Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          e+XzsBq9rDIZXci/yS+cZPGWejxZeZIavOMJdjZA3VY=
Subject key identifier:   C1:4B:28:5E:12:FB:A9:06:D2:9E:90:6E:89:0A:29:1F:C8:25:89:AE
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       019D27049D4DCA91F36A7AE3D35B00C591C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0F6B
Signing time:             Wed 25 Mar 2026 22:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:46 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: qyS3qgGbqJs1S9kKq9CrQa9lpwITv9VQML/pqR4Cg1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9d:4d:ca:91:f3:6a:7a:e3:d3:5b:00:c5:91:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Mar 25 22:01:46 2026 GMT
            Not After : Mar 26 22:01:46 2026 GMT
        Subject: CN=c14b285e12fba906d29e906e890a291fc82589ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:cf:84:bd:35:77:96:b5:74:45:33:44:12:
                    7e:bb:d6:e7:ff:b7:e1:bd:ab:10:ce:73:b4:29:2d:
                    e9:f5:df:9a:13:e7:99:2d:a8:69:41:a0:9e:5b:a8:
                    84:f2:af:be:72:a9:d8:26:fd:65:2b:be:c4:d1:f3:
                    e6:f8:2c:3a:f1:a4:ac:00:fc:38:e1:c8:6b:bf:49:
                    66:c7:87:e1:c6:08:f0:19:bb:d6:ba:98:c4:ef:99:
                    88:8f:32:a4:7f:d9:b0:9b:b9:ad:b9:5a:bb:39:57:
                    14:e3:83:4d:c2:89:32:de:04:73:cd:d1:fb:45:88:
                    1b:be:80:e1:9b:b5:56:65:57:17:39:cc:f1:ee:6a:
                    58:78:2a:a1:f0:4f:67:1e:87:99:00:92:8d:45:01:
                    5f:cb:ca:2c:14:b6:95:de:fc:fb:03:f2:c5:30:37:
                    b7:47:a1:6c:76:29:7a:ba:34:67:96:b8:26:5a:3c:
                    25:f3:2e:81:91:9f:b4:af:fd:74:93:ac:ba:2c:bb:
                    2b:b7:1b:e6:aa:5e:76:31:77:40:ef:d0:76:ec:5a:
                    51:fc:0d:3e:4b:94:55:92:d3:92:a9:55:33:0f:17:
                    85:43:d3:a5:67:09:74:27:8c:c8:ac:d6:da:88:34:
                    db:85:f7:38:0b:6c:d9:a2:35:d2:a4:c0:b1:b7:56:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4B:28:5E:12:FB:A9:06:D2:9E:90:6E:89:0A:29:1F:C8:25:89:AE
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:14:75:92:10:f5:f8:8b:a9:12:66:35:34:46:b8:3f:c2:
         18:56:ee:76:03:c0:c9:c0:40:0d:fa:4e:5c:47:75:8d:9f:6a:
         86:3d:40:a7:3b:6b:62:d9:f5:b3:11:15:c1:96:c1:87:19:69:
         e2:9a:0d:cb:0b:62:da:0d:5a:4a:b6:68:fb:c9:41:a5:be:6e:
         b4:14:20:53:45:2a:33:71:6a:64:26:13:fb:d5:1c:f8:b0:5f:
         25:02:dd:d5:ba:e5:a3:30:29:da:5d:4d:74:cc:d3:cb:2f:42:
         72:5f:04:a3:c1:b0:84:38:9c:b4:e6:95:5a:3e:ba:c2:27:c5:
         ff:dc:07:58:98:f4:13:5d:70:d4:78:0b:2f:41:71:57:bc:6e:
         16:63:29:25:62:41:43:8a:6b:14:7f:47:02:68:83:04:a6:6b:
         d3:12:91:52:f9:8d:6d:af:77:14:00:7b:0f:e2:07:e0:dd:51:
         65:f0:a4:1f:02:c4:52:a3:2c:87:0b:ff:62:f1:ed:a8:a9:5a:
         b5:56:71:aa:d3:b4:55:c0:ee:15:e1:c9:3e:90:85:64:01:23:
         08:54:51:93:b6:24:3e:8a:4c:e9:96:de:d1:74:19:1a:a4:45:
         7f:0f:d8:02:63:e0:5a:65:89:0e:50:6e:48:6a:de:90:81:44:
         06:88:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:51 2026 by rpki-client