Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File:                     BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier:          8DXjJoyvLH8UzeVhyPvxzLcS+Sl7YXKbkWyq8d79cCY=
Subject key identifier:   EE:C3:4F:47:84:D8:F3:DA:AE:68:79:05:10:C1:96:03:B5:7E:41:75
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer:       /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial:       01A0C3D72604E404D61C04F797313BBE3E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number:          177E
Signing time:             Mon 21 Sep 2026 12:00:52 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:52 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:52 +0000
Files and hashes:         1: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (hash: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=)
                          2: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: en1lL8pGYO0ddLAQIi0/eKNsk6cPscYooMFpbKxxvh0=)
                          3: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:26:04:e4:04:d6:1c:04:f7:97:31:3b:be:3e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
        Validity
            Not Before: Sep 21 12:00:52 2026 GMT
            Not After : Sep 22 12:00:52 2026 GMT
        Subject: CN=eec34f4784d8f3daae68790510c19603b57e4175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:03:fd:3a:32:d5:08:42:7c:0a:18:fe:88:
                    5a:97:ca:57:ce:7b:23:24:63:fe:8a:1f:a0:e7:89:
                    3d:63:f2:d6:61:90:bc:41:aa:ab:9d:ff:fa:b3:fb:
                    bd:7b:4d:87:9a:8e:bc:ff:01:36:3b:cd:e5:ba:92:
                    bd:b1:2a:37:fe:de:4b:3e:44:0b:49:10:b5:06:0f:
                    fd:b1:90:fa:6b:6e:58:06:49:80:fe:da:c6:a5:8c:
                    d7:fd:53:28:56:af:0e:5a:da:8c:ed:02:b3:bb:73:
                    e5:8e:9b:a1:e3:06:d9:bd:20:51:28:ce:a8:63:a6:
                    ef:ba:3c:86:ea:10:03:45:0e:b6:e5:7a:77:4f:24:
                    6d:ea:53:96:80:b0:9c:5e:6a:3e:39:b2:5e:7b:d7:
                    1b:4e:e7:78:47:bd:dd:a2:0e:8b:2b:cc:63:a0:38:
                    57:f5:ac:10:fd:8d:ad:13:bd:36:f7:5c:b7:49:47:
                    da:b4:5b:0a:3b:84:54:fd:2c:37:e2:c6:4c:d3:ca:
                    80:05:8b:03:72:d8:67:62:7b:ea:ed:97:c5:b7:2d:
                    68:e3:9a:c5:8e:0a:b0:e1:d3:27:93:a2:51:9b:cd:
                    31:ab:4e:e3:aa:ec:e3:a2:14:c3:dd:68:09:46:4e:
                    e3:f8:99:fd:9f:cb:01:cc:a2:65:ed:5c:5c:de:da:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:4F:47:84:D8:F3:DA:AE:68:79:05:10:C1:96:03:B5:7E:41:75
            X509v3 Authority Key Identifier:
                keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:5b:a6:b6:14:93:27:7c:e7:f5:76:bc:ba:f9:1f:4f:d2:
         96:9a:64:4c:a9:79:3c:f9:3c:a1:ae:48:34:d5:9a:9c:3d:38:
         07:a9:b8:01:0d:c2:c0:e9:68:29:49:93:4f:42:2e:3c:cb:23:
         68:c8:67:1b:e4:11:ba:2d:30:1a:27:a3:41:ab:02:f7:24:5d:
         85:9f:11:ff:99:62:0e:2b:36:8c:62:04:d1:22:1e:69:f5:44:
         86:d0:c1:db:2b:c4:9c:db:0a:2a:d3:ab:10:17:5b:0a:90:c3:
         3a:2d:50:ad:c0:31:40:0a:5b:f1:a6:2b:a3:d1:8f:02:56:10:
         9a:0d:28:6f:5d:2b:2e:97:95:90:ab:02:9b:b2:e6:31:11:ef:
         f9:1c:d2:f4:3d:87:12:23:db:6d:e1:47:82:15:f4:b3:e7:6e:
         ef:2d:e9:05:26:52:00:61:6c:6d:72:e5:6d:85:fc:99:a2:e1:
         38:69:35:14:2d:3b:67:ab:f4:19:60:f4:f9:7e:a1:c3:ee:9d:
         b7:f3:8e:e2:cb:21:65:8d:3e:c2:5b:6a:13:a7:e1:43:1c:b4:
         71:28:ee:1d:78:45:50:5a:81:23:98:22:4b:5e:fc:9d:44:ae:
         ac:cc:a4:08:59:30:70:ac:ef:d9:c6:f1:f1:8a:45:9b:1a:13:
         cf:de:fa:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1yYE5ATWHAT3lzE7vj4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2
MTFhNjUwHhcNMjYwOTIxMTIwMDUyWhcNMjYwOTIyMTIwMDUyWjAzMTEwLwYDVQQD
EyhlZWMzNGY0Nzg0ZDhmM2RhYWU2ODc5MDUxMGMxOTYwM2I1N2U0MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRQD/Toy1QhCfAoY/ohal8pXznsj
JGP+ih+g54k9Y/LWYZC8Qaqrnf/6s/u9e02Hmo68/wE2O83lupK9sSo3/t5LPkQL
SRC1Bg/9sZD6a25YBkmA/trGpYzX/VMoVq8OWtqM7QKzu3Pljpuh4wbZvSBRKM6o
Y6bvujyG6hADRQ625Xp3TyRt6lOWgLCcXmo+ObJee9cbTud4R73dog6LK8xjoDhX
9awQ/Y2tE70291y3SUfatFsKO4RU/Sw34sZM08qABYsDcthnYnvq7ZfFty1o45rF
jgqw4dMnk6JRm80xq07jquzjohTD3WgJRk7j+Jn9n8sBzKJl7Vxc3tpgHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7DT0eE2PParmh5BRDBlgO1fkF1MB8GA1UdIwQY
MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt
OTNhODgyMjFkZWYyLzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy
LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmxbprYU
kyd85/V2vLr5H0/SlppkTKl5PPk8oa5INNWanD04B6m4AQ3CwOloKUmTT0IuPMsj
aMhnG+QRui0wGiejQasC9yRdhZ8R/5liDis2jGIE0SIeafVEhtDB2yvEnNsKKtOr
EBdbCpDDOi1QrcAxQApb8aYro9GPAlYQmg0ob10rLpeVkKsCm7LmMRHv+RzS9D2H
EiPbbeFHghX0s+du7y3pBSZSAGFsbXLlbYX8maLhOGk1FC07Z6v0GWD0+X6hw+6d
t/OO4sshZY0+wltqE6fhQxy0cSjuHXhFUFqBI5giS178nUSurMykCFkwcKzv2cbx
8YpFmxoTz976uQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:15 2026 by rpki-client