Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File:                     BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier:          rYPlSUXEquzxsns5xJ3rFm8c+Zkufg+uSV3Ip5S15Ek=
Subject key identifier:   35:CE:65:4A:D5:41:01:BE:35:76:19:F5:18:E5:3C:0C:7B:DD:E0:D4
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer:       /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial:       01A0C4E99B80913BA7674D253B0EA498C9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number:          07F9
Signing time:             Mon 21 Sep 2026 17:00:38 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:38 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:38 +0000
Files and hashes:         1: 9lU8W6GsbjOikxoEyiZGZ32gMu8.roa (hash: 6hhQ4bRIwowHm8SVibrWEZqFmNLkjdhuBAUnwS85Eso=)
                          2: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: 3zG3iF3+Es9rAOFJww283NDyugzE4vD0ruXXma9d8kw=)
                          3: pJ3ORYu20jUimM_yTFjEk51Oq9o.roa (hash: PCTJatpDnAOhayMUHNJZY/fD1I6Bq7AxOUaU54uRZNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:9b:80:91:3b:a7:67:4d:25:3b:0e:a4:98:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
        Validity
            Not Before: Sep 21 17:00:38 2026 GMT
            Not After : Sep 22 17:00:38 2026 GMT
        Subject: CN=35ce654ad54101be357619f518e53c0c7bdde0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:c4:6c:61:e9:e6:6f:7a:6c:b2:bc:25:ef:
                    32:57:bc:40:82:f5:6b:2d:cf:86:ae:6f:7d:65:d2:
                    06:6e:eb:9d:50:5e:7d:98:a5:e8:9f:ec:de:5c:d1:
                    49:d7:2f:bb:eb:cf:2c:4c:19:9f:bc:d7:80:77:72:
                    75:a8:b4:c1:46:c7:69:43:45:dc:f0:e7:4d:3b:31:
                    9f:6f:d4:b8:83:83:d4:1d:36:9a:dd:da:f9:b3:ae:
                    d4:1f:5e:10:91:3d:9b:04:fa:b6:49:de:40:71:9a:
                    b9:82:70:90:35:dd:5c:4c:69:d3:f5:82:e6:38:49:
                    d4:d7:01:33:dd:11:26:fc:d7:6a:3b:8c:cd:7e:c0:
                    4d:b3:63:e5:28:c5:c4:ff:1a:1e:86:cb:e9:94:e7:
                    03:f5:48:30:9a:a1:8a:39:21:ac:2f:30:e4:5c:5e:
                    ef:d2:4a:0b:bc:b8:58:8d:87:53:19:d2:ff:8d:2a:
                    97:f3:68:33:fa:94:4b:f1:c3:34:04:fe:03:d5:bc:
                    56:03:f3:8c:ed:bf:c6:35:10:d8:e3:6f:6c:d7:d1:
                    65:a5:0e:8a:9e:bb:5d:18:1a:bd:67:ed:f4:83:c6:
                    e2:84:05:25:f8:87:d3:5a:ac:f1:7d:58:22:c8:54:
                    61:61:f3:40:47:76:a8:ad:a7:e0:79:f2:bd:9b:93:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:65:4A:D5:41:01:BE:35:76:19:F5:18:E5:3C:0C:7B:DD:E0:D4
            X509v3 Authority Key Identifier:
                keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e5:79:4b:8c:5c:3a:d3:66:10:c9:3e:23:c2:98:89:2b:7e:
         3e:a9:2a:63:8b:9c:60:eb:76:00:10:a3:69:e4:63:4b:26:0b:
         e6:e3:bf:a7:2a:f7:f3:08:7d:76:28:16:9c:a7:2b:c5:17:ae:
         74:ba:5d:83:a0:b6:2a:a1:df:b5:74:2c:29:cb:ab:74:b3:14:
         01:cb:04:15:b4:dc:30:31:e8:89:00:ba:9d:cd:e7:25:c9:77:
         a3:b4:fd:c1:30:a7:5f:ca:7a:7b:33:1d:c7:bb:3b:c3:aa:c1:
         ba:b9:f2:a1:06:64:34:3a:f7:fa:19:40:90:33:8a:52:29:67:
         3f:d1:c5:3d:a3:20:85:b7:f6:70:a4:af:b2:e7:ce:8b:2d:c3:
         d3:b8:1e:1e:33:db:ab:b0:f6:88:db:6a:44:32:8b:c5:09:58:
         42:ac:46:94:44:fc:29:74:c8:bc:dc:36:85:fc:25:55:c5:b5:
         92:36:c2:51:68:52:45:8f:04:24:46:0b:63:1c:58:6f:52:50:
         c7:52:81:86:79:a2:67:26:75:70:63:c3:6e:2d:8d:bb:ef:51:
         03:19:62:1e:a3:0c:bf:1b:4a:ea:f9:63:e1:8f:33:0e:3f:75:
         f9:b6:cf:f7:52:f7:3e:bf:52:97:a3:fb:b8:22:64:9f:6d:d5:
         45:d3:76:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6ZuAkTunZ00lOw6kmMn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2MyYTI2YjMxYWMyNGJjNTI5NWQyNGE4ZTEzMDcxZjJm
ZjBkNjEwHhcNMjYwOTIxMTcwMDM4WhcNMjYwOTIyMTcwMDM4WjAzMTEwLwYDVQQD
EygzNWNlNjU0YWQ1NDEwMWJlMzU3NjE5ZjUxOGU1M2MwYzdiZGRlMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8PEbGHp5m96bLK8Je8yV7xAgvVr
Lc+Grm99ZdIGbuudUF59mKXon+zeXNFJ1y+7688sTBmfvNeAd3J1qLTBRsdpQ0Xc
8OdNOzGfb9S4g4PUHTaa3dr5s67UH14QkT2bBPq2Sd5AcZq5gnCQNd1cTGnT9YLm
OEnU1wEz3REm/NdqO4zNfsBNs2PlKMXE/xoehsvplOcD9UgwmqGKOSGsLzDkXF7v
0koLvLhYjYdTGdL/jSqX82gz+pRL8cM0BP4D1bxWA/OM7b/GNRDY429s19FlpQ6K
nrtdGBq9Z+30g8bihAUl+IfTWqzxfVgiyFRhYfNAR3aorafgefK9m5OsiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXOZUrVQQG+NXYZ9RjlPAx73eDUMB8GA1UdIwQY
MBaAFAbMKiazGsJLxSldJKjhMHHy/w1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYt
ZmQ4NDIxYmYyYmE5LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYtZmQ4NDIxYmYyYmE5
LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+V5S4xc
OtNmEMk+I8KYiSt+PqkqY4ucYOt2ABCjaeRjSyYL5uO/pyr38wh9digWnKcrxReu
dLpdg6C2KqHftXQsKcurdLMUAcsEFbTcMDHoiQC6nc3nJcl3o7T9wTCnX8p6ezMd
x7s7w6rBurnyoQZkNDr3+hlAkDOKUilnP9HFPaMghbf2cKSvsufOiy3D07geHjPb
q7D2iNtqRDKLxQlYQqxGlET8KXTIvNw2hfwlVcW1kjbCUWhSRY8EJEYLYxxYb1JQ
x1KBhnmiZyZ1cGPDbi2Nu+9RAxliHqMMvxtK6vlj4Y8zDj91+bbP91L3Pr9Sl6P7
uCJkn23VRdN2Qg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:35:08 2026 by rpki-client