Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          fgVQAJPQfKootkiXP/zUl6gmCinStsYZweUmsAHGRWI=
Subject key identifier:   59:17:3F:4A:85:C4:FF:48:27:F7:8B:C0:8C:C7:10:6E:3C:23:E6:72
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01A01CE64244B1D20B7DA6BE2B282D946E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1244
Signing time:             Thu 20 Aug 2026 02:00:47 +0000
Manifest this update:     Thu 20 Aug 2026 02:00:47 +0000
Manifest next update:     Fri 21 Aug 2026 02:00:47 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: rLbu6s/yDdxMvLdZpX8hbnbMrYZpBVt0ZKLbOdpj6qc=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1c:e6:42:44:b1:d2:0b:7d:a6:be:2b:28:2d:94:6e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug 20 02:00:47 2026 GMT
            Not After : Aug 21 02:00:47 2026 GMT
        Subject: CN=59173f4a85c4ff4827f78bc08cc7106e3c23e672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:58:53:7e:82:e7:55:88:97:26:2f:0c:4e:
                    ea:2b:5d:50:a5:a2:49:1b:04:12:b0:e9:00:01:8a:
                    5b:78:2d:f8:8b:cf:93:ac:4b:d1:be:e0:a1:d1:6d:
                    22:e0:0e:b9:7c:01:a7:71:e3:67:4b:5d:4e:b9:1f:
                    f0:43:e8:32:c2:4c:45:f6:04:07:7b:e2:42:a9:47:
                    a3:5f:ae:a2:39:fc:4a:f0:bc:c3:ff:d3:b0:b2:5d:
                    de:c4:32:af:da:b6:a1:5c:47:ee:a6:cf:cf:b3:39:
                    cf:c5:86:62:04:8d:55:38:34:ea:ef:d8:8c:49:f2:
                    97:4d:c8:83:60:11:48:a1:f6:17:b6:a4:f2:f8:b2:
                    d6:d8:1f:b8:9c:a5:27:6b:f1:60:44:90:ee:fc:2a:
                    26:2d:c6:f1:78:3f:42:f4:76:c3:ae:de:1c:0e:4b:
                    4b:c4:35:96:11:d9:04:0e:90:3a:76:06:cf:96:73:
                    8b:1e:9e:4c:c7:ec:29:04:80:fb:e9:c7:87:a6:ff:
                    c0:76:ca:32:e0:4b:f5:54:03:7d:a7:e8:d3:93:c9:
                    39:e3:7d:ef:d3:d4:00:8b:38:ed:d7:81:2d:c6:ef:
                    0b:44:79:3b:2c:bd:48:24:e3:49:e9:09:7d:0e:7c:
                    fe:b9:8c:4f:6e:a6:7f:0a:c5:42:b2:98:87:ea:97:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:17:3F:4A:85:C4:FF:48:27:F7:8B:C0:8C:C7:10:6E:3C:23:E6:72
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:b9:9e:84:67:ba:30:a2:31:f9:7a:03:92:75:ed:e4:50:
         81:cd:13:75:87:09:da:af:3f:3a:7b:bf:b0:90:c5:a0:30:35:
         ac:50:88:6c:4d:cc:96:e2:8f:f9:80:7f:cc:09:30:21:bf:ae:
         dd:e8:52:33:ee:01:8e:b0:8f:dd:95:5e:eb:3e:e1:ca:44:35:
         23:bf:92:89:91:da:0f:72:e1:2f:e1:eb:96:ff:23:d9:dd:86:
         76:9a:27:c5:63:cd:e9:97:29:c1:46:dc:e2:42:6b:1f:9f:93:
         50:24:88:75:75:e4:06:00:5f:01:20:70:70:05:cf:43:22:79:
         ec:4e:bd:1c:4d:99:d8:a3:34:ff:6c:6a:ac:cb:51:c0:df:57:
         1e:69:e8:1c:fb:51:18:2b:20:96:35:56:52:de:92:1e:e1:4e:
         ab:3f:65:0a:6b:d1:8c:6a:ec:4a:17:58:dd:66:82:dd:1d:02:
         e4:67:15:d0:31:2d:dc:e0:1c:c2:ea:8e:af:7f:e7:0f:2f:cc:
         a3:82:ac:68:07:a7:71:70:47:85:4b:14:63:87:49:ca:ba:6a:
         88:d2:b5:70:3e:71:88:0c:c8:fe:33:d9:62:1c:e4:e1:49:7d:
         ce:87:35:7a:3f:7d:54:f7:40:5a:2e:3f:10:c8:33:b4:07:42:
         a0:b6:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 11:03:51 2026 by rpki-client