Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          2UPnrNTav4evHTvFQ459elCfi3q6StPP/bKCL44+Krc=
Subject key identifier:   11:08:93:2C:B2:B6:B2:3B:7D:C0:45:D8:0F:D0:FA:3E:C6:6E:0C:0A
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       019E303BCCDBF941EC0D58D297E0994D472D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 10:01:25 +0000
Manifest this update:     Sat 16 May 2026 10:01:25 +0000
Manifest next update:     Sun 17 May 2026 10:01:25 +0000
Files and hashes:         1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
                          2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: 7rv8rvSo3FRXV4CzauxLu3bMS05qUc/W1aq7Vb1lhLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:cc:db:f9:41:ec:0d:58:d2:97:e0:99:4d:47:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: May 16 10:01:25 2026 GMT
            Not After : May 17 10:01:25 2026 GMT
        Subject: CN=1108932cb2b6b23b7dc045d80fd0fa3ec66e0c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:2b:3d:2b:aa:f7:25:92:b7:e2:48:f6:98:
                    3a:44:19:72:5f:44:c4:1a:98:26:ef:ff:e3:a5:55:
                    ad:8b:f3:f8:59:7a:08:5d:f8:64:71:b0:44:f2:cd:
                    cb:44:13:94:d0:ae:e5:58:cb:e5:b2:10:d9:96:29:
                    8a:98:46:b5:f5:1a:93:27:73:bf:7e:c7:f8:69:08:
                    59:ad:6b:ba:65:ba:67:60:8a:9d:7f:f0:54:73:1b:
                    02:09:03:21:ed:4a:86:01:9f:ae:68:49:2e:3e:e0:
                    b1:86:47:37:5a:56:f8:2b:7c:89:69:ee:ee:81:b0:
                    2b:6a:b3:29:94:67:06:68:87:f7:f3:b1:3d:5c:e4:
                    bf:16:bd:79:c1:53:b8:ad:f8:19:b7:20:8d:2e:2c:
                    96:c7:8c:42:b8:5a:8c:a8:00:3e:3c:73:7a:76:a0:
                    34:8f:95:1e:ac:ba:56:b8:2f:47:b7:3b:57:e4:81:
                    8c:94:e8:4a:62:a0:a8:ae:d2:55:e4:65:9e:3f:2e:
                    6c:66:d5:7a:76:99:86:d4:36:0b:a1:d1:b0:ab:b0:
                    76:1c:d6:91:31:b7:f4:9e:77:28:ad:60:0e:1a:a4:
                    2a:48:50:65:30:6d:86:92:41:1c:3f:18:f9:22:ca:
                    cb:0b:65:ea:48:c2:d1:6e:44:d3:ac:2f:99:a8:ff:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:08:93:2C:B2:B6:B2:3B:7D:C0:45:D8:0F:D0:FA:3E:C6:6E:0C:0A
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fb:bf:6e:b0:89:1f:4c:d8:42:71:39:1e:ce:64:50:bc:49:
         86:ba:58:8d:93:08:0d:b9:e8:51:f6:c1:d9:26:1b:72:e6:5e:
         5d:ec:e8:6a:e0:e0:83:66:ae:87:76:67:d4:fd:93:66:28:1d:
         74:b8:72:6a:0b:06:77:37:57:9f:d4:3c:7e:45:4c:ad:a7:54:
         a2:5f:66:b6:11:b9:16:da:35:e7:18:e9:1a:fc:de:9f:28:57:
         bf:a4:2c:de:5e:49:cb:6f:09:bb:59:76:4b:b0:16:b8:b1:e8:
         31:54:5f:75:5f:ec:26:07:81:10:cd:57:d8:43:21:2f:3b:e5:
         35:43:00:e3:56:15:ed:9c:a4:84:19:31:e7:2f:73:5b:a4:24:
         88:87:54:47:a2:89:f1:9b:91:0c:4b:e1:fa:0f:5f:5a:45:70:
         4a:53:24:00:cf:f0:2c:a1:f8:c0:04:cc:70:c1:2a:1c:1a:03:
         75:ba:87:bd:6f:87:49:7e:f3:4d:67:10:65:13:37:90:f6:ac:
         c4:df:b8:72:d9:88:51:97:92:dd:bf:6a:9f:f4:f0:54:f0:0a:
         dc:90:ed:54:40:09:ea:b8:26:8d:b7:00:30:cb:b4:11:95:b1:
         aa:7e:9b:d0:c7:50:a4:37:63:5e:03:45:46:17:32:ea:bc:c8:
         9c:06:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:13 2026 by rpki-client