Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File:                     BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier:          D8WKuNBtp0WCUAwXNbusKT6lHj4h3hE/Dh9tcZbrUYs=
Subject key identifier:   69:B7:2A:94:E2:64:F1:85:EC:12:97:7E:6D:6D:40:59:FF:0A:95:5F
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer:       /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial:       019E1D90A94CB9C4DA020D2BEDCD123EFC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number:          090A
Signing time:             Tue 12 May 2026 19:01:20 +0000
Manifest this update:     Tue 12 May 2026 19:01:20 +0000
Manifest next update:     Wed 13 May 2026 19:01:20 +0000
Files and hashes:         1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
                          2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: YP8m2GOmS0ZPmaqk9xlwYd2HF5vDuDYhcZ2ykcsUdrg=)
                          3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
                          4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
                          5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
                          6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
                          7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
                          8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
                          9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a9:4c:b9:c4:da:02:0d:2b:ed:cd:12:3e:fc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
        Validity
            Not Before: May 12 19:01:20 2026 GMT
            Not After : May 13 19:01:20 2026 GMT
        Subject: CN=69b72a94e264f185ec12977e6d6d4059ff0a955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:bc:fb:84:14:f5:ff:0c:a6:2a:c4:69:9e:
                    c4:93:c6:67:b1:69:f5:62:95:05:9e:b5:86:c2:cc:
                    39:87:13:63:cb:b0:2c:4c:d8:14:84:85:37:fe:d0:
                    42:c3:6d:c8:e5:3d:12:22:5f:96:bd:f1:d6:bb:f6:
                    23:65:da:28:06:50:0e:5e:f2:15:00:40:30:81:36:
                    f0:23:64:b7:21:b8:94:b5:49:ce:38:ca:e9:58:19:
                    3c:25:f4:4a:b1:2f:5e:02:d3:ec:4a:86:cc:43:d5:
                    c0:62:94:1b:94:d9:c5:71:4d:07:77:ca:54:d3:98:
                    8e:63:40:37:22:e7:ee:11:c7:74:c8:d0:d4:5a:e2:
                    52:ef:17:83:d9:77:d1:0f:32:70:0f:29:d8:ea:a7:
                    74:ee:0e:f4:83:02:c7:45:55:82:1d:7e:03:93:4e:
                    e7:28:98:c5:02:25:c9:97:31:8e:7d:71:eb:c1:02:
                    38:76:98:08:e3:72:68:b9:74:52:75:78:9b:71:5f:
                    60:5f:f9:ef:8a:c3:80:da:cc:dd:3e:6e:ae:a7:de:
                    2b:13:8e:a5:d1:c1:d9:87:1d:7c:64:5c:92:43:78:
                    4e:65:28:3e:23:f7:94:11:2e:b0:29:73:1a:cb:b1:
                    10:47:25:b1:7c:e7:7d:da:2a:91:12:1d:46:31:96:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B7:2A:94:E2:64:F1:85:EC:12:97:7E:6D:6D:40:59:FF:0A:95:5F
            X509v3 Authority Key Identifier:
                keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:a4:17:98:74:fe:4f:e0:0f:a5:f4:97:98:86:c6:7e:2d:
         7a:a6:c9:67:7b:ff:de:c1:f3:52:dd:73:c3:2e:fd:75:5b:bb:
         38:05:86:2b:de:71:52:bb:6f:c3:22:99:56:52:2f:fa:f8:00:
         8b:34:aa:23:5e:d1:2c:3c:43:d9:6c:50:27:16:c7:55:d9:41:
         18:53:f9:d2:a5:49:7f:07:68:fe:b8:55:1f:42:a2:05:da:5c:
         e5:d4:88:5c:a4:b1:55:02:82:41:09:85:01:ff:e7:5c:1c:db:
         4e:9a:48:ca:c2:d4:b2:f5:d7:9e:29:fc:d2:d2:12:28:01:ba:
         b8:a9:3b:68:45:c0:2b:c9:3f:7f:88:bd:90:db:c8:9b:da:8b:
         d1:8f:14:3a:c4:08:7c:be:73:f8:9b:5a:6d:39:a7:f3:f3:8b:
         e5:d8:3f:db:5a:e9:de:f5:ea:8f:1b:61:aa:af:f3:a2:33:5a:
         2d:d6:76:f9:ca:a1:1b:71:77:54:cb:7c:32:bb:0d:4f:1b:58:
         60:cd:c9:72:ec:6e:d0:3a:9e:8f:8c:ff:5c:23:e1:56:72:51:
         57:b9:c5:48:1e:72:bd:ef:69:a2:9c:ce:da:77:21:75:03:be:
         7a:1b:ce:88:b1:e1:ed:4f:be:66:7a:92:f8:49:f0:61:f3:c6:
         60:f4:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:42 2026 by rpki-client