Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          9KgyXXozMLffL4bXc4a2z6gHIgCIePmZAzmUjPHZrzY=
Subject key identifier:   A9:74:AD:9E:74:64:1E:1B:9F:67:2F:8A:A9:15:5A:FB:C8:6E:11:2E
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019FD94F0538C9C2F2041A2F44B42FF3ADD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1221
Signing time:             Thu 06 Aug 2026 23:01:02 +0000
Manifest this update:     Thu 06 Aug 2026 23:01:02 +0000
Manifest next update:     Fri 07 Aug 2026 23:01:02 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: ZcSGzcngcT2MPdkkNopVtNY0UU+J74T7W5lC7SsKkk4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:4f:05:38:c9:c2:f2:04:1a:2f:44:b4:2f:f3:ad:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Aug  6 23:01:02 2026 GMT
            Not After : Aug  7 23:01:02 2026 GMT
        Subject: CN=a974ad9e74641e1b9f672f8aa9155afbc86e112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:7d:db:9e:a7:4b:f2:08:9d:bc:96:30:38:
                    b8:0b:24:28:13:53:dd:e3:05:9c:b6:0b:b2:e7:38:
                    78:92:19:ab:67:03:ec:e6:8d:92:2d:21:98:0e:c2:
                    7e:7e:cd:98:a4:10:08:0b:2f:34:26:75:12:e5:1a:
                    e3:f4:1d:23:ab:cc:49:5d:53:0b:08:76:bd:56:43:
                    be:8f:e5:de:30:32:aa:c9:aa:e0:84:41:1f:58:bf:
                    c2:da:8a:b0:c0:d5:5c:37:83:33:04:e8:e4:34:2d:
                    86:a3:df:11:16:98:8c:44:49:47:b5:70:d9:0f:ba:
                    5a:af:ce:53:27:6e:ad:3c:e1:ba:2e:95:60:79:d7:
                    71:a8:6a:29:29:11:d1:ca:cf:15:2e:62:6b:73:5d:
                    3e:77:e7:f3:f4:c5:71:0a:aa:7d:77:42:e1:d1:6f:
                    80:d6:c8:9e:b9:96:a7:6b:3a:5d:e8:16:cf:34:64:
                    d6:57:83:88:d9:c1:4f:1e:2c:54:d7:72:62:3d:27:
                    ef:9e:cc:68:9c:83:22:0a:87:35:27:1b:a0:3f:f7:
                    50:7d:d3:c7:bd:02:2f:a5:40:fc:b8:97:d7:17:6b:
                    1c:59:e9:76:8f:55:8c:8b:6d:6f:85:55:a4:a7:48:
                    64:a4:a8:a5:33:da:96:90:97:09:bb:2a:c8:33:90:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:AD:9E:74:64:1E:1B:9F:67:2F:8A:A9:15:5A:FB:C8:6E:11:2E
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:c6:8c:10:cc:f8:37:19:bc:b9:ac:92:b9:f5:40:44:24:
         de:89:c4:0d:8c:b6:c0:86:6e:21:cb:bd:d8:b5:fe:e0:2a:29:
         32:19:eb:27:3a:fb:c8:28:fb:94:52:b9:49:c2:dd:f0:4f:e1:
         b7:4b:04:62:0d:3c:90:ab:a9:5f:c3:e5:82:c4:38:b5:46:4c:
         41:89:df:57:28:7c:50:58:69:90:ab:74:4b:bd:62:a1:0a:50:
         5b:b6:63:f9:54:f0:57:61:84:4a:42:90:53:27:bf:cb:e8:4f:
         80:df:76:90:61:ad:6a:65:fa:ef:3d:28:d2:c7:cd:81:25:58:
         85:be:10:0a:1d:1a:2c:8a:ba:f2:13:c3:f0:5f:92:79:dc:ea:
         d6:6d:f5:f8:16:03:c3:51:25:f0:f2:fc:1a:e1:a4:0b:43:45:
         71:d9:af:23:18:a0:58:7b:74:d2:b9:0f:62:72:ef:1f:03:58:
         a2:46:ef:07:9f:ce:1f:b1:11:d6:55:7d:70:08:a2:40:e9:e4:
         12:54:e4:8b:ad:2f:df:8b:7c:b3:17:38:51:b2:06:87:0b:4c:
         91:a7:2f:21:c0:a6:7c:00:82:23:19:0d:6c:ec:e8:2d:db:d2:
         1f:8b:7c:af:11:3a:ab:80:11:de:8c:47:dc:c7:41:73:02:e9:
         a5:2e:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 02:37:08 2026 by rpki-client