Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          w40yLxHfJSlAaVG40VKgo1/CC2Jd7gxiykVnhtzST8o=
Subject key identifier:   19:D2:EE:75:C1:01:6B:BA:6E:00:42:EC:8F:D9:29:00:79:17:E1:87
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019D9BBF2945B36C5360F89642EED4C28CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          10F6
Signing time:             Fri 17 Apr 2026 14:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:29 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: ExVgxEGQo4iafiouWtVAM+hf2Q8Gl1HhrQQrESaeCGE=)
                          5: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (hash: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=)
                          6: uPJ41x9gXFZvH0XjhDwDfoSRvuA.roa (hash: CSgM/lBkv2e8MJoFPexRop5Baj/+XW/edrOd+DlHhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:29:45:b3:6c:53:60:f8:96:42:ee:d4:c2:8c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 17 14:01:29 2026 GMT
            Not After : Apr 18 14:01:29 2026 GMT
        Subject: CN=19d2ee75c1016bba6e0042ec8fd929007917e187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:01:d3:b8:85:b1:36:50:25:50:4d:66:57:
                    fd:43:d5:67:88:45:5e:4b:ed:eb:22:6f:e0:b9:c6:
                    98:fb:c5:92:b4:3e:7b:12:9d:e2:e7:d2:a4:5c:3e:
                    0b:98:77:3a:a4:3e:73:a7:ac:7f:ac:2b:fc:07:6a:
                    20:61:52:61:ed:3f:3c:7c:72:ab:5a:03:ae:c5:71:
                    bb:9a:ba:8f:3a:b2:a0:ab:7d:fd:31:33:51:d3:58:
                    48:64:b4:15:a2:8e:68:2a:f6:fe:73:a7:cf:01:85:
                    e6:e1:cb:b2:85:44:7d:5b:2f:da:16:71:56:d4:ab:
                    c5:1b:73:7d:6c:13:cd:32:6d:f7:dc:9d:6d:0e:04:
                    d2:c9:0b:21:b3:6b:ea:00:d2:ac:b7:a6:b5:1b:d9:
                    5e:6d:c1:24:08:c8:51:0f:cc:b1:06:91:ff:cb:9b:
                    2e:df:54:b6:7f:e0:53:25:26:e2:86:e4:8f:ff:2d:
                    f0:4b:38:d3:43:85:bc:95:88:2b:89:32:2a:dc:36:
                    28:30:44:37:aa:a8:51:74:5a:2a:aa:60:4c:de:db:
                    56:ca:fc:cf:08:4b:7f:b3:3f:8b:d6:94:fd:ea:8d:
                    2f:d8:2b:73:66:83:d5:ab:29:81:3d:38:f9:a0:1f:
                    23:70:56:63:47:e8:ee:e9:aa:f1:d9:c3:3f:46:ac:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:EE:75:C1:01:6B:BA:6E:00:42:EC:8F:D9:29:00:79:17:E1:87
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:7b:9a:60:ac:a0:19:5f:4e:a8:d6:16:54:f0:f2:8b:9f:
         ec:83:e4:d2:f2:54:db:15:b6:a3:4b:f0:26:2e:5f:98:44:f0:
         7c:af:74:9b:83:9e:c9:3f:c8:45:ee:f2:29:95:52:cf:be:d1:
         36:14:1c:88:2a:70:d9:27:a2:07:42:b1:81:23:b0:f0:db:e8:
         42:4c:e3:69:f7:c6:41:08:e0:71:1d:d6:88:c7:52:d9:75:56:
         4e:b8:67:93:94:a8:1b:14:10:a8:f5:1d:8e:8e:32:73:c8:db:
         d2:fb:74:97:fd:6e:81:32:50:f3:9e:9a:9c:3f:38:f3:49:90:
         36:a0:32:25:c9:5e:e6:f3:44:fb:0e:e9:26:bd:ba:b9:a9:89:
         a4:84:ff:cf:19:09:2d:b2:1c:31:ad:c1:e6:ee:3b:1d:c5:47:
         d9:61:94:3f:68:d7:72:8c:25:b3:51:1f:40:9f:85:7f:f4:ac:
         52:2d:cf:4d:9a:49:e6:78:e8:27:99:be:67:c7:be:e5:fb:3b:
         1f:af:6e:7c:46:91:e2:5e:e3:d0:d6:4c:ee:00:4b:3c:91:49:
         4d:55:2a:dd:2d:57:84:91:53:c5:de:a8:ea:f1:d1:a8:b2:c9:
         ea:13:57:7f:b8:1c:a5:4b:b0:ad:24:40:34:bb:9a:08:53:09:
         54:5a:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:26 2026 by rpki-client