Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File:                     bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier:          UUajCISobcc4pVKkQgsHmZ711BvWMb0I59tOxN6OLp8=
Subject key identifier:   06:15:DC:98:D4:CF:5D:D6:7C:9C:6E:A0:8F:11:C2:A7:F5:22:2F:65
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer:       /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial:       019ED3F41E35B021FC396B235BD7EAEC00B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number:          11D8
Signing time:             Wed 17 Jun 2026 05:00:51 +0000
Manifest this update:     Wed 17 Jun 2026 05:00:51 +0000
Manifest next update:     Thu 18 Jun 2026 05:00:51 +0000
Files and hashes:         1: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: OGEpxlVuIM0JMSWX6EJhIuqawGbJJAFeVpBUZzsB+aI=)
                          2: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (hash: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:1e:35:b0:21:fc:39:6b:23:5b:d7:ea:ec:00:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
        Validity
            Not Before: Jun 17 05:00:51 2026 GMT
            Not After : Jun 18 05:00:51 2026 GMT
        Subject: CN=0615dc98d4cf5dd67c9c6ea08f11c2a7f5222f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:5e:d6:a0:1a:4f:34:a1:88:7a:c5:4f:21:
                    df:78:16:9a:66:05:0a:7d:93:32:d6:20:7e:f4:a4:
                    80:a9:9c:01:82:9c:68:37:23:f1:de:aa:06:53:80:
                    19:a3:79:39:c0:0c:e8:60:9e:90:b6:06:80:b1:cf:
                    7c:c4:77:a8:17:ed:aa:8b:4b:c1:f4:32:a5:ac:65:
                    7d:e0:97:8e:b0:36:bc:c2:59:a4:d3:06:7e:e8:78:
                    23:6c:87:25:5d:35:0b:68:84:c4:7c:c4:bf:02:9f:
                    77:72:49:c8:24:a9:68:dc:08:6c:c3:a4:94:2e:f8:
                    e2:2a:45:7a:7c:8a:89:25:04:19:3b:4e:56:33:36:
                    9d:37:85:85:b4:eb:7b:ea:cf:bf:d7:80:0e:01:fa:
                    e7:de:3a:a2:e5:58:61:f5:74:af:f2:5d:17:e8:1c:
                    04:37:8b:2c:ab:41:d5:cb:28:00:6d:ae:15:2f:5f:
                    b1:a2:93:74:af:cf:1b:e5:3d:f5:2b:9b:c1:f0:66:
                    99:01:cf:c5:c3:7f:c0:c7:c7:f2:9f:e5:f8:e5:1f:
                    ef:d5:6b:8a:60:e8:77:3b:8f:4d:59:92:86:5e:a8:
                    7c:d0:17:40:0d:a0:eb:0c:94:b7:0a:b5:55:e7:c5:
                    5c:d0:bc:5e:9c:ea:ac:f0:3e:56:a6:58:dc:78:e1:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:15:DC:98:D4:CF:5D:D6:7C:9C:6E:A0:8F:11:C2:A7:F5:22:2F:65
            X509v3 Authority Key Identifier:
                keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:04:5d:b1:9f:32:f8:14:92:ff:ab:16:0c:ef:3f:36:85:8c:
         3e:c0:a1:98:1d:c9:25:4f:73:e2:e6:f0:51:de:80:b1:67:dd:
         f5:21:05:63:54:76:88:80:83:71:a2:ec:8f:86:bc:1f:5e:57:
         f5:2e:1c:ff:23:2f:d3:ba:a5:39:18:e2:6d:a4:12:3b:5f:4d:
         9c:29:49:90:9c:68:51:87:d3:89:01:2d:b9:ca:e4:ea:07:22:
         67:da:a8:4a:ef:9b:1d:30:23:80:7b:34:ed:77:41:47:b8:8a:
         c5:22:3b:3a:64:3b:4f:ed:2f:71:f0:fa:33:d7:7e:f0:b1:11:
         87:e3:3e:d6:46:78:4d:f7:49:e3:32:cf:10:3f:00:22:a5:06:
         0f:83:8b:94:60:a9:3e:6d:85:01:1d:0d:4e:55:a1:f1:35:3b:
         e1:4a:c2:54:42:eb:35:54:0d:49:1f:e1:7b:3b:9b:7c:9e:93:
         5b:73:4e:f2:59:e0:8b:f6:66:21:87:15:63:08:c9:e8:3d:c4:
         d3:20:91:41:7a:eb:f5:15:8e:22:67:e7:8f:36:b9:46:26:36:
         f1:25:19:56:99:3c:8c:fa:a9:15:75:2d:ec:05:e9:a8:2d:0c:
         4d:d0:eb:35:94:52:cd:4d:d6:d2:cc:a0:96:2c:a9:b8:dd:0e:
         dd:93:30:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7T9B41sCH8OWsjW9fq7AC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj
MWIzYmIwHhcNMjYwNjE3MDUwMDUxWhcNMjYwNjE4MDUwMDUxWjAzMTEwLwYDVQQD
EygwNjE1ZGM5OGQ0Y2Y1ZGQ2N2M5YzZlYTA4ZjExYzJhN2Y1MjIyZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNte1qAaTzShiHrFTyHfeBaaZgUK
fZMy1iB+9KSAqZwBgpxoNyPx3qoGU4AZo3k5wAzoYJ6QtgaAsc98xHeoF+2qi0vB
9DKlrGV94JeOsDa8wlmk0wZ+6HgjbIclXTULaITEfMS/Ap93cknIJKlo3Ahsw6SU
LvjiKkV6fIqJJQQZO05WMzadN4WFtOt76s+/14AOAfrn3jqi5Vhh9XSv8l0X6BwE
N4ssq0HVyygAba4VL1+xopN0r88b5T31K5vB8GaZAc/Fw3/Ax8fyn+X45R/v1WuK
YOh3O49NWZKGXqh80BdADaDrDJS3CrVV58Vc0LxenOqs8D5WpljceOGrYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYV3JjUz13WfJxuoI8Rwqf1Ii9lMB8GA1UdIwQY
MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut
ZWVmNmMyZjQ1MTc2LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2
LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiARdsZ8y
+BSS/6sWDO8/NoWMPsChmB3JJU9z4ubwUd6AsWfd9SEFY1R2iICDcaLsj4a8H15X
9S4c/yMv07qlORjibaQSO19NnClJkJxoUYfTiQEtucrk6gciZ9qoSu+bHTAjgHs0
7XdBR7iKxSI7OmQ7T+0vcfD6M9d+8LERh+M+1kZ4TfdJ4zLPED8AIqUGD4OLlGCp
Pm2FAR0NTlWh8TU74UrCVELrNVQNSR/hezubfJ6TW3NO8lngi/ZmIYcVYwjJ6D3E
0yCRQXrr9RWOImfnjza5RiY28SUZVpk8jPqpFXUt7AXpqC0MTdDrNZRSzU3W0syg
liypuN0O3ZMwng==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:01:55 2026 by rpki-client