Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          h+eezg6nnMh+mmBLjRGBuznjMgZP3nckFsu8U1dKI/M=
Subject key identifier:   C1:60:7F:CC:E8:8F:F7:5A:2B:39:F7:FB:35:CD:D3:0A:6B:44:FC:45
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       01A0CE91BE959047148E3640A41C3B7A5EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          1781
Signing time:             Wed 23 Sep 2026 14:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:53 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: 5bKUlFQV5YhLR289wbRjkayh1vbAyZsZTmmGGIp8VvQ=)
                          2: JIEhVEb7vuf6mZT0D-HkDhiprw4.roa (hash: kUlfLRz77He0BobUk/bTzZitrlElw6iuHTCVkpCMU68=)
                          3: ajDcPSaNkVwxb7R46AaZC5rNaL0.roa (hash: ztTrd7SfULy2SlrLbJNT3KaJG4YDePjF1rkSt93Y3sk=)
                          4: nt6j0M5k40J221DBq4EEB-4AdjU.roa (hash: ZolhnulZI85QrjvvsEsAb+TY48nVRV/0kpIOIks7Vbw=)
                          5: wtka4z7ztds-k3iO7wp9y0osEUY.roa (hash: 7Vs2oBterma76wN+0B4LZEwE0nOwCbvncK5XltWq/qI=)
                          6: zPUFg5A2pgY3xvfiW66iHa9hfNo.roa (hash: dW0Ad9wpeC3A+6anjTm7ZKCvlm/fcZL5HIUg22ew0Cw=)
                          7: zz_UCRRefM6imBv_CoSvLx-eFO4.roa (hash: /T25xJQSR6UeswHjk+VE1c3w9pu3Q8+SWMmg9H+vkmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:be:95:90:47:14:8e:36:40:a4:1c:3b:7a:5e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Sep 23 14:00:53 2026 GMT
            Not After : Sep 24 14:00:53 2026 GMT
        Subject: CN=c1607fcce88ff75a2b39f7fb35cdd30a6b44fc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:85:a2:ca:99:2d:49:f9:cb:3f:e9:30:60:
                    1a:95:02:d7:17:3e:88:64:78:4d:ff:05:71:f2:ac:
                    a5:64:bf:0e:57:92:0f:e3:7d:24:66:12:64:b1:e7:
                    d6:9c:32:7d:08:f3:29:ea:cc:78:02:0a:61:77:e3:
                    28:10:41:f4:9c:6e:f1:aa:82:dc:07:a5:6f:b1:06:
                    9e:a5:91:75:64:c1:5a:5d:61:6b:fc:73:c2:ef:11:
                    c0:cb:df:c6:b8:32:76:e5:a7:5c:10:6e:5c:07:c7:
                    c5:6a:60:67:62:b7:5f:29:66:03:6e:2d:25:2e:71:
                    4c:d0:36:a5:03:91:62:3b:fe:2a:cd:7f:50:a5:eb:
                    a0:10:0b:a2:f5:ab:3d:e5:5c:7d:c8:c9:39:5d:6e:
                    81:27:01:21:6f:a5:fa:ab:b7:3a:fb:cf:06:76:db:
                    0a:9c:65:3c:7b:b8:64:05:48:d5:d8:5f:d2:58:89:
                    b9:78:62:34:0f:c2:d4:59:d9:15:78:77:be:d6:dd:
                    2c:20:90:12:df:20:16:1b:2d:d8:95:1d:dd:39:45:
                    22:eb:b8:db:6a:ee:f2:a3:7c:27:0b:df:77:67:e5:
                    5c:ad:2b:ac:a4:d8:25:3e:ac:8f:d3:44:8d:fb:32:
                    dd:f6:15:48:62:1d:34:8f:fb:99:2d:7b:bf:af:98:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:7F:CC:E8:8F:F7:5A:2B:39:F7:FB:35:CD:D3:0A:6B:44:FC:45
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:08:2d:02:d6:9b:23:65:89:8e:21:29:06:8b:7f:8c:81:
         30:c6:80:1c:fc:44:49:79:28:66:2b:98:83:41:3d:f0:08:df:
         0f:6f:ba:8d:25:05:19:76:8f:8e:f3:bc:eb:57:fa:84:e4:07:
         f0:ca:e3:4b:2c:99:40:5a:1f:de:b5:d8:b4:78:22:ce:f0:7a:
         2c:04:60:8c:d8:3a:e8:e6:e4:2c:cb:a7:22:3f:be:e9:25:06:
         95:9b:33:ea:84:4a:b8:81:37:1c:60:2f:48:68:42:91:86:72:
         90:3d:c3:c6:ed:c0:9d:22:27:7f:22:eb:13:3e:81:e5:eb:3f:
         65:af:49:58:6a:b1:6e:68:12:ae:ad:51:d6:9a:ab:39:5c:5b:
         a7:b8:87:64:a2:0c:72:57:29:7d:cb:18:09:e6:fe:8a:fe:ad:
         65:ad:9e:78:0b:4e:f3:f2:2f:23:04:3d:26:21:f0:c8:b5:20:
         8e:25:26:9d:23:ce:ea:06:8b:36:f6:ef:7c:8d:e8:ef:f4:66:
         24:8c:72:60:ea:43:8d:79:eb:e0:57:14:84:71:ce:a2:a2:24:
         aa:35:fc:f2:43:21:42:63:28:80:12:c6:88:40:64:8b:35:15:
         fa:1a:e0:ca:ab:e8:87:70:b9:e7:d0:a5:02:85:c7:65:a5:6d:
         f3:51:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:51 2026 by rpki-client