Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          FACtccv2rqdCrdHwwK4v+2nX96YMi2Se1PoMXOrod1Q=
Subject key identifier:   B9:A4:E3:D3:41:66:96:9F:E0:29:29:97:37:F0:CD:71:9D:48:8B:05
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E5712C39B3EC879A4170AB6E9B7A6AE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1159
Signing time:             Sat 23 May 2026 23:01:47 +0000
Manifest this update:     Sat 23 May 2026 23:01:47 +0000
Manifest next update:     Sun 24 May 2026 23:01:47 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: k3Iy9ZCc1/PrEaX7Hs6eKXi/3COOpJt1HHzHbv39TsI=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:57:12:c3:9b:3e:c8:79:a4:17:0a:b6:e9:b7:a6:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 23 23:01:47 2026 GMT
            Not After : May 24 23:01:47 2026 GMT
        Subject: CN=b9a4e3d34166969fe029299737f0cd719d488b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:b5:af:e2:2c:55:b5:5e:a2:6a:ff:95:93:
                    72:fe:d9:5c:40:30:16:ca:d0:62:99:ce:35:94:92:
                    42:5e:ed:15:62:56:0e:12:81:67:5e:1e:16:64:9a:
                    90:54:ac:42:a0:b8:3f:71:fd:c7:9f:cd:5a:cb:18:
                    df:d5:8f:ab:25:7c:0e:6f:df:69:a8:6e:da:03:2d:
                    33:8d:df:3a:12:bf:3f:4c:07:59:ce:0b:48:3d:d7:
                    85:09:d4:08:0d:62:97:6b:16:3e:22:f6:29:f6:e0:
                    79:a8:58:3e:f9:2d:d1:f4:7a:54:bd:b6:f6:5e:05:
                    15:e9:e0:c9:27:ed:4d:7a:ea:82:bc:e0:6f:8a:68:
                    ea:cf:43:b7:ff:00:dd:56:8e:e0:85:ae:da:77:83:
                    54:44:37:14:52:73:85:fb:b5:bf:09:3b:56:69:c5:
                    26:80:54:90:19:88:03:cf:7e:5e:03:09:f3:dc:a1:
                    0f:ce:f2:10:e7:5b:63:d2:fc:3b:d8:eb:11:7e:c8:
                    28:95:59:8d:18:a2:d4:2e:46:57:56:17:b0:03:56:
                    4c:d5:ef:b0:82:5e:9a:dc:74:c1:79:f0:dc:7d:d0:
                    ab:8e:02:53:34:83:af:38:cd:7f:ef:b5:22:72:96:
                    6c:74:09:de:fd:80:72:00:2a:27:92:84:d2:42:60:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:E3:D3:41:66:96:9F:E0:29:29:97:37:F0:CD:71:9D:48:8B:05
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:eb:1b:4f:c5:1a:42:8a:17:0c:e0:87:b1:ae:1e:5d:66:
         11:b0:bf:2b:9a:2a:55:22:f9:3b:3e:70:ea:fd:d7:8e:5d:ef:
         ca:8e:36:f8:c1:4d:af:fc:e9:5f:65:e8:68:26:b9:6c:c0:2e:
         d2:63:17:2d:0e:c9:c7:53:6c:bd:af:ae:e8:48:c1:16:56:ae:
         cd:df:91:ef:ed:36:56:df:7c:02:80:4a:57:e2:93:1c:84:7f:
         0b:56:62:90:65:66:3a:95:38:8a:10:97:08:6a:ce:73:47:00:
         9c:73:c1:57:e7:a8:8f:34:10:5b:a7:8d:5f:aa:24:f2:e1:3d:
         69:41:d3:f2:bc:14:4d:32:b3:d4:ad:ed:52:fa:0b:64:72:5b:
         51:7d:df:2e:db:11:bd:99:81:7e:63:e1:40:09:62:72:60:65:
         29:61:f0:20:d8:d8:f3:5f:ee:86:b6:68:3f:52:3c:d0:bd:b1:
         25:0c:6c:dc:7d:79:60:63:e1:26:56:7d:4c:e8:1a:4d:1c:a2:
         cb:63:e1:2e:7b:86:5c:83:55:cf:fa:48:31:5d:c6:f7:fc:b9:
         38:e0:9b:bb:9b:ee:02:d8:78:d1:d5:95:8b:cc:5b:d4:d0:f6:
         86:de:15:21:6e:26:a2:e3:be:4a:d1:48:63:0a:b1:08:c5:0f:
         1b:91:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:02:23 2026 by rpki-client