Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          mT35u7IgrRga622wJ6cVWr+1aTUZY8QQW1GiYj6UZPc=
Subject key identifier:   D9:9E:EF:76:E7:D6:1A:DD:01:B4:BD:6C:2F:88:84:75:6B:CA:4F:A7
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FFE00E48B5C9B2F89974966F00C38FDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1234
Signing time:             Fri 14 Aug 2026 02:01:39 +0000
Manifest this update:     Fri 14 Aug 2026 02:01:39 +0000
Manifest next update:     Sat 15 Aug 2026 02:01:39 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: H0GIK4yLi/wqqiS3K0P2qGcosoZhk4bb3th4ZqiAju4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:00:e4:8b:5c:9b:2f:89:97:49:66:f0:0c:38:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug 14 02:01:39 2026 GMT
            Not After : Aug 15 02:01:39 2026 GMT
        Subject: CN=d99eef76e7d61add01b4bd6c2f8884756bca4fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:d3:3e:1d:8d:16:f8:36:75:c8:7e:7b:46:
                    a6:f5:1a:91:65:a8:b5:28:b5:5d:de:33:b2:7d:3f:
                    e2:00:e1:2f:8d:86:ed:31:5f:fd:ba:bb:ae:c3:fd:
                    5d:9d:ae:21:2f:3f:6d:df:ac:76:a7:d4:ab:05:c0:
                    8f:85:36:77:13:d8:a8:2d:a3:5e:7e:bb:3f:0d:74:
                    01:93:b7:a3:7f:5e:f4:ae:bc:40:0e:21:9d:57:0d:
                    fa:be:b9:d7:de:98:c7:5f:77:33:73:ae:26:4b:31:
                    61:5d:43:77:8e:da:42:7e:85:c4:1c:81:ad:a1:4b:
                    03:5b:29:56:1d:ff:1e:02:50:e7:d1:76:76:b9:cc:
                    25:81:3a:f6:21:81:b8:ed:d5:2e:96:e9:40:f1:bc:
                    b7:ee:2f:55:5b:23:9d:ec:41:f4:d9:1e:7e:ec:bd:
                    ea:cf:ed:c6:33:21:87:9e:1e:d8:12:b8:e8:bd:de:
                    33:86:b4:e0:99:a6:9b:60:03:ef:69:f5:db:3f:83:
                    a7:03:f1:f4:15:8f:fd:7b:f5:8f:fd:ad:38:4e:a0:
                    20:25:82:ab:57:21:d4:84:45:4a:a6:4c:0d:50:fa:
                    74:74:20:8d:f8:ea:0e:65:55:5b:9b:f9:de:53:de:
                    66:2d:db:6c:b5:cb:a1:fa:02:b8:62:07:90:f0:4e:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9E:EF:76:E7:D6:1A:DD:01:B4:BD:6C:2F:88:84:75:6B:CA:4F:A7
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:6b:23:39:7f:1b:a9:cb:4c:0e:2d:84:9d:88:2f:1f:13:
         cf:a2:57:4f:df:28:fc:96:8a:ab:a1:31:fe:12:74:88:c3:06:
         83:08:12:1b:58:8f:7d:52:e0:dd:b3:3c:b9:2d:9e:11:8c:b7:
         65:27:f7:b7:3a:b7:bc:45:c1:54:9d:ba:5f:75:8c:7e:26:2b:
         22:60:50:eb:d3:75:1e:b4:98:b0:63:ae:61:fe:e4:50:fb:a9:
         06:8e:a1:52:c0:41:80:85:a3:8a:25:24:36:b5:2e:65:7d:3b:
         cd:7f:47:da:d3:ac:df:37:83:1b:f0:67:33:52:2c:c4:46:4d:
         6e:1a:cb:c9:3e:96:99:cd:87:44:23:60:aa:a9:7b:2a:54:de:
         aa:e3:09:de:60:a4:16:ff:8a:5b:41:5a:09:f7:67:bd:da:bf:
         50:43:3a:bc:13:64:70:dc:1a:32:d4:27:fa:aa:af:e8:49:ec:
         f6:f3:a8:66:46:3f:d3:4c:b1:f7:82:7f:cf:d8:ba:5b:77:0d:
         d7:4c:b7:23:b5:52:ac:90:6c:cf:d9:25:fc:e2:14:89:84:79:
         c5:27:4c:41:b3:e4:7b:27:35:e6:b0:64:78:aa:4a:14:6d:ef:
         ce:e1:63:4c:ff:06:f8:a6:d3:29:fe:08:b0:cb:78:f1:4b:31:
         29:9b:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:58:08 2026 by rpki-client