Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          fKyfU2ETf9xoYvmsH84Ex+Z+sCsD09qEN3Zz270QM6g=
Subject key identifier:   91:0A:DE:DB:51:92:74:32:72:8C:CF:C6:47:02:B5:5B:96:2E:6D:6C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E344FBE8D25F718696A09BA32216E4178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1145
Signing time:             Sun 17 May 2026 05:01:41 +0000
Manifest this update:     Sun 17 May 2026 05:01:41 +0000
Manifest next update:     Mon 18 May 2026 05:01:41 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: G1YoFkVgJKMeiydGcaOHOuWuFsjGBSonKOwdTf83tRM=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 18 May 2026 05:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:34:4f:be:8d:25:f7:18:69:6a:09:ba:32:21:6e:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 17 05:01:41 2026 GMT
            Not After : May 18 05:01:41 2026 GMT
        Subject: CN=910adedb51927432728ccfc64702b55b962e6d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:f4:d8:27:f2:8e:30:b8:2c:46:ae:b4:0b:
                    4f:fd:96:5d:87:a3:59:93:2c:34:db:85:e4:5d:e8:
                    63:7b:e5:e5:4c:e6:b9:2e:56:19:6c:98:dd:30:8b:
                    57:95:94:2e:74:56:86:57:7a:4d:19:d2:d8:e7:0d:
                    a4:39:f7:d5:2d:d4:63:21:60:b5:4b:54:4d:b9:3b:
                    8a:18:a4:3c:b5:9b:a9:56:53:e7:c8:90:3e:8d:64:
                    f9:0e:ea:30:76:4c:7c:f2:a4:88:a9:5a:45:a2:16:
                    a0:38:f0:da:bf:45:a2:2a:ec:cc:28:49:bf:c5:fa:
                    b1:28:45:70:0d:f9:f0:0a:a9:6e:8a:49:08:ac:e3:
                    18:26:ed:9e:aa:87:0b:9e:21:8d:22:f0:67:a7:b1:
                    7b:7e:f7:61:c6:27:e0:19:0d:0b:b6:c2:9c:1c:d3:
                    2e:ae:52:fb:8e:07:6a:45:b7:49:02:ea:08:29:16:
                    b0:b8:1c:7f:cb:cd:f9:5c:58:e9:bb:39:36:d7:41:
                    67:16:df:bf:0f:a9:8e:d3:30:4e:eb:2f:40:4a:e0:
                    49:2c:1e:62:be:98:41:75:10:44:46:5d:d4:7a:92:
                    7d:82:d3:c4:e2:fe:1b:2e:e1:0a:50:12:ec:83:d1:
                    18:6e:e1:2c:84:ea:6c:2d:c8:e5:e7:6b:25:de:7c:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:DE:DB:51:92:74:32:72:8C:CF:C6:47:02:B5:5B:96:2E:6D:6C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:87:44:28:04:00:aa:46:e2:51:c1:df:49:53:78:94:5b:8e:
         41:4b:bb:09:d6:e8:1d:d0:26:c1:99:70:a9:3f:b3:57:ca:a8:
         a5:16:bc:ef:6a:99:f3:ad:69:cd:83:b1:3c:65:3a:ca:71:d7:
         cf:f6:51:c3:54:ab:6f:c2:29:46:e9:c9:5f:57:47:cf:43:3d:
         0d:0e:3c:cf:86:d8:99:eb:90:82:0b:e1:45:5b:f1:67:7d:fe:
         cd:9b:44:81:23:cb:0d:64:73:5e:5f:c4:f5:02:72:58:d1:2a:
         6d:ba:94:15:b2:58:1b:5b:b8:57:43:1e:6d:a3:05:e7:32:33:
         87:91:fe:75:54:b8:22:bc:19:5b:2f:71:9b:3d:72:ae:31:72:
         5a:82:57:10:3b:ba:fb:16:00:56:8e:3f:3b:8f:20:f5:85:3e:
         e4:da:7e:46:20:5f:b6:ea:73:77:d5:7f:03:c3:2f:cb:e8:f9:
         dc:23:87:25:71:94:14:0d:0b:1a:42:bc:83:43:22:a8:8d:3f:
         8d:d6:17:a5:48:ea:08:77:07:c7:ad:49:d4:ea:d0:8d:44:56:
         00:1c:f6:11:86:79:77:82:6b:bc:5c:79:b0:31:f6:bb:d6:b1:
         09:37:a4:da:aa:cf:9d:81:f3:8c:d6:c2:3d:e3:0e:01:c3:01:
         4b:fb:2b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ40T76NJfcYaWoJujIhbkF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwNTE3MDUwMTQxWhcNMjYwNTE4MDUwMTQxWjAzMTEwLwYDVQQD
Eyg5MTBhZGVkYjUxOTI3NDMyNzI4Y2NmYzY0NzAyYjU1Yjk2MmU2ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/X02CfyjjC4LEautAtP/ZZdh6NZ
kyw024XkXehje+XlTOa5LlYZbJjdMItXlZQudFaGV3pNGdLY5w2kOffVLdRjIWC1
S1RNuTuKGKQ8tZupVlPnyJA+jWT5Duowdkx88qSIqVpFohagOPDav0WiKuzMKEm/
xfqxKEVwDfnwCqluikkIrOMYJu2eqocLniGNIvBnp7F7fvdhxifgGQ0LtsKcHNMu
rlL7jgdqRbdJAuoIKRawuBx/y835XFjpuzk210FnFt+/D6mO0zBO6y9ASuBJLB5i
vphBdRBERl3UepJ9gtPE4v4bLuEKUBLsg9EYbuEshOpsLcjl52sl3nxt6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEK3ttRknQycozPxkcCtVuWLm1sMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4dEKAQA
qkbiUcHfSVN4lFuOQUu7CdboHdAmwZlwqT+zV8qopRa872qZ861pzYOxPGU6ynHX
z/ZRw1Srb8IpRunJX1dHz0M9DQ48z4bYmeuQggvhRVvxZ33+zZtEgSPLDWRzXl/E
9QJyWNEqbbqUFbJYG1u4V0MebaMF5zIzh5H+dVS4IrwZWy9xmz1yrjFyWoJXEDu6
+xYAVo4/O48g9YU+5Np+RiBftupzd9V/A8Mvy+j53COHJXGUFA0LGkK8g0MiqI0/
jdYXpUjqCHcHx61J1OrQjURWABz2EYZ5d4JrvFx5sDH2u9axCTek2qrPnYHzjNbC
PeMOAcMBS/srMQ==
-----END CERTIFICATE-----
Generated at Sun May 17 11:18:56 2026 by rpki-client