Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          1joY7MkLzdHmAPo4SJHkaPt3rWBysm3VKAmusC8QpdI=
Subject key identifier:   DC:24:6B:64:A7:A9:EF:D5:53:2C:32:59:00:4C:08:72:78:4C:BE:B0
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A0AFAB03A7C4A71DED9E25305008FDC62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1290
Signing time:             Thu 17 Sep 2026 14:00:15 +0000
Manifest this update:     Thu 17 Sep 2026 14:00:15 +0000
Manifest next update:     Fri 18 Sep 2026 14:00:15 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: M9CqLwFi2Fojy+my13bC8EA05m2MB2sDJ3aDrDYf/lw=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:ab:03:a7:c4:a7:1d:ed:9e:25:30:50:08:fd:c6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Sep 17 14:00:15 2026 GMT
            Not After : Sep 18 14:00:15 2026 GMT
        Subject: CN=dc246b64a7a9efd5532c3259004c0872784cbeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:d9:5a:8d:6e:81:60:fe:d5:fe:c8:bb:45:
                    a4:1e:2a:82:01:ab:e5:cc:0b:26:20:98:e9:25:49:
                    ca:6c:08:dc:25:50:c6:20:32:d5:d6:99:48:37:f5:
                    7f:25:03:2d:aa:b2:d8:b1:b1:01:e7:b8:2f:9c:26:
                    31:50:37:29:3b:3f:bc:92:8f:5a:0e:06:e5:14:1e:
                    cb:ae:ee:24:63:ca:21:5e:32:77:ff:c4:10:d7:2d:
                    18:af:c8:b5:d2:61:46:c3:c2:95:43:fd:24:2a:eb:
                    3c:12:df:4d:03:64:3a:20:66:60:0b:cf:06:7a:5a:
                    df:26:48:f6:c4:b8:8d:bc:6b:75:a7:b1:91:77:92:
                    96:dd:37:7a:af:ac:ee:e4:89:66:42:09:0d:b2:b8:
                    be:9a:c9:d1:76:19:9b:bb:8c:1c:e4:85:05:ae:17:
                    de:a3:bc:c5:5e:d9:35:b8:4a:9a:8d:bf:ce:d1:c2:
                    6b:e2:54:81:7b:c5:b7:1f:f7:0c:2b:ef:98:b0:a0:
                    5d:c4:c4:9b:dc:99:87:50:21:24:83:73:08:0f:4c:
                    63:08:81:fc:b3:9e:dd:07:0b:a7:56:c8:2d:e8:41:
                    78:3f:a6:60:11:d4:d5:b6:33:54:35:7d:83:59:a3:
                    9a:30:c5:16:c7:a8:4e:e6:3c:d8:57:56:fd:97:19:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:6B:64:A7:A9:EF:D5:53:2C:32:59:00:4C:08:72:78:4C:BE:B0
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:aa:99:8c:91:ea:ab:91:32:35:f6:e4:65:1d:07:73:70:
         14:27:3a:22:1e:32:41:e6:cb:16:00:28:44:ea:ff:53:37:ca:
         2d:f2:8d:1e:a8:fc:0b:70:b9:db:89:5d:0c:a7:0e:7b:e9:0b:
         8c:c7:6b:ff:cd:40:50:1f:4e:ce:aa:c6:cf:88:2c:f4:b6:01:
         13:01:5f:6b:c2:91:bb:9c:48:30:7f:80:ef:9b:26:e8:81:eb:
         68:d7:7e:ed:7e:66:ca:40:cd:5e:60:4b:89:3c:f1:31:56:1b:
         69:20:5e:e1:a6:51:d1:4c:ab:d4:96:ac:41:30:30:22:00:0d:
         8d:e6:69:71:2a:8e:ad:e2:5c:72:21:cf:5f:eb:ba:0f:b6:78:
         9d:17:f1:02:0f:b3:fc:8f:93:b7:46:6b:38:9c:8e:76:48:46:
         ed:c2:c1:56:52:57:81:9a:df:c3:f4:3e:8d:7a:24:54:08:19:
         af:d3:4d:14:07:e3:ad:c3:c5:60:05:fd:da:79:97:0a:ae:ae:
         6b:97:17:cf:f4:ee:1e:01:30:22:41:23:67:93:6c:f2:2c:ee:
         6c:05:47:eb:c0:ba:ea:01:25:4d:5c:31:78:2e:ec:14:4d:97:
         f9:62:3b:7f:70:8d:23:89:b8:3e:45:8f:68:67:ad:33:46:b1:
         78:6d:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:47:51 2026 by rpki-client