Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          vaoRhtf9DytIYY6bKNNhWzbOPU4LQB8NR/LhNIEdYB8=
Subject key identifier:   37:66:A7:0B:11:9B:68:F4:71:8B:1D:D9:70:96:FC:EF:0A:7A:80:1C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019DD1D2987CCFD096CB268551A121556223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1112
Signing time:             Tue 28 Apr 2026 02:02:12 +0000
Manifest this update:     Tue 28 Apr 2026 02:02:12 +0000
Manifest next update:     Wed 29 Apr 2026 02:02:12 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: Q2gAV+a5e2PMWIUYKlBye3i1xWk7Q8AkGvU3sPW1IjU=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:d2:98:7c:cf:d0:96:cb:26:85:51:a1:21:55:62:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 28 02:02:12 2026 GMT
            Not After : Apr 29 02:02:12 2026 GMT
        Subject: CN=3766a70b119b68f4718b1dd97096fcef0a7a801c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:30:c1:f2:ea:eb:af:48:27:fd:4e:53:92:
                    57:07:c3:2f:25:69:b5:4f:e3:bd:d7:b6:2b:2d:42:
                    aa:44:ef:a5:c6:2a:bc:62:dd:0e:e1:51:55:22:48:
                    ae:71:07:2e:fd:d9:7b:b4:06:bb:f7:a0:d3:f4:ca:
                    2c:8e:8a:1e:cf:e1:16:16:ef:43:5a:8d:d7:b2:75:
                    7b:de:ea:8f:36:38:df:34:8b:83:18:28:5c:69:29:
                    fa:1e:0c:da:53:63:b4:02:15:6b:b4:1c:37:c8:56:
                    f5:dd:59:6d:8e:24:e8:37:ea:1c:c8:71:d4:50:89:
                    e6:da:9b:c7:65:1d:8e:b7:d8:89:79:aa:72:b8:d4:
                    3c:bc:be:ac:74:c2:10:a7:6c:66:0b:d0:bb:f3:5f:
                    c5:6c:7a:ad:89:cb:e4:6e:0f:35:dc:be:18:e7:00:
                    31:b9:b0:1c:60:e0:82:70:36:8d:6e:9b:fd:09:31:
                    12:91:ab:ca:10:f3:d4:80:47:b4:2a:bc:90:52:1c:
                    81:ce:96:ee:58:16:53:8e:41:52:c9:3f:b9:75:ad:
                    ec:51:9d:e4:de:1b:6e:16:c8:71:0e:8d:e9:6c:b7:
                    82:03:61:77:e1:5f:ee:2c:c9:12:7b:85:76:59:7f:
                    d4:a5:6a:05:5b:6d:b9:bf:e5:0b:fd:fd:7d:8f:36:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:66:A7:0B:11:9B:68:F4:71:8B:1D:D9:70:96:FC:EF:0A:7A:80:1C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:8b:17:ee:6d:cd:e2:a7:5c:7f:79:a2:80:20:ea:a6:b5:
         9d:c0:78:39:87:d3:ff:56:4d:41:50:d8:37:b5:dd:cf:df:6d:
         d8:a2:99:a4:a6:2f:98:31:26:c8:83:2a:d5:2a:ac:44:fa:41:
         e9:50:bf:2a:9c:e2:60:d9:0f:11:0f:30:4b:43:2c:d1:49:1e:
         bc:de:94:94:ff:70:6d:ab:62:f8:eb:56:46:5c:12:3d:f8:ff:
         04:df:44:ba:ea:29:61:a1:66:10:27:a1:ae:ad:2b:41:03:20:
         0e:94:26:c7:5f:ca:e6:c3:f9:e6:5e:df:39:5b:91:33:22:d0:
         44:c3:c4:75:54:76:7f:58:28:18:98:18:d9:b6:62:09:2d:bf:
         14:d5:55:59:7c:61:65:70:4d:50:59:aa:ae:0f:df:b2:96:0e:
         65:ed:e1:f6:f1:9c:30:5f:e8:83:3c:f7:db:c4:e5:ee:d6:af:
         41:c5:af:c8:d4:05:79:c2:68:58:13:95:5c:df:0b:b4:4a:49:
         44:e3:89:cf:6b:97:db:a2:0a:b8:a0:65:5f:e9:88:ab:34:66:
         6d:65:2d:22:4e:7d:82:b8:14:63:fd:14:6b:cd:b6:1f:ec:78:
         b7:24:ee:ec:6d:b9:c9:1e:82:f6:4c:ec:b1:94:de:b8:cb:04:
         36:b8:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 10:12:39 2026 by rpki-client