Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          /i/Feg8kEpjgNZHtbOVTMIpYOP+/u0QX/EbYEBcKF8Y=
Subject key identifier:   DA:50:EF:83:29:53:73:12:D5:94:83:8D:5E:35:BC:B3:91:16:F3:8A
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019DE1458AB7E9E74186C5BFE9B584A80A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          111A
Signing time:             Fri 01 May 2026 02:02:04 +0000
Manifest this update:     Fri 01 May 2026 02:02:04 +0000
Manifest next update:     Sat 02 May 2026 02:02:04 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 49zXzFYTHPznghFashhvy8vW6V4PovZDNHlbwdrxaWo=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e1:45:8a:b7:e9:e7:41:86:c5:bf:e9:b5:84:a8:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May  1 02:02:04 2026 GMT
            Not After : May  2 02:02:04 2026 GMT
        Subject: CN=da50ef8329537312d594838d5e35bcb39116f38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:14:7f:28:41:a8:82:52:34:9f:fc:b0:55:
                    60:df:81:a0:e9:70:6e:2e:90:9e:9b:15:9c:7d:43:
                    6f:7e:9a:9b:ca:d4:f3:95:e7:e1:01:c1:1b:31:85:
                    a6:87:f8:9b:45:f6:e8:78:d9:6c:ee:0c:35:93:a8:
                    cf:8f:86:93:f3:4a:23:b9:11:ed:53:b1:64:b9:29:
                    8a:83:58:75:87:82:5a:0e:19:72:55:38:ac:6a:ae:
                    6b:9e:e2:fa:4b:f4:69:f1:b6:6e:66:9d:52:46:78:
                    46:89:c6:79:04:bb:f5:19:e8:b5:fc:df:20:84:e0:
                    df:5e:e1:90:cb:7d:20:53:96:1f:41:08:c6:99:2e:
                    1b:89:05:03:b6:12:df:c0:04:e6:c9:80:b4:9a:ea:
                    e5:b4:50:a1:47:f0:a3:92:f4:f6:f2:04:44:4d:73:
                    46:20:04:b9:47:6e:81:c8:66:89:1b:1f:28:44:e6:
                    67:da:f2:de:bf:ea:12:50:99:75:0f:02:e9:19:d3:
                    11:b5:ed:5f:f9:3b:18:6c:7f:e8:46:80:1c:c2:92:
                    99:c1:12:ff:61:6d:4e:7d:fd:ed:6c:a4:50:5c:e5:
                    71:a5:8f:0e:03:43:79:c4:1d:82:66:ae:de:1b:c2:
                    8a:e5:a4:8c:64:81:a1:fc:bf:6f:35:c3:22:58:d0:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:50:EF:83:29:53:73:12:D5:94:83:8D:5E:35:BC:B3:91:16:F3:8A
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:ec:cd:3d:1d:6a:66:cc:97:64:33:e3:1c:15:67:eb:ad:
         df:32:84:5a:44:cc:c1:61:02:b9:66:2b:58:4f:90:89:2f:19:
         43:06:67:09:4c:be:97:46:60:83:32:67:e4:4e:a8:99:27:a1:
         8c:16:3d:7e:2e:3d:0a:99:da:e8:36:ba:c9:96:ca:b6:f4:a1:
         53:cb:fa:ea:b6:30:e1:9d:45:a2:82:63:f5:a6:23:57:98:be:
         2e:b1:c1:b2:27:01:64:7e:7d:87:ff:d3:5e:19:90:32:42:55:
         cd:f1:61:32:85:88:b7:1c:10:75:04:54:6f:0d:f1:92:6c:c8:
         57:7e:ce:1f:59:24:eb:b0:d4:7f:81:1b:41:a0:c6:31:9e:53:
         7e:39:9b:7f:24:dd:53:16:2b:fb:b6:ec:0d:99:ef:2e:0a:8f:
         64:7f:91:26:c9:2c:da:e8:0a:e5:d0:20:5e:46:9f:dc:18:fb:
         e3:de:4b:83:d2:0f:11:e1:b2:29:6d:5b:e5:79:68:93:2a:08:
         0b:a4:fd:55:d9:3a:77:c1:a6:b5:eb:87:54:ab:c1:d7:ad:21:
         65:1c:cc:c5:87:45:57:9e:d1:de:44:d0:3f:a2:99:cf:3b:11:
         71:85:5a:30:dd:68:59:27:44:62:49:92:f6:68:42:18:b3:5a:
         c1:21:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:56:34 2026 by rpki-client