Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          enFmxoKWZxaVnQ9JhOB/cilaAsUck8H7Yg8pvj/HghQ=
Subject key identifier:   0F:52:23:B7:61:4A:70:55:82:AB:11:37:AB:BA:F8:69:14:C7:D9:91
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FCDB8BD8B230ED615092CA2E344B8FAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          121B
Signing time:             Tue 04 Aug 2026 17:01:04 +0000
Manifest this update:     Tue 04 Aug 2026 17:01:04 +0000
Manifest next update:     Wed 05 Aug 2026 17:01:04 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: q4+K+RihitvpUfuXQ9xPbhDmhJCcTHYMjYjHD8+7L60=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:b8:bd:8b:23:0e:d6:15:09:2c:a2:e3:44:b8:fa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug  4 17:01:04 2026 GMT
            Not After : Aug  5 17:01:04 2026 GMT
        Subject: CN=0f5223b7614a705582ab1137abbaf86914c7d991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:e0:07:23:f1:ed:72:4b:44:b7:f2:b3:5a:
                    be:c9:32:86:15:b5:68:28:d3:31:0d:e9:86:40:8b:
                    9b:f8:22:0a:49:ad:3a:16:b0:53:b0:93:d5:05:c5:
                    62:e7:32:3a:26:76:61:ea:d2:7b:a3:f2:74:b1:56:
                    e6:fa:90:0a:73:13:cc:86:f1:8c:f8:d5:10:d9:89:
                    84:da:7d:47:af:cb:35:6f:27:98:d2:48:95:b0:fe:
                    f1:87:7d:2c:5b:fb:52:98:33:e2:db:46:06:25:68:
                    76:92:84:6e:1d:de:5a:03:b4:b5:a4:53:e7:44:d6:
                    6c:b4:83:1a:b4:8c:e1:fe:af:5c:06:84:a4:89:66:
                    47:a4:94:84:34:a4:96:2e:15:47:5a:34:a7:54:74:
                    68:5d:58:46:47:60:27:cf:83:b6:d6:5c:f2:48:60:
                    ab:30:d1:28:8c:98:08:ed:fa:57:28:3c:0d:02:1a:
                    e6:71:58:4b:c5:c2:aa:26:04:c1:e2:98:1b:ae:f9:
                    20:a8:6e:7d:d3:33:c6:0a:06:d0:b9:3e:5a:6f:91:
                    37:ef:b9:f1:a7:8e:54:ff:e5:66:63:35:7a:8f:1e:
                    7e:ce:45:cf:66:f7:61:3d:d5:8c:0c:c6:d0:4c:53:
                    ae:82:28:ac:48:b2:84:da:41:67:db:88:8f:5d:93:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:23:B7:61:4A:70:55:82:AB:11:37:AB:BA:F8:69:14:C7:D9:91
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:15:54:32:77:aa:98:da:e3:54:23:b0:26:60:88:e1:af:
         e2:cf:97:bf:c9:b5:1a:84:34:29:24:57:7f:90:d5:f9:9c:78:
         cb:dc:89:85:47:ef:e5:6d:06:64:90:73:34:3c:f3:5b:77:1b:
         50:da:79:cd:d7:be:77:1e:de:8c:51:e4:5d:41:77:7e:a7:f4:
         9b:7b:fd:a2:d9:38:4f:18:b9:2a:14:13:2f:2d:2b:99:88:61:
         46:6f:63:a5:be:2a:d6:1b:df:ca:e8:4b:60:40:8c:f9:aa:3b:
         b1:9e:ef:fb:59:48:07:2d:e7:23:ae:16:59:4a:a3:b7:cf:ea:
         cd:22:7d:34:f2:d3:11:f6:f0:b0:e1:dd:04:a6:f0:2a:cf:99:
         e7:9b:b7:16:6e:4c:0d:6e:39:45:f6:02:c3:44:79:c2:b0:90:
         cc:d5:cf:64:f5:f4:2c:ab:c2:b6:3a:f6:ee:8b:e4:74:77:21:
         34:61:d7:5d:c5:fc:e7:4f:79:4f:9c:d9:58:4b:1c:2e:aa:9b:
         16:bd:da:d5:d0:3e:e8:03:07:63:a1:1d:07:31:84:5b:bd:82:
         ec:4c:94:22:01:60:48:7c:4c:ca:1b:12:11:a9:10:96:10:78:
         b5:a8:ad:36:ad:34:2f:98:e5:61:7a:23:d0:b1:c3:7e:79:dc:
         4b:24:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 02:17:53 2026 by rpki-client