Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          w7ZKQRum7tJSpLQmDhJUzRHduHbGkDwxgsC9SyI37Yk=
Subject key identifier:   8E:64:3D:6F:E2:14:13:21:DD:D4:C4:D4:45:89:73:54:6F:73:07:85
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019EF94B80CAAF4FCFA299E93FF7D3B6D3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11AD
Signing time:             Wed 24 Jun 2026 11:02:15 +0000
Manifest this update:     Wed 24 Jun 2026 11:02:15 +0000
Manifest next update:     Thu 25 Jun 2026 11:02:15 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: nEwtc3uBWJDZ9z+PPDQ2iHqA52FQUb3egrzLeE7bM/M=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:4b:80:ca:af:4f:cf:a2:99:e9:3f:f7:d3:b6:d3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jun 24 11:02:15 2026 GMT
            Not After : Jun 25 11:02:15 2026 GMT
        Subject: CN=8e643d6fe2141321ddd4c4d4458973546f730785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:0f:ed:0f:c7:ce:8f:da:a9:c0:70:13:b2:
                    69:b0:ce:28:b1:39:5b:2e:de:fd:6f:25:4b:c6:eb:
                    70:ed:7f:1c:cd:fb:66:94:b7:5a:47:66:7f:d2:54:
                    f5:a1:ff:5d:e1:1b:45:ad:0d:36:b8:00:c2:24:1f:
                    1e:31:4c:00:78:6c:88:7f:bc:8e:3a:b4:8f:c5:0a:
                    0f:f5:35:20:43:12:be:e5:69:79:33:aa:db:19:aa:
                    ab:29:b9:a4:27:c8:c8:9b:f0:0c:a6:97:27:1d:56:
                    8b:5c:4d:16:c2:8b:22:cb:de:74:9c:53:46:c4:5c:
                    eb:a7:7f:64:44:cd:4c:fa:3c:39:19:e4:ed:75:43:
                    9c:1e:d6:ec:f9:60:d5:32:1b:84:bf:18:66:d0:5c:
                    50:fd:66:47:9a:7e:95:97:c1:0f:89:cc:2d:39:07:
                    68:ce:eb:62:a1:d0:41:4a:d5:d5:6c:53:33:26:87:
                    d7:60:68:8f:72:33:65:fd:c4:ac:6f:65:37:80:d2:
                    8b:30:5f:b9:65:3d:d6:88:6f:d4:7b:65:2c:21:5b:
                    62:cb:05:79:13:8c:91:ce:e1:aa:e7:86:8d:a0:ae:
                    c4:92:77:fe:71:af:a2:78:ba:4b:a6:87:40:83:6d:
                    15:ef:ef:fa:6b:37:ec:f7:e5:f0:7e:17:0f:4a:2c:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:64:3D:6F:E2:14:13:21:DD:D4:C4:D4:45:89:73:54:6F:73:07:85
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:da:5f:f4:6c:12:e2:67:3a:1f:b7:44:48:f9:21:69:c9:
         7c:52:25:bb:95:22:5d:50:b1:95:eb:ea:26:f2:0a:f9:9b:de:
         ff:ea:5e:95:60:6b:a5:f8:55:99:85:8f:08:1d:f0:c0:f8:cb:
         1d:a5:78:62:34:4f:2a:cc:16:b6:12:cb:dd:95:b8:03:bd:af:
         8f:4b:79:65:01:09:95:a0:c5:1a:ca:af:f8:dc:eb:9f:f7:68:
         1d:f8:d0:fb:a2:19:fe:c9:77:f4:38:79:33:20:52:83:42:6e:
         86:33:7e:72:87:34:a6:50:28:58:75:53:e9:f3:ee:d7:43:07:
         51:f1:ff:2a:a5:0b:14:1f:1c:e1:89:72:56:1f:67:e0:11:3a:
         d0:a3:59:7d:7d:c4:2a:42:b4:f2:b5:0d:c1:a1:a7:de:37:4f:
         a1:9c:fe:90:f0:4d:9c:46:8d:5b:1a:3d:bb:a2:fc:63:65:3d:
         bd:6d:ca:ff:37:39:06:3f:02:4b:4f:a2:fb:88:93:c3:d7:9d:
         a3:87:ba:d5:5f:5e:53:2a:7c:2f:60:b1:0f:a3:f4:b3:8d:7b:
         7d:1d:99:7b:96:86:ab:61:5d:2e:ca:78:2a:39:55:4c:f1:61:
         fb:60:48:f2:35:00:a3:fd:7b:89:65:2e:50:d4:d9:0e:da:34:
         ab:32:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:48:22 2026 by rpki-client