Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          IrU/IMO1gxHv+TBRmxkPWdz478F69tcO3wkLKuRPQVQ=
Subject key identifier:   27:96:7D:AF:51:02:21:77:48:7D:0C:5A:C8:EC:33:4E:10:DE:27:05
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019DC25EF833B0E39A2DC56561A117CBB01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          110A
Signing time:             Sat 25 Apr 2026 02:01:36 +0000
Manifest this update:     Sat 25 Apr 2026 02:01:36 +0000
Manifest next update:     Sun 26 Apr 2026 02:01:36 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 5RSjxt/M8YEDhxnv/DlM85+ngMZgJAFXBVdW8KdPJI8=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Apr 2026 01:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c2:5e:f8:33:b0:e3:9a:2d:c5:65:61:a1:17:cb:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 25 02:01:36 2026 GMT
            Not After : Apr 26 02:01:36 2026 GMT
        Subject: CN=27967daf51022177487d0c5ac8ec334e10de2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:31:30:a3:8e:3c:fc:50:d3:5c:78:24:2f:
                    8f:ff:c1:bd:22:5a:9d:a5:eb:40:a0:67:87:60:90:
                    54:1b:aa:17:8d:b3:bb:d8:20:fa:5f:25:7a:83:2d:
                    65:7c:c0:fb:e1:28:1c:5e:9a:ac:54:65:f0:29:dd:
                    67:ab:5f:19:4a:12:ce:4f:6a:a3:02:70:f2:71:ba:
                    bc:49:51:11:b1:88:eb:23:69:ea:50:64:b1:fb:a4:
                    84:11:64:13:72:4c:3c:ae:53:f6:04:e8:e5:29:46:
                    65:3f:bc:5a:09:2b:00:25:77:ba:cb:38:32:95:01:
                    01:5e:9b:82:df:6e:58:72:45:7e:96:56:0a:38:00:
                    49:b1:1b:b2:4e:71:16:fe:7a:eb:df:e4:01:bb:5f:
                    71:5f:3e:bf:f5:81:d5:a0:e9:99:8e:f9:d8:08:07:
                    b0:87:9d:5b:70:d4:ac:23:ae:cc:17:db:2f:6c:2d:
                    4a:d0:c6:e4:d4:9d:0d:5e:42:00:cc:84:58:c5:b4:
                    cd:16:0d:2c:17:0c:1b:b6:76:6b:b3:df:bf:5f:2c:
                    07:61:fa:48:a7:1d:d7:f6:42:86:cd:01:4a:a3:9e:
                    8e:45:17:51:b8:73:1e:f1:05:a3:88:d1:54:9a:d4:
                    82:77:8f:6c:05:78:77:12:a2:3e:22:d6:f5:b1:9d:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:7D:AF:51:02:21:77:48:7D:0C:5A:C8:EC:33:4E:10:DE:27:05
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:08:2c:75:43:da:3f:2c:3e:c8:62:aa:1f:90:e6:0f:0f:09:
         5d:ff:b6:5a:6e:5f:91:9b:7c:f7:91:e8:9f:1a:b9:12:c4:da:
         0e:a1:ec:ac:e4:e8:41:c9:b0:bb:00:d2:b8:bb:f4:33:94:a9:
         58:3f:48:4b:69:d2:88:08:a7:15:45:e1:13:cf:58:d9:8c:9a:
         27:a8:df:37:29:66:da:48:0e:ea:fb:78:8d:b8:c2:34:1f:ef:
         b9:d9:b1:71:e0:7f:80:4c:59:f2:ac:3a:47:59:6a:bc:62:17:
         65:82:a0:1e:53:a1:a8:0b:20:64:c4:16:b4:30:81:02:52:68:
         62:33:73:db:b1:c3:f4:5e:92:fc:1b:7a:9f:e6:5b:5b:53:96:
         ef:0e:ab:8a:ae:15:63:2c:af:b7:98:9d:60:3a:23:2a:d3:30:
         d2:33:2b:76:73:25:ab:59:9a:0d:af:30:ec:b4:e0:ae:52:35:
         60:9f:38:af:95:b6:45:17:f4:b4:dc:70:be:d9:d4:9d:d2:36:
         b9:97:12:ca:87:c6:bf:b5:24:db:45:2f:b5:8b:44:fb:23:3d:
         04:d0:f5:63:44:e2:d9:c7:25:53:ff:01:77:c1:90:e7:34:22:
         ab:1b:25:a9:9c:b9:5b:37:e6:61:f0:76:7a:8c:cc:4b:0b:b9:
         c9:06:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 08:40:27 2026 by rpki-client