Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File:                     BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier:          cUsUcQa8kKTkQyAgzxIlPf45x88QWMMyzhZj0ATvMcw=
Subject key identifier:   43:00:CF:05:9D:3F:E5:D7:B7:9A:E6:8F:E3:82:69:7E:CB:E0:0E:51
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer:       /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial:       01A0DCF2EBA237C40ED96F242C73C9A8C8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number:          178B
Signing time:             Sat 26 Sep 2026 09:01:42 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:42 +0000
Files and hashes:         1: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (hash: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=)
                          2: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: Mjx2Ie+j47qo2jPssJqUzBGJ47cL7crEyFs3f4o4rD4=)
                          3: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:eb:a2:37:c4:0e:d9:6f:24:2c:73:c9:a8:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
        Validity
            Not Before: Sep 26 09:01:42 2026 GMT
            Not After : Sep 27 09:01:42 2026 GMT
        Subject: CN=4300cf059d3fe5d7b79ae68fe382697ecbe00e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:e1:37:0a:fb:25:5e:0d:c4:f2:99:cb:74:
                    ad:e9:e6:6d:ae:a2:95:a0:f5:af:23:51:d0:8b:71:
                    3d:db:d0:aa:24:ca:b9:23:aa:09:b6:6c:65:7d:da:
                    e9:16:80:14:50:04:37:b4:a4:64:c3:86:ea:4a:d8:
                    77:14:23:1d:90:f8:51:79:3d:1d:08:94:d1:cf:44:
                    18:52:a7:2e:c6:17:84:ed:76:25:5f:e3:f0:12:5f:
                    43:3c:c7:58:4c:e0:f2:8e:b2:c2:6f:ea:f5:b8:5d:
                    c8:e7:bb:fa:c3:cb:c2:f9:a8:47:ed:3f:55:95:0c:
                    7c:16:97:f8:f0:9e:ee:02:8d:8d:67:9f:e5:57:23:
                    27:b6:4a:32:c0:1b:cb:63:37:b1:59:a1:91:6f:1c:
                    85:1e:39:bf:52:1c:0d:3e:ea:ca:9e:16:72:f4:50:
                    a1:a7:43:22:0b:19:2b:62:11:79:32:77:30:28:da:
                    0d:47:1b:4a:3b:78:da:27:9b:d8:3b:89:e4:a9:e5:
                    89:c6:31:dd:80:54:23:af:9f:98:a2:58:cc:52:e5:
                    76:09:47:c4:d3:a8:21:17:80:35:b2:83:9b:dd:6b:
                    cf:45:d8:f4:9c:dc:b3:ff:cf:0e:2e:e6:4e:1c:af:
                    07:9a:00:d6:dd:9e:05:1a:9f:63:31:d4:a7:5f:32:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:CF:05:9D:3F:E5:D7:B7:9A:E6:8F:E3:82:69:7E:CB:E0:0E:51
            X509v3 Authority Key Identifier:
                keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:18:27:14:51:a4:28:e1:66:67:14:27:ad:f3:38:1c:37:
         8b:d6:2d:bb:7b:61:ab:5b:62:0c:8a:49:21:a4:5d:e3:12:39:
         90:e9:74:9f:e5:53:6c:69:28:cc:23:17:4c:7a:2f:cf:04:c7:
         1b:78:30:fb:91:c8:55:47:d4:72:74:8a:3b:1d:b9:ea:81:a9:
         06:56:74:46:6d:e6:7f:92:8b:17:fd:79:3c:e4:47:31:69:24:
         d0:8b:06:b2:c9:a1:4e:a7:90:2a:da:20:e8:2c:5a:f4:0f:b8:
         9f:25:bf:5e:1e:a0:37:70:23:7f:a2:e7:f9:92:85:4d:20:b9:
         fa:eb:0a:f6:bc:04:c9:59:d1:4e:04:41:69:5e:a3:37:75:c0:
         cd:9b:b9:df:5c:cd:fa:b1:bb:56:f2:82:89:5e:af:1e:cd:b2:
         8b:28:b7:e6:df:47:b0:d1:18:bc:b0:2f:ee:60:ce:c1:98:a6:
         45:68:a3:91:f5:15:0b:9d:5d:95:83:1e:f7:9e:5a:ea:e3:da:
         3d:16:94:45:85:bd:94:ef:95:47:de:77:a1:43:2a:ca:96:40:
         92:da:94:21:f1:ae:4b:1d:b0:2e:ff:de:a3:e0:b6:af:9b:6a:
         62:a9:dc:22:49:0c:e6:3f:5b:e5:7a:23:a0:26:80:65:6c:91:
         0d:62:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:52:12 2026 by rpki-client