Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Hn0w9hx/kRNoqBQcGtxTh4WR7tNIn9Vq/xNDk3hD73g=
Subject key identifier:   EA:22:8A:D4:DC:D6:66:78:9C:C3:CB:F7:44:82:A9:AE:34:EF:90:91
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019F2D6F011400DEBE79754F6E2591D805D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          11C8
Signing time:             Sat 04 Jul 2026 14:01:17 +0000
Manifest this update:     Sat 04 Jul 2026 14:01:17 +0000
Manifest next update:     Sun 05 Jul 2026 14:01:17 +0000
Files and hashes:         1: 8TLppOneSupOT2gRP_1dgu2Fk1c.roa (hash: FLVrP6Vqn3ElA4scxJqjGtr44LoBIRx1kxEYMlr+Erg=)
                          2: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          3: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: atrut8knmBL9imPrtZuftLi59a5camRv8Pej8omRnPY=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Jul 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:2d:6f:01:14:00:de:be:79:75:4f:6e:25:91:d8:05:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul  4 14:01:17 2026 GMT
            Not After : Jul  5 14:01:17 2026 GMT
        Subject: CN=ea228ad4dcd666789cc3cbf74482a9ae34ef9091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:bf:59:5f:8f:7e:71:17:6d:e4:52:0d:12:
                    f3:63:8b:75:9f:d3:6e:53:81:54:d1:9a:0b:49:2d:
                    be:ea:a1:67:50:e3:87:59:7e:1c:a8:86:41:cd:e7:
                    75:80:ca:6a:1e:f7:4d:d9:fd:4b:d5:55:dc:99:ad:
                    35:f5:1b:5a:03:9b:52:09:17:12:f2:9d:25:ea:2d:
                    30:72:d3:c5:96:42:e9:6a:71:60:97:3f:ab:47:d1:
                    83:3a:87:0b:31:87:3f:f1:1a:0b:2a:4e:15:ea:b1:
                    f1:06:5c:66:62:1d:7f:10:39:c1:bc:cd:a7:78:a0:
                    77:e4:c3:84:ad:19:2a:be:dc:86:b8:b5:f1:71:bc:
                    46:8d:7d:9b:9e:7a:bc:06:7e:87:5e:d4:44:98:fd:
                    c3:31:a1:33:72:db:23:fb:2c:6e:34:b9:94:79:fc:
                    e2:ba:e5:3d:fb:90:6b:fc:63:1f:4b:2c:9f:ed:77:
                    26:50:f4:03:22:c7:4e:ac:b5:a7:f8:36:9a:74:22:
                    16:7b:8b:00:20:63:77:a9:e9:a4:61:b2:e7:70:9c:
                    79:b5:a0:c1:c2:20:f0:d7:6d:5d:80:ce:50:20:7f:
                    22:47:81:bf:61:3d:6b:39:09:d9:1b:e6:76:15:d8:
                    d8:0c:b8:93:62:b8:59:06:4f:ce:c9:90:c2:bb:c7:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:8A:D4:DC:D6:66:78:9C:C3:CB:F7:44:82:A9:AE:34:EF:90:91
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:71:ec:a1:0c:23:aa:9e:fb:83:1c:7f:0e:52:13:e1:e1:
         31:c7:fa:67:73:70:62:be:f7:e7:2b:82:28:1d:29:0c:e4:e4:
         0e:92:01:1a:89:4f:1b:cd:25:15:74:8d:52:97:f5:3e:d8:24:
         38:eb:4d:3f:0f:d1:cf:47:e0:a2:f3:46:34:16:97:f7:62:8d:
         b2:bf:47:96:f7:6f:93:19:ee:1d:e4:a1:e7:c4:c2:c3:d2:46:
         e1:2a:8c:b6:25:5c:7d:b3:e5:f8:d3:ef:4b:96:2b:2e:6c:bf:
         09:13:ed:51:6f:3f:e4:4e:a1:a0:85:0e:d4:62:95:29:19:e0:
         32:d4:dc:75:58:c4:78:b2:d7:2d:aa:52:53:a2:09:de:d8:62:
         db:4f:35:4b:f7:18:ca:29:0c:cf:ce:f6:d7:97:17:7d:99:b2:
         00:12:99:8d:35:82:46:5d:f4:61:06:35:f0:f3:c1:59:ab:74:
         5a:af:c6:67:1b:8f:1b:f4:41:58:d7:d6:3c:62:e2:f5:41:73:
         ae:99:ff:43:51:94:e4:c0:b3:fc:9a:60:de:67:b1:26:f7:d1:
         fd:25:28:5e:29:1a:8c:c0:8f:64:07:a7:28:2a:9e:93:71:c7:
         7b:ff:80:dc:4c:b0:3b:39:0e:be:fa:17:75:04:82:e2:1e:cf:
         43:d0:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 23:51:34 2026 by rpki-client