Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          I7Mcl7H19TFVkpcRB5FX/GM/f2n1RDV4RgvJjsc1yig=
Subject key identifier:   CD:38:89:1B:23:BE:05:25:F5:42:F4:70:1D:C0:02:53:A6:0F:77:5C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019F72F504B61F95A4ED4885A73DD2CA3EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11EC
Signing time:             Sat 18 Jul 2026 02:01:27 +0000
Manifest this update:     Sat 18 Jul 2026 02:01:27 +0000
Manifest next update:     Sun 19 Jul 2026 02:01:27 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: gEwY3LxTiqFgsDaEcUU0yhB9XexwzHjaamG4yB3N6lI=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:f5:04:b6:1f:95:a4:ed:48:85:a7:3d:d2:ca:3e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul 18 02:01:27 2026 GMT
            Not After : Jul 19 02:01:27 2026 GMT
        Subject: CN=cd38891b23be0525f542f4701dc00253a60f775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:dc:e5:0a:d4:9a:b9:8e:07:2a:84:69:1a:
                    b1:58:3a:fd:4b:9f:74:df:1b:56:81:5c:74:b9:60:
                    6b:1e:db:d2:c8:de:e7:04:fe:05:63:c0:cd:e5:a9:
                    3f:7f:9f:c4:b0:22:6f:06:e2:4c:cf:99:a5:fc:35:
                    03:71:da:76:57:af:40:e8:53:b4:00:7a:df:a1:5f:
                    d3:05:3d:90:09:01:63:7f:6f:63:19:7c:26:56:f2:
                    97:3f:7a:25:42:fb:b2:5c:b5:0d:13:5c:d5:35:81:
                    bb:32:78:05:bf:dc:b7:42:6e:dc:0e:44:1a:96:9d:
                    db:a8:6c:e2:ef:f2:96:69:b1:36:07:66:8c:34:ef:
                    22:02:74:ad:bb:43:e7:66:a2:86:f2:49:c8:db:39:
                    c2:ec:77:a0:23:1e:d4:6a:1c:f0:aa:08:73:8e:81:
                    73:33:2f:56:9b:a9:c8:6b:b2:5d:62:5e:87:f1:38:
                    be:66:73:e7:c4:75:b2:43:6c:68:f9:89:e8:ed:fe:
                    20:54:34:a5:5d:da:67:2d:46:f3:ec:db:fa:06:2f:
                    d6:c7:6d:84:b5:5d:98:20:c1:a7:12:29:ff:ca:67:
                    9e:0e:fe:3f:7d:0b:ba:6e:a1:5b:78:b9:ba:99:d9:
                    cf:56:48:4f:c7:18:9d:c1:03:15:27:16:85:ed:8a:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:89:1B:23:BE:05:25:F5:42:F4:70:1D:C0:02:53:A6:0F:77:5C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:42:3f:ba:aa:62:03:f4:5e:0d:f4:20:80:93:99:46:70:2a:
         c6:36:0b:ef:7d:2f:a4:a6:7f:63:5d:5e:5b:1a:77:6f:ca:95:
         10:78:97:64:6c:2f:c1:fc:62:48:7f:c1:b2:9a:68:6c:31:9e:
         f1:5f:43:8b:6c:c7:37:04:de:6f:c7:7d:94:9f:26:4d:3b:fb:
         28:79:61:98:07:70:0f:c3:c6:e3:10:a0:11:f7:29:be:95:43:
         4f:13:c0:1a:e4:6a:24:fa:49:32:81:8b:44:72:22:ac:9f:0f:
         4f:9b:a9:6d:dd:36:4d:f4:70:a1:f1:97:70:c9:c4:ca:2f:c0:
         03:41:e1:f6:a8:9d:2d:96:41:b3:55:04:bb:3f:60:26:c3:7d:
         f8:0f:6e:c7:b5:89:81:72:1b:ec:af:37:20:51:c8:8b:a3:60:
         9a:f0:26:da:75:d6:53:e8:a6:ac:77:b5:ab:e3:a0:ec:dc:43:
         c7:14:c4:89:1c:33:8e:7b:ac:08:db:cd:a6:6a:47:a7:4b:39:
         4e:e2:39:5b:8a:09:f6:60:9b:98:51:7b:43:a2:59:e8:aa:0e:
         77:d4:d1:d0:4b:8d:0b:a4:78:3d:29:ad:99:f7:c9:9c:4e:d3:
         21:61:32:bc:de:dc:88:df:64:b1:ec:dc:34:b8:b4:9c:16:61:
         31:9d:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:12:35 2026 by rpki-client