:72:b3:06:4f:0d:
                    de:9c:ad:19:75:fa:1f:ca:1c:01:b5:55:fc:b2:f1:
                    90:71:ef:7b:32:03:ec:f9:01:e0:0f:12:4a:15:21:
                    03:7b:53:15:ef:22:65:88:b4:f0:00:f7:a8:3f:00:
                    11:9d:38:2d:72:2d:06:69:7e:5d:ef:b8:41:69:6c:
                    c2:3c:3b:c8:af:8f:59:d3:cc:3f:c9:2a:bb:2c:08:
                    e6:ec:d6:34:33:18:50:a5:08:06:78:64:41:a5:be:
                    c9:66:b5:5c:a6:26:20:48:0b:3f:0f:d6:82:b2:fd:
                    10:36:25:42:68:f2:4f:c7:88:83:ab:36:6e:2a:ed:
                    94:f9:6a:ba:24:81:a6:84:7d:d0:6e:cb:fb:4d:0e:
                    30:11:5b:40:15:d4:f1:e2:9e:e9:6a:72:68:c1:33:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:40:ED:2F:87:3C:CC:58:1A:CF:DC:8C:8B:A3:03:B1:8D:FA:43:35
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:1b:41:15:7a:3b:9f:26:ef:b2:49:a9:20:e2:65:87:3f:
         39:2f:f6:94:bc:cc:42:88:a0:67:bc:22:8d:58:5c:8f:a0:36:
         cb:42:0e:d5:1a:b8:dd:3d:32:67:f8:0f:b3:6e:25:ad:95:a7:
         44:27:72:80:ce:8d:ab:c9:80:f1:e4:9c:71:a6:f5:ae:c5:57:
         ba:c7:99:85:07:60:76:d1:71:b4:72:59:8b:bb:38:6d:ef:81:
         65:55:80:94:0a:61:10:92:11:31:f9:f4:3a:3b:40:b3:8f:0f:
         5b:49:b6:a2:c8:81:a6:85:1e:11:60:6c:a1:c8:7f:bd:72:b1:
         d9:42:10:9a:1b:a9:32:a0:33:8d:97:07:6d:45:9f:8d:93:46:
         82:16:36:08:14:dd:99:70:bc:29:ac:e4:72:cc:02:37:64:6c:
         59:3b:54:bf:fd:f6:27:3c:d1:8e:07:a5:7b:1b:de:19:86:6e:
         16:a8:69:35:f3:19:47:fb:ce:82:26:3f:74:0f:85:41:e6:b1:
         85:27:e4:9c:4c:f9:ad:e0:17:8c:e2:1b:f4:a8:63:10:74:60:
         ec:46:04:43:67:85:c2:d9:82:3f:c2:ee:13:91:6d:92:59:ed:
         8b:aa:a2:8b:3b:18:8f:fe:ec:44:51:ff:96:32:26:87:ec:6b:
         6f:02:79:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/EEUsaTLYBQ4XXdKALkJ7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwODAyMjAwMTM1WhcNMjYwODAzMjAwMTM1WjAzMTEwLwYDVQQD
EyhiMjQwZWQyZjg3M2NjYzU4MWFjZmRjOGM4YmEzMDNiMThkZmE0MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lJyFAgFKj0eIo8ox6BAPMco1HuY
4IHVUvfyydyoEDEMISuoxvcgDaaduJQ0USD1vVUVzYj0ZNuKTr5f4r1VCMfh8yAa
gtl2nS7nKwNhjWtQBbXHmYE+6skIJ2MAhqxIGh1vcrMGTw3enK0ZdfofyhwBtVX8
svGQce97MgPs+QHgDxJKFSEDe1MV7yJliLTwAPeoPwARnTgtci0GaX5d77hBaWzC
PDvIr49Z08w/ySq7LAjm7NY0MxhQpQgGeGRBpb7JZrVcpiYgSAs/D9aCsv0QNiVC
aPJPx4iDqzZuKu2U+Wq6JIGmhH3Qbsv7TQ4wEVtAFdTx4p7panJowTOZqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJA7S+HPMxYGs/cjIujA7GN+kM1MB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmobQRV6
O58m77JJqSDiZYc/OS/2lLzMQoigZ7wijVhcj6A2y0IO1Rq43T0yZ/gPs24lrZWn
RCdygM6Nq8mA8eSccab1rsVXuseZhQdgdtFxtHJZi7s4be+BZVWAlAphEJIRMfn0
OjtAs48PW0m2osiBpoUeEWBsoch/vXKx2UIQmhupMqAzjZcHbUWfjZNGghY2CBTd
mXC8KazkcswCN2RsWTtUv/32JzzRjgelexveGYZuFqhpNfMZR/vOgiY/dA+FQeax
hSfknEz5reAXjOIb9KhjEHRg7EYEQ2eFwtmCP8LuE5Ftklnti6qiizsYj/7sRFH/
ljImh+xrbwJ5Vw==
-----END CERTIFICATE-----
Generated at Mon Aug 3 01:20:50 2026 by rpki-client