Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          WIczXtWnQaYIJmO9V13+9478voBc30T2uiCp8hMpeto=
Subject key identifier:   21:62:B8:D0:4A:E2:44:08:F0:A1:0E:1C:49:28:06:FB:6E:C5:BA:5E
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E7DB14927523156C8C3E2F10FD0AFD885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          116D
Signing time:             Sun 31 May 2026 11:00:31 +0000
Manifest this update:     Sun 31 May 2026 11:00:31 +0000
Manifest next update:     Mon 01 Jun 2026 11:00:31 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: XYrwMjza7e/mrPe0E2XM55zODdkbMIMysY2WplVjraY=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:b1:49:27:52:31:56:c8:c3:e2:f1:0f:d0:af:d8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 31 11:00:31 2026 GMT
            Not After : Jun  1 11:00:31 2026 GMT
        Subject: CN=2162b8d04ae24408f0a10e1c492806fb6ec5ba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:71:98:ae:f1:3d:05:61:2c:6d:76:21:01:
                    6a:0d:9b:13:b7:ca:7f:9c:ae:d8:75:34:e8:ab:ee:
                    38:8b:d6:2d:b7:8d:05:e9:d1:b0:c4:d1:5e:d0:b3:
                    19:49:c1:a1:e2:7b:fb:f9:46:1b:b4:e2:74:e6:8f:
                    04:0a:3e:37:c8:dc:d0:1d:a9:07:09:c8:ec:1c:2c:
                    c3:53:e4:8b:7f:f6:c5:94:ae:b9:09:8c:c0:02:1e:
                    16:a7:92:6d:86:e9:c9:b4:41:6e:de:37:2e:81:31:
                    28:cc:08:d9:7e:05:ca:7a:5b:7c:06:8a:a8:ec:d6:
                    7b:20:fa:3d:df:7e:44:cb:57:dd:8b:35:f7:b0:ed:
                    07:c9:34:ad:e5:70:0a:2c:48:dc:fd:1a:01:5d:89:
                    86:cf:8b:3f:77:1b:ee:9b:74:6a:a0:85:49:40:9d:
                    fe:9c:b0:3a:0f:b5:d1:d8:ac:35:fc:ca:62:c2:4c:
                    81:f9:e2:63:fe:41:a3:65:2d:f3:0b:0a:d3:93:6c:
                    4a:9b:ac:96:30:32:e4:26:d0:93:d8:59:17:f9:0f:
                    f4:07:f2:4a:e6:1a:d2:2b:14:4a:ee:46:4c:bd:25:
                    fb:3e:5e:00:7a:eb:b4:25:4c:b7:58:31:75:e3:d7:
                    6d:fa:57:fa:fc:22:14:5d:9f:66:3f:d2:f7:78:c8:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:B8:D0:4A:E2:44:08:F0:A1:0E:1C:49:28:06:FB:6E:C5:BA:5E
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:bc:09:cc:fd:a0:39:41:2f:20:53:da:46:0d:e2:ee:52:35:
         bd:4d:fa:50:03:c5:43:69:4d:87:53:67:ad:a0:00:b6:7a:16:
         38:cc:a9:cd:fc:c5:a6:bf:09:f6:72:72:49:b4:69:f3:72:5e:
         35:b7:ef:76:58:6d:2e:d0:50:b3:21:02:f8:f7:53:ec:69:77:
         e9:26:62:7e:c1:7e:ae:fc:b6:7e:13:c2:cc:44:10:eb:b7:86:
         cd:79:c9:0e:b4:d2:67:11:3e:97:b1:d5:bc:8d:f2:9f:cb:a0:
         8c:70:43:93:a0:56:8d:28:44:91:0c:ab:a0:96:b9:70:37:43:
         16:ad:5d:fc:b4:fc:ff:2f:67:ee:73:6c:41:4d:d6:e5:f4:82:
         e3:e0:0f:b2:ef:19:46:c5:f2:89:92:32:7d:64:f1:2b:68:6a:
         7f:b6:70:bc:a7:03:28:3c:ac:15:83:7a:d3:95:3a:69:7d:36:
         6c:c3:39:d8:b3:3c:69:2b:10:1d:6a:de:93:af:54:c5:6a:b0:
         72:1d:15:b9:39:cf:93:c6:03:0d:38:e5:c5:21:50:30:70:82:
         03:89:6a:50:ae:df:ea:30:79:89:28:ab:f8:86:d1:8d:ae:a4:
         55:ad:8f:7b:ba:af:97:79:48:62:59:7f:54:b4:6e:d3:ed:87:
         05:55:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 16:03:31 2026 by rpki-client