Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          9uMWfhn52oBiherO1u8wJBgWz4Ru+bAIdFkC90ChjMo=
Subject key identifier:   A5:44:59:20:DE:7E:F5:15:C3:81:3E:21:9E:9A:42:4C:10:C0:42:AA
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019EC336FBA9A0DB27EA8EBFD81207459117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1191
Signing time:             Sat 13 Jun 2026 23:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:20 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: DrKDksphqd13hNpeEQWdUSt150HIWjhcV3gQ6soH22k=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:fb:a9:a0:db:27:ea:8e:bf:d8:12:07:45:91:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jun 13 23:00:20 2026 GMT
            Not After : Jun 14 23:00:20 2026 GMT
        Subject: CN=a5445920de7ef515c3813e219e9a424c10c042aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6e:12:d4:40:69:8e:c8:98:58:26:ca:0f:de:
                    bb:88:0b:c5:ff:e7:68:3c:da:45:9c:5e:60:84:04:
                    7a:b7:2b:04:36:3f:77:07:dd:15:ec:06:63:f3:9a:
                    a3:24:81:19:05:76:ea:f5:07:79:c4:74:33:dd:9f:
                    42:f5:84:7e:8f:2b:87:f4:ae:12:63:7b:1d:fe:3f:
                    76:98:31:00:ec:ca:1b:db:57:3f:77:03:c0:ec:9c:
                    fb:6a:b2:5d:38:55:1c:ab:0c:41:4a:78:1c:34:1e:
                    f2:7c:1d:d9:38:04:ee:f0:b8:ae:42:fc:1f:30:5e:
                    59:1d:80:d4:b0:44:8f:db:10:60:ab:c7:e3:af:a2:
                    05:0b:81:87:71:84:07:ac:4e:63:56:a9:bc:b0:fa:
                    22:b4:29:06:22:dd:01:0b:0c:39:f2:08:2b:35:e5:
                    ba:b2:3f:e7:c6:de:e2:74:0b:b6:82:aa:d1:57:2b:
                    d6:77:9c:b6:ea:f5:da:9e:7e:7d:f5:f1:84:f5:b4:
                    e7:0c:b8:f3:c8:fa:b7:27:1a:d6:bf:73:dd:8b:47:
                    58:0e:04:d0:65:b7:b3:42:3a:9c:bb:61:41:40:80:
                    c3:e8:b9:69:da:22:a3:9c:cc:94:9b:12:4c:ec:8c:
                    87:f9:05:b1:eb:0f:6e:0f:02:ec:8d:26:ff:dc:fd:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:44:59:20:DE:7E:F5:15:C3:81:3E:21:9E:9A:42:4C:10:C0:42:AA
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:eb:92:19:5a:b1:9f:fa:c1:23:5b:a0:0a:84:55:26:21:
         bd:60:e2:4a:19:9a:22:82:ef:9e:fb:47:82:cd:53:0c:1c:14:
         9f:ee:ec:6b:f7:c4:0d:71:1e:aa:d0:05:60:7f:f1:ef:31:ca:
         21:d7:9d:b1:56:45:c2:46:89:62:9b:db:cd:71:4f:47:1e:bd:
         32:1f:e8:c0:44:d1:00:2e:76:39:3d:86:e6:ea:25:c6:1e:0e:
         52:e5:8a:50:88:39:86:11:26:c4:02:b0:1d:35:5a:b0:6c:7d:
         df:f2:3b:18:89:7c:40:2d:fc:67:e1:30:8f:cd:ba:24:ed:8f:
         38:f2:48:b4:45:f2:99:c8:76:76:d2:0b:78:35:2d:5c:1c:a9:
         af:55:4e:f3:3a:c7:17:f8:dd:b1:51:92:69:91:94:ec:dd:12:
         d9:be:11:d0:dd:2e:45:fa:51:a8:c2:cb:96:54:13:a5:15:cc:
         d0:95:0d:53:d8:b8:5a:12:a4:20:78:bf:48:d3:da:2e:67:80:
         8a:d2:54:b2:74:11:c8:ce:24:9b:1d:51:b6:cb:64:1c:67:62:
         2b:2a:0c:c2:24:7a:74:58:4c:64:ba:89:da:eb:de:59:a6:19:
         39:85:c1:55:87:dc:ae:33:bb:7f:31:95:79:08:5b:fb:d5:62:
         a5:c8:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:21:11 2026 by rpki-client