Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File:                     BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier:          ECG2nzMME6tOd2oHelT/cZvJQqQImLUM51PkwVyq6tE=
Subject key identifier:   09:A2:12:A5:BC:02:AE:C1:2A:BD:24:B1:BE:1B:84:37:AB:B9:B7:45
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       019F9022BF4AF7B8D0C8C42CABFEC063D790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number:          0E55
Signing time:             Thu 23 Jul 2026 18:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:24 +0000
Files and hashes:         1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: jCGohsM/8UhP7wObHD6D2c5ccJn04VHDsm567f5Wm7k=)
                          2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:bf:4a:f7:b8:d0:c8:c4:2c:ab:fe:c0:63:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: Jul 23 18:00:24 2026 GMT
            Not After : Jul 24 18:00:24 2026 GMT
        Subject: CN=09a212a5bc02aec12abd24b1be1b8437abb9b745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:30:8e:c8:2a:5f:29:3c:47:a5:1d:1f:ac:
                    61:14:b2:1e:34:29:02:61:93:b6:2c:0d:64:5c:b1:
                    a0:70:fc:c9:26:38:54:a7:0a:f9:e2:c3:20:20:6f:
                    fe:53:c1:0e:0c:9d:16:af:ec:1f:ec:c9:08:74:0e:
                    e5:28:d3:b8:aa:98:52:6b:ea:cc:d2:a4:33:32:cf:
                    6c:06:f8:eb:7d:30:b7:7b:37:2b:5b:07:51:af:22:
                    ae:03:3d:c1:ab:d1:92:2c:37:10:2c:31:6a:af:21:
                    29:f1:de:71:79:c4:3a:93:20:cb:90:ec:27:01:e1:
                    45:86:8e:82:51:00:c0:23:0c:27:d3:3b:ab:ea:55:
                    ea:60:43:f7:f9:88:3f:27:f9:88:5f:41:3e:24:b3:
                    0f:67:a9:ca:94:cf:cc:47:e4:79:7d:9d:32:59:78:
                    b6:b5:0c:cb:92:c8:bf:d0:5c:c6:54:3a:e7:34:cc:
                    8c:6a:2c:d3:1e:a7:e2:0e:89:d8:b7:56:89:a4:d9:
                    63:72:d8:f5:6e:f8:0a:56:18:aa:fa:bf:1c:3a:ba:
                    d8:68:2f:35:02:8f:af:d3:90:7d:f0:8e:40:43:7f:
                    17:f8:81:1e:9f:37:91:ca:83:8e:9b:ce:7a:53:12:
                    ff:e3:0d:94:96:3e:72:e9:06:9f:22:be:b8:b5:a9:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:12:A5:BC:02:AE:C1:2A:BD:24:B1:BE:1B:84:37:AB:B9:B7:45
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:76:78:c7:42:34:30:41:00:d3:b3:6c:23:cd:89:1c:e2:
         62:8b:25:57:40:52:38:84:2c:47:32:dd:fe:12:fc:81:7b:a1:
         e2:00:4d:67:d6:ea:87:c9:48:00:18:93:eb:1b:24:77:25:b8:
         f8:06:5d:85:40:07:57:fd:c2:df:68:bd:fb:d2:e3:4b:ab:b1:
         02:b2:f4:13:89:94:eb:6c:ca:ab:6c:22:a4:15:6b:85:11:a3:
         2b:bf:29:af:96:8c:b8:9a:58:03:0f:a3:02:df:0e:d3:37:9c:
         7e:bf:72:60:64:d0:d5:ce:01:5c:ee:8f:bb:04:23:c4:a7:35:
         f8:a7:c2:0e:2b:ea:44:26:a1:65:8e:c3:78:b8:eb:49:60:08:
         c9:2d:6a:e5:13:8b:f6:69:0e:2b:7d:ef:3c:a5:a6:5d:ac:04:
         14:04:2a:d2:7c:d8:34:86:fb:96:ef:9d:11:0a:67:7c:ac:67:
         7f:71:23:a2:a0:5a:4e:47:a1:8b:a7:09:b5:5b:3c:09:51:0f:
         b9:bd:5a:26:6f:c2:cf:5c:8d:36:cd:67:6e:9b:ed:11:5c:ee:
         8a:d0:33:91:5d:90:98:cd:00:39:c1:f2:fb:b8:f8:a5:e0:86:
         a8:74:9d:28:51:18:14:8f:1f:dc:af:81:e1:90:02:c7:1a:17:
         3d:d8:4d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIr9K97jQyMQsq/7AY9eQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDMzYTkxMGZjZjJjMWIxNTk3N2ExOGFjZTdkODU3YmE1
OGI5YWEwHhcNMjYwNzIzMTgwMDI0WhcNMjYwNzI0MTgwMDI0WjAzMTEwLwYDVQQD
EygwOWEyMTJhNWJjMDJhZWMxMmFiZDI0YjFiZTFiODQzN2FiYjliNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KYwjsgqXyk8R6UdH6xhFLIeNCkC
YZO2LA1kXLGgcPzJJjhUpwr54sMgIG/+U8EODJ0Wr+wf7MkIdA7lKNO4qphSa+rM
0qQzMs9sBvjrfTC3ezcrWwdRryKuAz3Bq9GSLDcQLDFqryEp8d5xecQ6kyDLkOwn
AeFFho6CUQDAIwwn0zur6lXqYEP3+Yg/J/mIX0E+JLMPZ6nKlM/MR+R5fZ0yWXi2
tQzLksi/0FzGVDrnNMyMaizTHqfiDonYt1aJpNljctj1bvgKVhiq+r8cOrrYaC81
Ao+v05B98I5AQ38X+IEenzeRyoOOm856UxL/4w2Ulj5y6QafIr64tanYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmiEqW8Aq7BKr0ksb4bhDerubdFMB8GA1UdIwQY
MBaAFAcDOpEPzywbFZd6GKzn2Fe6WLmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODIt
NjY5MTUxMzlkODlhLzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni81ZWRhN2MtN2M5Mi00Mzg2LThkODItNjY5MTUxMzlkODlh
LzEvQndNNmtRX1BMQnNWbDNvWXJPZllWN3BZdWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjV2eMdC
NDBBANOzbCPNiRziYoslV0BSOIQsRzLd/hL8gXuh4gBNZ9bqh8lIABiT6xskdyW4
+AZdhUAHV/3C32i9+9LjS6uxArL0E4mU62zKq2wipBVrhRGjK78pr5aMuJpYAw+j
At8O0zecfr9yYGTQ1c4BXO6PuwQjxKc1+KfCDivqRCahZY7DeLjrSWAIyS1q5ROL
9mkOK33vPKWmXawEFAQq0nzYNIb7lu+dEQpnfKxnf3EjoqBaTkehi6cJtVs8CVEP
ub1aJm/Cz1yNNs1nbpvtEVzuitAzkV2QmM0AOcHy+7j4peCGqHSdKFEYFI8f3K+B
4ZACxxoXPdhNhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:16 2026 by rpki-client