Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          rZ56L6yeiBzodiA8aDmdgE5MlWfeml8IWtEVLUByvHE=
Subject key identifier:   52:17:99:1A:A4:A5:D8:78:67:1A:61:CD:F7:E1:8D:68:87:80:77:E5
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E721BB9FC8951BBBF023A8DB528411D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1167
Signing time:             Fri 29 May 2026 05:01:20 +0000
Manifest this update:     Fri 29 May 2026 05:01:20 +0000
Manifest next update:     Sat 30 May 2026 05:01:20 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: f+1pFqf4Vq9bBqodMZLCiHMYkkGwNiuqLtlkIBSrRLE=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:72:1b:b9:fc:89:51:bb:bf:02:3a:8d:b5:28:41:1d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 29 05:01:20 2026 GMT
            Not After : May 30 05:01:20 2026 GMT
        Subject: CN=5217991aa4a5d878671a61cdf7e18d68878077e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:80:aa:02:82:be:0c:fc:75:2c:c2:fd:09:
                    82:ac:a7:d0:85:08:1f:fe:12:fb:44:ee:64:b1:d3:
                    f9:d6:01:53:45:27:74:a0:30:5c:e0:3d:fd:65:79:
                    6f:e5:17:cd:85:0f:c8:0c:3b:d5:72:fe:ec:15:a9:
                    e5:b6:fe:d1:b2:94:d1:f8:76:48:e6:39:84:d9:3c:
                    34:52:73:b1:82:11:da:77:00:63:1c:c3:a3:9e:60:
                    f4:49:f6:92:90:6e:74:44:e0:6e:c7:26:fa:3a:d1:
                    78:71:2b:97:cc:ca:6e:35:48:96:fe:32:35:02:38:
                    67:52:a3:4c:d0:64:92:2b:ed:c6:15:6a:5d:55:33:
                    97:e7:3e:f7:75:c9:1f:70:8a:ee:38:9f:87:39:32:
                    8c:fa:91:34:f5:8e:ff:82:1b:c5:41:c5:11:76:91:
                    ab:c5:a5:06:48:5a:70:37:da:f5:5a:fe:b0:c0:8a:
                    96:bb:ef:c1:a5:69:a8:ce:ad:3c:c4:6a:4c:00:b7:
                    59:35:f8:94:3f:72:ef:fd:7f:12:a5:88:a3:86:d5:
                    d9:ca:98:d0:5a:eb:a9:3b:86:04:da:d3:fb:2d:a0:
                    cc:e4:18:b2:b3:07:55:f2:31:d4:ef:56:cf:cf:27:
                    4d:b7:10:97:b0:8e:69:c0:b3:eb:ae:72:0b:d2:d5:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:17:99:1A:A4:A5:D8:78:67:1A:61:CD:F7:E1:8D:68:87:80:77:E5
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:16:bf:c5:a8:97:c0:7a:0f:5d:dc:99:d2:28:3c:7b:81:
         8d:24:61:d4:6d:e8:c5:13:49:3b:81:d2:d1:1d:76:65:fa:e7:
         cf:ff:67:17:65:3b:b6:eb:61:22:63:2e:b7:7f:d2:83:7b:78:
         e0:79:a9:a6:bf:dc:64:b1:64:b5:dd:26:80:27:86:8b:28:99:
         49:8e:91:be:10:ea:9a:26:4d:8e:59:14:16:ed:0f:e2:72:08:
         83:ce:51:bd:a7:4b:0d:e2:db:70:1a:b9:92:ba:02:81:90:f1:
         ec:26:48:f8:3b:5e:0d:1b:65:40:c8:23:8e:0b:39:35:7c:b0:
         bc:ab:54:76:e0:f6:ca:95:2e:4c:fe:fe:1a:ea:fd:8f:d7:00:
         0d:d1:8c:fe:68:c2:9f:f3:32:41:91:a1:1d:27:29:1d:96:4d:
         7e:47:95:e9:07:89:65:98:6f:0b:77:c7:06:e8:a2:2c:10:b2:
         19:6b:a9:e3:c7:0f:28:1b:2b:99:00:b1:8b:4d:e8:00:62:29:
         e0:44:be:a2:7a:1c:10:ba:12:69:f3:29:b8:f2:38:51:e2:cd:
         05:19:f4:3f:cd:ba:0d:08:e4:62:2c:1c:d4:79:a4:2a:59:41:
         e6:61:7d:37:ea:35:8b:34:b6:16:47:9e:88:75:49:e7:02:b0:
         8e:3d:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:14:12 2026 by rpki-client