Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          3bSyUTTuIpet2Ram+9UO5/tlxRRrT/1rtJBy2Er4pSA=
Subject key identifier:   DD:88:41:99:58:EF:F2:F3:9D:10:A2:6C:41:E9:83:D9:8A:C8:1A:CC
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019DCC0742EEFF35A8609A5C757297DB8441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          110F
Signing time:             Sun 26 Apr 2026 23:02:01 +0000
Manifest this update:     Sun 26 Apr 2026 23:02:01 +0000
Manifest next update:     Mon 27 Apr 2026 23:02:01 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: HcOLytgyjiK3ajnA5aNCwWEZI8QRmzqWWxj5Ovk42E4=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:07:42:ee:ff:35:a8:60:9a:5c:75:72:97:db:84:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 26 23:02:01 2026 GMT
            Not After : Apr 27 23:02:01 2026 GMT
        Subject: CN=dd88419958eff2f39d10a26c41e983d98ac81acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:0b:3b:82:50:48:39:12:24:98:8d:91:c3:
                    97:bb:80:aa:d7:dd:27:18:13:bc:44:07:14:ea:06:
                    6c:ab:c9:31:64:cb:66:83:b5:ae:f9:ec:63:c3:c0:
                    cc:15:8e:31:f4:6d:36:0a:ae:1b:53:64:d6:d8:8c:
                    9c:68:38:ee:87:c6:29:aa:d4:33:56:8e:31:a5:98:
                    f4:81:3f:f8:6b:06:b5:8e:29:b3:13:4f:bc:4c:81:
                    3f:14:68:5d:b1:bf:09:62:c4:b4:f3:8c:4a:c7:b7:
                    a3:bc:21:3d:d2:1a:e5:ff:99:af:35:2c:ff:da:76:
                    df:3d:14:e9:90:f5:25:50:38:b4:34:ec:09:82:c1:
                    26:ff:45:63:18:d3:31:08:21:77:7c:7e:73:df:40:
                    2e:c9:f7:2f:ce:0e:c1:03:b4:8e:f4:f4:0d:cb:e6:
                    51:4c:1c:e0:9e:d5:99:06:1d:05:6f:fd:23:d7:ba:
                    99:1c:8c:6f:fb:e7:23:26:02:9a:b0:b9:01:27:c7:
                    eb:57:56:16:5a:dc:dc:98:56:61:b7:3a:e5:e8:21:
                    b7:be:b9:7e:ba:4b:0b:01:85:c1:f5:1d:6b:48:6c:
                    e2:99:6f:6e:52:e0:92:10:1d:6d:b1:8b:92:c9:c9:
                    f8:79:db:84:b3:f1:bb:e8:f0:79:c9:50:fa:11:28:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:41:99:58:EF:F2:F3:9D:10:A2:6C:41:E9:83:D9:8A:C8:1A:CC
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:45:18:37:f0:5f:80:d9:22:be:44:d1:11:39:69:18:2f:53:
         67:ba:52:dc:f9:58:02:e4:3e:0d:94:a7:df:b0:e1:bb:fa:78:
         c9:87:a6:41:62:16:6c:b9:81:20:f5:34:b3:9f:12:9f:86:fa:
         3d:3e:46:67:02:b8:5e:7a:0e:0d:d5:d9:14:19:7b:46:02:4d:
         71:0e:b3:b0:f9:68:0c:2f:0c:2e:b5:d2:b7:7a:19:de:a7:9b:
         45:82:a7:6a:f2:7e:60:72:1d:fb:36:02:81:41:3a:0d:a8:90:
         30:f8:96:c1:92:83:05:92:d9:9f:64:89:f7:8f:d0:9c:52:cb:
         b7:08:4a:f5:67:ab:c8:2e:ed:a5:30:d3:0b:73:0e:d2:99:eb:
         fe:93:d5:bc:d5:46:51:dd:d9:82:e4:2c:14:f6:88:ce:b4:d1:
         0a:48:99:4f:31:b5:a7:e8:af:3f:52:17:af:f4:32:ca:3a:e5:
         7e:ce:80:d3:89:22:c8:db:c3:d7:97:81:00:2c:1b:d6:05:93:
         e6:8b:37:6a:8c:84:bc:eb:9c:c5:3f:ef:17:42:a0:a3:4e:0e:
         89:c5:43:28:7c:5f:b8:97:69:3d:01:40:3a:4c:99:d9:41:94:
         f9:87:b4:13:b3:d6:f3:95:c9:2a:3b:b2:36:e1:4d:7a:e5:a5:
         9d:7d:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:25:55 2026 by rpki-client