Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          noKouXbP7jdYHrz6bVQsFuzOhiK+sX7/L+g6bn/7uVo=
Subject key identifier:   AD:12:07:90:07:77:0C:A4:85:2A:71:5E:51:93:48:ED:02:A6:32:7E
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       019D273B1E37568F2EE58CEAC96013EE91AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          159C
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: HTZfgpKCf0I5BPgkexhpKqF1yRaXjcHEtFmxNigBjWU=)
                          2: JIEhVEb7vuf6mZT0D-HkDhiprw4.roa (hash: kUlfLRz77He0BobUk/bTzZitrlElw6iuHTCVkpCMU68=)
                          3: ajDcPSaNkVwxb7R46AaZC5rNaL0.roa (hash: ztTrd7SfULy2SlrLbJNT3KaJG4YDePjF1rkSt93Y3sk=)
                          4: fyvhyswuOrkYuG7Dxy3RXqdfaj4.roa (hash: i6Apw5kLn3fbRfNpJwcSwX8fAA6K51pqRQmFfW1EtUQ=)
                          5: nt6j0M5k40J221DBq4EEB-4AdjU.roa (hash: ZolhnulZI85QrjvvsEsAb+TY48nVRV/0kpIOIks7Vbw=)
                          6: wtka4z7ztds-k3iO7wp9y0osEUY.roa (hash: 7Vs2oBterma76wN+0B4LZEwE0nOwCbvncK5XltWq/qI=)
                          7: zz_UCRRefM6imBv_CoSvLx-eFO4.roa (hash: /T25xJQSR6UeswHjk+VE1c3w9pu3Q8+SWMmg9H+vkmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1e:37:56:8f:2e:e5:8c:ea:c9:60:13:ee:91:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=ad12079007770ca4852a715e519348ed02a6327e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:43:d4:42:54:69:6c:7e:0d:34:e1:86:a9:
                    1f:15:54:51:bb:05:2b:03:ed:f4:df:b7:cb:21:f3:
                    9c:a9:ae:7a:51:b0:66:18:26:76:5e:8d:91:fb:85:
                    5f:e7:c2:4d:e1:12:ac:c3:92:9a:ea:60:a4:fe:27:
                    37:6a:20:01:95:6f:0e:cc:61:3c:4b:1e:00:e2:2e:
                    e5:df:5e:17:9d:38:27:95:3f:f5:c6:d1:e1:a3:c1:
                    b8:da:27:59:22:9c:5c:2c:01:f4:e2:c3:53:50:6a:
                    4a:48:1c:8a:3b:8f:2b:34:72:31:63:9e:13:3b:aa:
                    a4:39:40:e9:70:a2:69:90:2a:0c:69:c2:51:1d:f4:
                    15:74:95:c9:d8:66:7b:4a:93:a9:ee:50:3f:34:00:
                    b5:c7:f7:a2:b6:9e:89:25:43:bd:ef:bd:c3:06:d5:
                    ab:77:71:d7:19:7f:17:22:3b:52:2d:2d:90:34:da:
                    b1:62:33:15:95:aa:56:dc:7d:47:f3:f2:57:8d:1d:
                    dc:2c:55:45:23:bc:e7:3a:19:6f:02:d4:be:8a:1c:
                    68:67:32:f4:7c:8b:24:c7:f2:89:5c:51:e9:31:e6:
                    7c:f7:c2:7c:36:8b:50:a5:9c:b5:6f:7f:f3:bd:f4:
                    2c:fb:fd:ac:a0:78:64:8e:33:e3:b0:68:d9:db:3e:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:12:07:90:07:77:0C:A4:85:2A:71:5E:51:93:48:ED:02:A6:32:7E
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:ae:1a:cb:6e:7f:19:f7:9f:cd:f1:85:61:bf:2b:45:57:
         7a:3c:bb:bc:d0:1a:b1:00:52:96:db:9f:da:ef:29:e1:bf:ae:
         73:9d:6c:33:00:ab:74:7e:e5:55:3c:06:c0:bf:a2:7e:9f:4a:
         bf:8a:c7:58:66:63:8a:f8:99:1d:cf:cb:37:f9:90:a4:7f:63:
         d5:68:cd:4d:7e:a5:24:74:88:c2:6e:68:95:35:ec:dd:6b:7d:
         ae:85:55:51:5d:b5:c7:15:cf:65:3d:dc:2e:42:86:10:8c:45:
         a4:68:d2:3b:c4:57:ce:45:8b:2b:cb:67:65:15:ca:74:9c:c3:
         28:db:12:41:7b:fa:1b:e1:06:f0:ca:2a:29:3f:73:3e:37:c5:
         73:b8:fe:7a:60:7b:08:8c:df:3d:87:e8:bc:a1:da:80:47:01:
         af:b0:41:fe:ee:b1:33:7a:9a:32:9a:ce:bb:0a:22:ba:2e:8c:
         a9:4e:43:53:9f:fe:7b:8d:56:43:6b:55:bc:20:5e:cc:af:13:
         34:16:bd:5a:de:7a:a5:90:50:15:0f:74:90:39:c2:d1:6e:d2:
         cb:72:af:a7:6f:c6:94:78:9d:c8:52:fb:33:09:ff:ef:0e:30:
         ad:ab:50:51:13:a5:92:e5:13:b1:68:d4:3d:0a:51:fd:b3:57:
         98:c2:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client