Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          +87NPwAmXuyGtaZVc9W2D5kz56KR8fX7fhUuX+mwfQE=
Subject key identifier:   48:58:C3:EC:BD:61:D9:CE:60:C0:A1:6C:C0:FA:E8:E1:39:1D:FA:D2
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019F93C8A239ED6DD835131E7DD83A27AFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11FD
Signing time:             Fri 24 Jul 2026 11:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:27 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: QRfE0YprQc6yimalVLcqMnX8lyJ0cyASjmDtEraO/sE=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:a2:39:ed:6d:d8:35:13:1e:7d:d8:3a:27:af:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul 24 11:00:27 2026 GMT
            Not After : Jul 25 11:00:27 2026 GMT
        Subject: CN=4858c3ecbd61d9ce60c0a16cc0fae8e1391dfad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:ca:9b:3f:03:68:c5:66:17:f4:0b:ff:9a:
                    39:44:23:4f:25:25:5a:bc:5a:a2:8f:08:36:e0:7f:
                    26:b2:6e:ea:2c:b6:1f:4c:a5:ef:e9:b5:38:7f:0d:
                    00:21:8f:21:e7:09:8d:ef:c2:c6:ef:0c:6d:84:8a:
                    bc:85:17:90:01:49:01:63:4a:3f:db:45:d6:a9:b0:
                    6b:9e:48:ad:9a:16:aa:36:67:be:72:cf:56:4a:9b:
                    8e:fb:e9:6d:0a:22:fc:9d:e0:e2:37:05:9f:b9:50:
                    04:9b:52:68:9c:b9:55:fd:09:2d:40:58:4a:7d:f2:
                    3b:ee:7a:66:29:b0:4f:d8:64:c4:bf:45:aa:d8:a7:
                    5c:f4:f8:76:49:27:bd:10:8b:39:2a:40:3f:04:83:
                    2a:e7:15:93:f4:d5:be:50:69:95:e0:a7:e8:69:b6:
                    09:87:5c:ff:5d:46:72:2a:10:3d:02:1e:7a:72:0a:
                    13:33:99:b0:3e:42:0e:56:1b:9f:df:35:95:fa:97:
                    e6:81:80:36:70:88:bf:18:11:56:87:f3:bf:d1:03:
                    03:0d:cd:b6:8d:6c:de:b4:70:97:ee:aa:2c:3d:eb:
                    67:04:ee:9d:4e:e2:74:77:70:3f:9a:b4:e2:bc:33:
                    d7:91:72:33:9a:ad:2a:eb:af:49:43:24:5c:f4:6e:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:C3:EC:BD:61:D9:CE:60:C0:A1:6C:C0:FA:E8:E1:39:1D:FA:D2
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:d0:d6:36:f1:74:b1:ce:1a:b2:f3:2d:89:ee:d3:39:4c:
         92:6b:bf:ed:73:92:d9:e3:3c:27:fc:2c:10:44:d0:ca:e3:3c:
         3c:ed:bb:57:af:2f:00:3a:20:86:1d:f4:2a:12:eb:a2:33:e4:
         9f:c0:86:e9:38:27:11:1d:e5:65:04:4a:d1:62:6d:0f:33:64:
         a9:b0:2d:22:18:09:da:fc:ea:17:5b:00:b4:bd:37:9d:f1:88:
         46:9c:86:65:31:cd:9e:b7:5b:6c:45:b7:bf:f3:66:bf:91:b8:
         b6:43:63:c4:db:f8:7e:77:6c:a3:11:0c:1f:82:6a:bd:98:55:
         b5:9a:d9:c8:91:e2:55:e9:62:b4:97:9d:bb:c5:fb:87:ca:b5:
         2e:bb:bd:d8:7b:b9:04:26:aa:03:c3:bf:73:ae:31:f5:55:f2:
         68:46:b0:b1:90:cd:38:9a:3b:07:1e:f9:f2:a0:08:8f:e4:6b:
         e1:6f:e0:f6:19:9d:3c:24:18:b5:cf:22:5b:5b:91:26:8a:a2:
         e6:36:e8:b3:f7:75:39:ad:ea:86:43:cb:d4:ee:4f:c7:6e:76:
         4b:56:cd:11:32:de:2c:13:eb:4f:61:34:8a:ff:4b:dd:61:ff:
         3e:eb:06:20:e8:1b:e4:8e:a8:5f:df:71:27:71:83:c3:70:d7:
         a9:cf:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:06 2026 by rpki-client