Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          5Rg9H0m9JA/vDeefn6BN0z/Q0aAGjYB/+EDLb/fU58E=
Subject key identifier:   E2:84:47:2A:B9:10:BB:7A:A5:81:B9:33:D2:E9:C7:B5:F9:58:36:0B
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       019E20242E95DF9B7E9DF1B3AF092CAD67D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 07:01:42 +0000
Manifest this update:     Wed 13 May 2026 07:01:42 +0000
Manifest next update:     Thu 14 May 2026 07:01:42 +0000
Files and hashes:         1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: DJdpO0XGTGDrell2FmHL2Vz8sPYDv5DXnyBRqQbVcAg=)
                          2: pANXzrraCHYVkzSawo9c9dlj6zU.roa (hash: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:2e:95:df:9b:7e:9d:f1:b3:af:09:2c:ad:67:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: May 13 07:01:42 2026 GMT
            Not After : May 14 07:01:42 2026 GMT
        Subject: CN=e284472ab910bb7aa581b933d2e9c7b5f958360b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:73:1d:4d:5a:89:4f:14:9f:ce:32:53:eb:
                    3b:9a:d4:1e:a2:51:1f:3a:24:8a:df:58:92:c8:ee:
                    b2:9b:5b:b1:b9:a7:f5:01:48:bb:8c:c9:13:db:df:
                    58:dc:21:b7:29:96:9c:03:b7:5f:86:91:b1:4f:fd:
                    aa:02:04:e1:6f:79:56:ee:18:2f:ea:ee:45:6e:77:
                    49:4f:96:7a:d6:a4:d5:ed:d6:b5:bb:6b:62:a4:b1:
                    48:38:51:e4:24:50:c0:e3:2c:a6:8b:cf:85:2e:6e:
                    a4:26:00:be:ee:17:8a:e6:a4:b9:66:48:bb:6a:78:
                    13:99:c7:f2:3a:c5:6c:2d:07:7a:2f:e1:e2:8e:b2:
                    c2:60:b6:8a:65:ba:9e:47:28:01:ee:ad:92:ea:22:
                    fd:c3:b2:99:8a:95:2f:4f:7c:9f:9a:55:ce:9e:da:
                    25:3c:91:27:0e:f9:ce:bf:77:01:0a:2d:f0:76:ca:
                    d8:17:b0:f4:ea:92:25:a7:f7:55:db:09:48:05:12:
                    2e:9b:8a:6c:29:63:17:e2:2b:eb:c1:25:6e:bd:35:
                    a3:ae:b2:19:89:3c:5f:a0:66:35:4c:db:48:b0:15:
                    2d:0a:e1:2e:10:5c:19:bf:9d:2c:9e:5e:a0:65:55:
                    03:52:d9:7e:e1:a9:a1:19:a2:a4:0b:55:73:3f:94:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:47:2A:B9:10:BB:7A:A5:81:B9:33:D2:E9:C7:B5:F9:58:36:0B
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:43:f8:3e:00:c9:f0:2a:41:f5:fd:53:0b:78:27:ce:2d:90:
         40:bd:91:12:e6:03:24:d4:09:48:87:45:6e:5d:e5:9d:72:d5:
         ac:59:c8:1a:2e:69:21:00:12:03:8c:8c:00:04:fa:5f:65:a6:
         a3:94:8b:e6:c7:7a:7c:7f:21:0c:f5:e0:87:f4:e1:64:38:59:
         9a:cd:0a:cc:b1:9a:d4:21:7a:36:89:8c:62:48:ee:37:6e:38:
         ab:aa:06:47:8a:4c:38:d8:31:0f:55:81:0c:22:17:cb:de:c8:
         f5:84:c8:23:c3:f5:59:87:de:ee:d4:58:b1:97:02:84:c3:97:
         84:dc:86:0b:08:9c:ce:56:30:f3:cd:3e:9c:06:1f:09:c8:d0:
         69:14:47:0c:f0:8f:d4:ce:8c:3f:5f:84:00:f4:62:73:a1:ad:
         c0:c9:89:bd:13:7e:9c:01:aa:c7:bd:11:40:09:3e:3a:59:c8:
         07:08:af:e8:98:e4:53:ee:e4:24:56:a7:d5:ef:88:51:42:6d:
         32:46:88:89:70:aa:77:87:13:30:72:ca:2c:00:4d:a6:26:ca:
         18:87:3f:93:a9:6d:07:f3:29:fe:c1:ad:b1:d0:29:b3:44:3e:
         82:77:ba:60:92:a2:0e:d2:3b:9d:75:ed:fe:a4:1e:19:e9:e3:
         08:72:fb:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJC6V35t+nfGzrwksrWfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjYwNTEzMDcwMTQyWhcNMjYwNTE0MDcwMTQyWjAzMTEwLwYDVQQD
EyhlMjg0NDcyYWI5MTBiYjdhYTU4MWI5MzNkMmU5YzdiNWY5NTgzNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/5zHU1aiU8Un84yU+s7mtQeolEf
OiSK31iSyO6ym1uxuaf1AUi7jMkT299Y3CG3KZacA7dfhpGxT/2qAgThb3lW7hgv
6u5FbndJT5Z61qTV7da1u2tipLFIOFHkJFDA4yymi8+FLm6kJgC+7heK5qS5Zki7
angTmcfyOsVsLQd6L+HijrLCYLaKZbqeRygB7q2S6iL9w7KZipUvT3yfmlXOntol
PJEnDvnOv3cBCi3wdsrYF7D06pIlp/dV2wlIBRIum4psKWMX4ivrwSVuvTWjrrIZ
iTxfoGY1TNtIsBUtCuEuEFwZv50snl6gZVUDUtl+4amhGaKkC1VzP5TatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKERyq5ELt6pYG5M9Lpx7X5WDYLMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEP4PgDJ
8CpB9f1TC3gnzi2QQL2REuYDJNQJSIdFbl3lnXLVrFnIGi5pIQASA4yMAAT6X2Wm
o5SL5sd6fH8hDPXgh/ThZDhZms0KzLGa1CF6NomMYkjuN244q6oGR4pMONgxD1WB
DCIXy97I9YTII8P1WYfe7tRYsZcChMOXhNyGCwiczlYw880+nAYfCcjQaRRHDPCP
1M6MP1+EAPRic6GtwMmJvRN+nAGqx70RQAk+OlnIBwiv6JjkU+7kJFan1e+IUUJt
MkaIiXCqd4cTMHLKLABNpibKGIc/k6ltB/Mp/sGtsdAps0Q+gne6YJKiDtI7nXXt
/qQeGenjCHL71g==
-----END CERTIFICATE-----
Generated at Wed May 13 15:20:25 2026 by rpki-client