Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          url5pF2F8vQBu6V3fLCGGNKMA1uaRf+LE6VZ2jfVbQE=
Subject key identifier:   94:4B:7B:86:CC:B1:4A:44:1E:69:77:47:2C:0D:B4:A2:86:97:02:18
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019F4878C8B049149F3575C31F6739AFE600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11D6
Signing time:             Thu 09 Jul 2026 20:01:42 +0000
Manifest this update:     Thu 09 Jul 2026 20:01:42 +0000
Manifest next update:     Fri 10 Jul 2026 20:01:42 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: FAnjG73hzTAbpV9u4N+TG4TlIknFRogvroyWYTzIjok=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:48:78:c8:b0:49:14:9f:35:75:c3:1f:67:39:af:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul  9 20:01:42 2026 GMT
            Not After : Jul 10 20:01:42 2026 GMT
        Subject: CN=944b7b86ccb14a441e6977472c0db4a286970218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:4e:ce:36:d9:ae:42:6e:f3:64:e5:42:bf:
                    c4:53:d6:84:a7:45:a8:9a:ed:9f:66:27:13:69:e9:
                    48:b1:fc:7b:13:28:eb:71:e9:b3:18:86:06:3b:10:
                    16:15:ef:3e:85:07:3e:5b:18:55:61:58:50:f1:0d:
                    d9:25:55:b1:e9:2d:e3:df:d7:a4:8b:e6:a1:4a:d5:
                    a9:3f:13:c8:a8:c1:55:3f:b9:b9:cb:7c:62:4e:3a:
                    f8:3c:8f:22:7e:e4:24:99:03:3a:5c:fe:a4:ec:5d:
                    99:85:aa:65:2d:00:a4:4c:f9:e6:86:e0:a0:4d:83:
                    dc:f1:e5:d1:75:b1:6b:31:3d:3d:99:90:31:ae:bb:
                    e6:aa:66:4b:6c:06:d8:84:1c:63:93:02:9c:b4:5d:
                    fc:d1:e7:0a:93:66:93:a7:a0:e1:99:fb:de:ac:32:
                    25:37:87:0d:27:3a:89:ee:fe:f8:da:58:00:cb:96:
                    af:5f:5d:2e:00:2b:e5:11:a0:3b:7b:7a:41:22:ca:
                    d5:a9:e7:e9:24:7b:75:6a:89:87:83:19:9b:f5:e4:
                    34:d9:05:7f:ce:d5:90:01:1b:e2:7f:39:45:80:71:
                    5c:1a:ca:d7:dc:e7:0c:76:06:80:1e:8b:80:bc:79:
                    d1:01:61:d0:dc:37:df:c7:2f:b8:8b:c4:ef:f6:04:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:7B:86:CC:B1:4A:44:1E:69:77:47:2C:0D:B4:A2:86:97:02:18
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:28:90:00:eb:66:1c:51:76:5b:b1:75:9f:a6:ee:75:b2:
         72:09:9c:7e:9d:44:df:79:3d:2b:cd:31:20:ee:df:4b:da:b1:
         39:48:19:a6:1b:da:1e:4b:b2:32:ad:b3:b2:1c:84:de:81:a0:
         e6:49:42:cb:45:d2:66:08:fd:11:72:7b:3c:61:d7:8f:d8:a7:
         ec:56:9a:67:00:77:cd:9c:5c:fe:16:0c:b4:76:f2:ae:5b:69:
         6f:bf:8d:04:3a:d8:15:23:e4:34:29:4f:95:53:80:ca:64:f4:
         48:b8:6b:ac:f8:84:de:24:7c:a5:fa:9e:b5:f9:d7:1d:2f:cc:
         30:84:0f:78:77:73:30:01:c0:6e:87:bb:14:e3:cf:29:08:83:
         c0:a4:29:e8:6e:19:00:c6:6f:a5:b7:26:0f:69:66:08:47:51:
         3b:6c:4f:55:81:52:9d:6c:8e:98:7e:41:47:ee:78:ac:fe:e9:
         9f:5b:65:70:05:34:e2:d2:b4:06:17:03:13:40:fb:8e:77:b3:
         49:61:89:75:60:09:fd:f5:ca:d4:65:6f:6a:b4:e5:a5:8f:5a:
         93:4e:e1:61:4f:eb:ef:1e:8d:1a:ca:cd:55:de:b4:24:f3:6d:
         98:5a:e4:e8:a3:4a:bf:d9:b8:60:33:f3:0c:1f:34:fb:51:59:
         3d:a3:66:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9IeMiwSRSfNXXDH2c5r+YAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwNzA5MjAwMTQyWhcNMjYwNzEwMjAwMTQyWjAzMTEwLwYDVQQD
Eyg5NDRiN2I4NmNjYjE0YTQ0MWU2OTc3NDcyYzBkYjRhMjg2OTcwMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznhOzjbZrkJu82TlQr/EU9aEp0Wo
mu2fZicTaelIsfx7EyjrcemzGIYGOxAWFe8+hQc+WxhVYVhQ8Q3ZJVWx6S3j39ek
i+ahStWpPxPIqMFVP7m5y3xiTjr4PI8ifuQkmQM6XP6k7F2ZhaplLQCkTPnmhuCg
TYPc8eXRdbFrMT09mZAxrrvmqmZLbAbYhBxjkwKctF380ecKk2aTp6DhmfverDIl
N4cNJzqJ7v742lgAy5avX10uACvlEaA7e3pBIsrVqefpJHt1aomHgxmb9eQ02QV/
ztWQARvifzlFgHFcGsrX3OcMdgaAHouAvHnRAWHQ3Dffxy+4i8Tv9gTbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRLe4bMsUpEHml3RywNtKKGlwIYMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/gokADr
ZhxRdluxdZ+m7nWycgmcfp1E33k9K80xIO7fS9qxOUgZphvaHkuyMq2zshyE3oGg
5klCy0XSZgj9EXJ7PGHXj9in7FaaZwB3zZxc/hYMtHbyrltpb7+NBDrYFSPkNClP
lVOAymT0SLhrrPiE3iR8pfqetfnXHS/MMIQPeHdzMAHAboe7FOPPKQiDwKQp6G4Z
AMZvpbcmD2lmCEdRO2xPVYFSnWyOmH5BR+54rP7pn1tlcAU04tK0BhcDE0D7jnez
SWGJdWAJ/fXK1GVvarTlpY9ak07hYU/r7x6NGsrNVd60JPNtmFrk6KNKv9m4YDPz
DB80+1FZPaNmoA==
-----END CERTIFICATE-----
Generated at Fri Jul 10 02:47:11 2026 by rpki-client