Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          fgiHyKZkkBdy2kcKCm/ZSN63UlBAdTiXfdtIYCIr2sk=
Subject key identifier:   39:25:23:A3:BB:C3:0F:77:5C:E7:BF:C2:D8:43:55:9F:13:56:F8:EE
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019E2E848E8E4F4D356B882CA0957761CF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          1142
Signing time:             Sat 16 May 2026 02:01:39 +0000
Manifest this update:     Sat 16 May 2026 02:01:39 +0000
Manifest next update:     Sun 17 May 2026 02:01:39 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: q0gHLBRCyDAgxG6EE0tUvMr0TvNJpEg2cL4p/iHrYCo=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2e:84:8e:8e:4f:4d:35:6b:88:2c:a0:95:77:61:cf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 16 02:01:39 2026 GMT
            Not After : May 17 02:01:39 2026 GMT
        Subject: CN=392523a3bbc30f775ce7bfc2d843559f1356f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:46:28:1d:26:33:0f:e5:86:cb:10:59:3a:
                    be:c6:c3:8d:aa:e3:2b:d4:00:0c:47:0a:9a:d3:70:
                    cf:7f:47:13:8f:72:4e:e6:85:ee:4c:c1:36:55:18:
                    ed:aa:a3:43:10:c7:7d:db:37:0a:00:ee:64:3c:14:
                    59:03:99:7f:a3:61:59:65:ea:df:6d:ee:d8:30:50:
                    a4:1d:b5:2d:89:be:38:43:f6:5c:6b:d1:07:55:da:
                    45:9e:b1:e2:3a:c1:8e:92:10:9b:b1:18:4d:38:14:
                    c7:21:49:d2:fb:57:77:02:4a:6d:93:3b:b6:69:3c:
                    da:2e:15:7a:1d:b9:68:25:de:60:4d:b8:e7:08:18:
                    57:72:2c:f5:0a:e6:a5:bb:ae:e1:81:d0:4e:bb:00:
                    52:18:66:fb:65:7b:2b:4d:d7:36:37:e2:f7:10:b9:
                    04:5f:c4:71:79:b7:26:a2:28:9b:b5:f7:18:aa:67:
                    ca:d0:00:db:29:fc:41:8f:89:3f:57:a4:04:6a:66:
                    e8:57:e4:19:a0:88:60:32:72:6d:07:ab:75:9c:29:
                    aa:b2:e9:61:88:9e:d7:e8:3a:9b:10:fc:ae:6e:83:
                    58:6b:41:29:cf:76:ce:c4:13:a1:a5:76:04:9d:80:
                    6f:8d:7c:b1:30:25:b7:5f:79:27:26:0b:92:58:03:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:23:A3:BB:C3:0F:77:5C:E7:BF:C2:D8:43:55:9F:13:56:F8:EE
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:9a:0f:72:c2:cb:78:e4:33:01:5b:e2:6c:a5:81:2b:6d:
         73:7b:58:11:85:bb:18:48:83:a7:c4:1c:4a:ca:45:02:1d:86:
         8b:c3:77:3b:a9:f5:26:7b:3b:b4:98:c8:de:79:50:92:0e:66:
         0c:18:dd:a6:98:0b:cc:e6:40:5a:ad:02:0e:81:0d:61:d2:5b:
         bb:53:02:03:67:6e:1b:bc:dc:ce:40:18:8e:c3:a2:0d:a6:93:
         bb:9d:a1:1c:44:0f:ba:fd:c1:1f:6a:54:ba:d7:18:b1:dd:f1:
         5b:d7:5b:f4:cd:7d:cb:e8:7e:50:21:47:6f:43:5b:27:72:83:
         a1:fd:9f:b9:21:41:ce:b0:60:63:47:55:9c:e8:bd:03:48:e6:
         a8:c3:ec:50:dd:7a:fc:1a:8e:60:38:bf:32:a1:99:c3:3c:fc:
         fd:9c:6b:bf:12:d9:ce:b6:e9:9b:f9:eb:f2:06:90:8b:e8:98:
         bc:16:c9:c5:ce:51:2a:e1:88:e0:e9:cd:03:a3:1d:22:d1:2c:
         fa:17:c7:a7:3d:1d:a7:14:45:1e:33:14:fe:76:30:a1:14:34:
         2e:3b:a1:d4:78:06:4c:42:8f:da:48:62:a5:84:ff:c3:5d:fc:
         66:30:de:a5:42:14:11:2b:ab:17:41:41:af:0e:ea:a7:ae:59:
         76:30:25:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 10:59:32 2026 by rpki-client