Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          p76w49jm6oH25LzTMBLKkoMOqPU34rB1gVi0IwTYCik=
Subject key identifier:   7E:49:6F:06:A4:E5:8F:E7:EB:43:E7:44:A2:F6:1D:05:88:1E:5C:72
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       019D265F208DFCB113383CADF581EFDCBDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          127E
Signing time:             Wed 25 Mar 2026 19:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:01 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: vbbycLv2bOzIQ6t5jqYO8idkDrB6eCOBzSga/mtaLLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:20:8d:fc:b1:13:38:3c:ad:f5:81:ef:dc:bd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Mar 25 19:01:01 2026 GMT
            Not After : Mar 26 19:01:01 2026 GMT
        Subject: CN=7e496f06a4e58fe7eb43e744a2f61d05881e5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:33:71:78:7f:3c:72:60:ce:25:66:63:3d:
                    23:fd:d6:d8:9c:5b:ad:bf:6a:25:59:20:dc:e0:46:
                    1a:1d:0e:90:dd:44:e2:6a:61:51:7b:af:95:af:c6:
                    15:c8:48:d0:06:b9:56:7f:02:bc:fb:92:0c:92:18:
                    ef:17:6b:ab:ac:54:23:39:fd:87:59:4f:c7:d7:f0:
                    53:9b:fc:e7:59:06:49:2d:dc:16:aa:fe:75:d7:52:
                    45:da:80:8c:0d:31:b5:b4:01:e1:0f:d6:77:56:8a:
                    a5:38:3b:e1:22:d6:9f:2b:91:40:55:b4:2a:64:af:
                    81:d6:32:39:c3:01:81:2c:32:79:6c:5f:8f:f3:0c:
                    87:50:28:e7:ec:e8:85:02:cc:c3:9a:8b:0f:b9:50:
                    a7:a0:c1:0f:6a:d3:5b:f0:13:14:8c:19:88:e1:99:
                    4a:ef:24:21:4a:aa:50:84:9a:e0:36:6c:46:8c:a3:
                    84:0e:e8:37:84:5c:af:65:2f:20:af:83:ed:f9:8c:
                    e2:91:c8:86:d9:3b:92:0e:64:98:c7:d9:eb:83:b1:
                    f2:0d:fd:26:85:ea:6b:ff:cf:6c:0b:89:2b:ec:66:
                    1e:f9:34:fd:7a:af:2c:e4:37:d2:31:8a:59:81:5d:
                    2e:0d:a9:4c:09:00:f2:50:25:72:99:ba:4f:b0:4d:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:6F:06:A4:E5:8F:E7:EB:43:E7:44:A2:F6:1D:05:88:1E:5C:72
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:34:bb:d6:6d:bc:03:10:d0:b1:c9:a0:c0:71:b7:6f:9f:
         64:fa:ea:8a:cd:17:8e:ec:62:ac:0e:94:9a:ba:4b:a0:0f:5e:
         ef:3a:23:00:19:f1:f0:5d:98:d1:ec:b8:87:b1:e6:d3:59:e9:
         f1:7a:15:11:89:64:4b:8c:9c:3e:58:11:f9:c1:5f:d8:64:25:
         86:5b:a0:20:e5:15:67:24:a1:f0:c8:3b:b7:48:da:51:6c:e2:
         57:67:63:75:68:d8:35:e1:48:c4:f0:96:01:c5:ad:0b:ce:9b:
         74:8a:22:45:e1:69:f2:60:e1:6c:0a:33:ec:51:c1:08:25:62:
         e8:57:0f:c8:01:ef:8d:71:f1:99:3b:25:6f:63:cd:b4:95:5c:
         60:8b:5d:13:32:25:39:47:cd:21:89:72:12:99:d5:e2:d0:45:
         17:9b:fc:37:ab:0c:71:43:68:9c:f4:78:04:fe:ce:a5:7a:da:
         57:eb:57:18:7f:f2:36:58:e0:b7:2e:56:6f:a3:95:b8:52:51:
         be:a2:78:eb:e9:16:ed:53:2a:d6:87:b6:cc:f8:cf:5c:2d:fa:
         6a:cc:30:ef:16:b0:75:87:88:db:de:ac:9d:ce:d6:61:03:2c:
         89:46:e4:e1:c0:48:07:e4:9c:f8:6d:77:0f:91:3b:09:c4:5b:
         66:19:c0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXyCN/LETODyt9YHv3L33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMGNjYWUzYjExOTgyZDY3MWUzYWUyOTZiMjI5YjBhZmMz
NTliMDcwHhcNMjYwMzI1MTkwMTAxWhcNMjYwMzI2MTkwMTAxWjAzMTEwLwYDVQQD
Eyg3ZTQ5NmYwNmE0ZTU4ZmU3ZWI0M2U3NDRhMmY2MWQwNTg4MWU1YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo0zcXh/PHJgziVmYz0j/dbYnFut
v2olWSDc4EYaHQ6Q3UTiamFRe6+Vr8YVyEjQBrlWfwK8+5IMkhjvF2urrFQjOf2H
WU/H1/BTm/znWQZJLdwWqv5111JF2oCMDTG1tAHhD9Z3VoqlODvhItafK5FAVbQq
ZK+B1jI5wwGBLDJ5bF+P8wyHUCjn7OiFAszDmosPuVCnoMEPatNb8BMUjBmI4ZlK
7yQhSqpQhJrgNmxGjKOEDug3hFyvZS8gr4Pt+YzikciG2TuSDmSYx9nrg7HyDf0m
hepr/89sC4kr7GYe+TT9eq8s5DfSMYpZgV0uDalMCQDyUCVymbpPsE2I9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5Jbwak5Y/n60PnRKL2HQWIHlxyMB8GA1UdIwQY
MBaAFEsMyuOxGYLWceOuKWsimwr8NZsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNjY2ZGUtNzdiNS00NDgwLTkyNDIt
YjI1NGI5OTRkY2RjLzEvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNjY2ZGUtNzdiNS00NDgwLTkyNDItYjI1NGI5OTRkY2Rj
LzEvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSs0u9Zt
vAMQ0LHJoMBxt2+fZPrqis0XjuxirA6UmrpLoA9e7zojABnx8F2Y0ey4h7Hm01np
8XoVEYlkS4ycPlgR+cFf2GQlhlugIOUVZySh8Mg7t0jaUWziV2djdWjYNeFIxPCW
AcWtC86bdIoiReFp8mDhbAoz7FHBCCVi6FcPyAHvjXHxmTslb2PNtJVcYItdEzIl
OUfNIYlyEpnV4tBFF5v8N6sMcUNonPR4BP7OpXraV+tXGH/yNljgty5Wb6OVuFJR
vqJ46+kW7VMq1oe2zPjPXC36asww7xawdYeI296snc7WYQMsiUbk4cBIB+Sc+G13
D5E7CcRbZhnA1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:17 2026 by rpki-client