Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File:                     bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier:          UULOoKz2ctC69rGnaHWZgroyIZ7GLuMd2QLet9EP5Wk=
Subject key identifier:   5A:FA:0D:40:BD:6E:67:41:19:64:A6:8C:18:1E:A4:7C:50:29:4F:8B
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer:       /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial:       01A136A38A02ABCBE30272B77BAFD8DE6F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number:          1181
Signing time:             Tue 13 Oct 2026 19:00:49 +0000
Manifest this update:     Tue 13 Oct 2026 19:00:49 +0000
Manifest next update:     Wed 14 Oct 2026 19:00:49 +0000
Files and hashes:         1: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: FjpyTOtA0lZxiFjuYWmxR0yenANbKCnVsOf4aOQ/6Kw=)
                          2: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (hash: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=)
                          3: kdvuRg-njX_qDsvLjIal2Zqj_J4.roa (hash: zaTjAYLi0cD82R8uIQ2gxuz/9jDkNqt2GbwsDI99fxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:a3:8a:02:ab:cb:e3:02:72:b7:7b:af:d8:de:6f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
        Validity
            Not Before: Oct 13 19:00:49 2026 GMT
            Not After : Oct 14 19:00:49 2026 GMT
        Subject: CN=5afa0d40bd6e67411964a68c181ea47c50294f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:8b:96:c7:62:ad:09:a4:a1:b4:1c:76:c0:
                    87:63:64:07:1a:84:b5:3b:98:65:4e:11:d5:f4:d5:
                    f9:17:26:3d:c7:a8:0b:de:58:07:84:1e:4e:d1:37:
                    6d:a9:6e:1e:66:65:ae:1d:a2:8e:86:6e:9a:a6:09:
                    6f:c0:aa:9e:7f:7c:55:90:78:70:ac:6a:75:26:f0:
                    32:3e:b8:83:39:7c:32:39:c1:ca:7e:bc:85:cf:4e:
                    c8:e7:72:b1:c3:0e:a9:93:46:b7:ea:4f:7c:b4:aa:
                    56:d1:ff:d6:f1:b4:ea:39:de:46:f6:b9:20:95:9b:
                    8b:d0:2d:f9:a9:5f:23:9a:e9:39:02:75:bc:58:68:
                    75:0d:11:9f:de:ab:c8:36:f8:1c:a9:09:ad:dc:e7:
                    6d:4e:76:40:e7:e8:46:dd:11:24:0c:98:4c:92:13:
                    3e:e2:ba:94:b3:ec:31:46:82:50:5e:6a:95:da:cf:
                    9c:46:a2:ba:5d:4e:07:f0:d6:97:a9:17:b8:50:b9:
                    32:a9:98:6b:fd:42:83:c3:92:3e:9e:48:ee:61:44:
                    99:53:5b:e5:1d:5f:e4:d9:cd:3c:af:84:a1:64:9f:
                    da:32:82:0c:19:15:e9:a9:bc:72:c9:db:27:2e:03:
                    0e:53:ad:e3:4a:57:0b:bd:fb:53:3d:b0:41:2a:af:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:0D:40:BD:6E:67:41:19:64:A6:8C:18:1E:A4:7C:50:29:4F:8B
            X509v3 Authority Key Identifier:
                keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:77:d9:09:97:39:15:91:f6:8e:ca:62:11:cf:18:82:b0:0c:
         e5:e5:98:26:7a:ed:f5:98:7d:52:d4:bf:cf:16:bd:f1:85:f4:
         4f:2d:de:cb:dd:7c:8d:1a:f0:16:e8:84:02:f4:03:38:c9:a6:
         ef:95:9b:d9:50:8b:e0:09:56:3c:8d:4f:14:96:fc:7c:e1:d2:
         c8:8c:52:5d:45:5a:2b:12:b2:dc:e6:08:d1:7c:34:f9:b8:3d:
         31:9c:19:c6:5c:44:7c:a1:cb:77:6b:c9:bf:c7:07:59:26:06:
         78:f4:e4:b5:84:37:9d:d2:cc:1a:fa:cd:49:6f:67:18:7c:81:
         8f:6c:05:03:e8:51:aa:51:51:59:02:40:01:34:35:0c:e2:22:
         c3:30:f8:09:08:f1:02:31:6c:15:8c:44:be:e8:0a:bc:4d:5e:
         af:d5:d9:3f:9d:3e:34:c7:53:fe:02:b4:ac:e5:a9:28:54:40:
         4e:ef:cf:8e:31:77:52:ab:74:9d:e1:c2:48:af:c6:14:37:38:
         d3:67:45:94:17:5a:84:7a:b9:f7:d8:17:44:02:5f:48:c5:b8:
         05:99:90:69:c4:a1:a7:9d:47:2b:7e:78:11:fa:e8:f2:a4:95:
         b3:59:2f:aa:1f:be:c9:a8:e5:55:bb:cc:9d:b4:e6:1d:eb:9d:
         f3:e1:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:58:57 2026 by rpki-client