Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File:                     sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier:          gPbJvi1luOtR9Q23f6eg0vy9BL6fIvwKuv0lRCGJO4o=
Subject key identifier:   23:33:DC:67:67:5E:08:8B:5C:2A:5B:78:85:03:73:70:1A:4E:67:C3
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       019E1BD8E20357425C6978F3A9C6365B64F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number:          0BE5
Signing time:             Tue 12 May 2026 11:00:58 +0000
Manifest this update:     Tue 12 May 2026 11:00:58 +0000
Manifest next update:     Wed 13 May 2026 11:00:58 +0000
Files and hashes:         1: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
                          2: QZuKEWsyRFgAxJqF3buWryNpoGM.roa (hash: AzkBw1CA5Ms49OJ1VyLygdFHesfl7PK9bT52uublMz8=)
                          3: b00eRSDcxFDHs0mQJe5x9UBUR_o.asa (hash: +u0Wv9P2GIEvOKYbCsSWBArRrrqg7QPkXLV0YkQ+w6k=)
                          4: fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa (hash: WrsTXTFioXmfTDbLS+QXmRgF1uIdzCthLYkRozp941Y=)
                          5: kJdLwlq4tT0_ThSn8KK8MvnKNhQ.roa (hash: M0SRuXqVqr9XY+hckmT6i16Fz6tspFxGWFcOgNB9PXg=)
                          6: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: yZpP6SImj5YIIdeAC3SeIAGXDNx1MnBJxByuxeJ+7S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:e2:03:57:42:5c:69:78:f3:a9:c6:36:5b:64:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: May 12 11:00:58 2026 GMT
            Not After : May 13 11:00:58 2026 GMT
        Subject: CN=2333dc67675e088b5c2a5b78850373701a4e67c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:45:80:fa:90:12:59:c6:2a:fc:5e:8d:d7:
                    7a:bf:f0:68:d3:b3:48:cf:0c:fc:b1:e0:3a:c3:65:
                    f0:66:f1:59:48:ae:78:a2:e8:b5:49:a4:2a:22:b0:
                    fd:1b:13:1d:fb:61:5d:36:44:f0:c4:e1:0c:1f:7d:
                    d4:1a:43:71:ac:d3:10:37:fc:92:fc:98:77:69:62:
                    a5:06:68:a1:ff:8e:67:cf:0f:44:14:14:02:51:62:
                    c1:51:20:0d:50:5c:ad:70:6d:4e:bd:a3:87:de:53:
                    98:9e:8a:87:fe:26:f9:d0:50:fc:97:ef:6b:5b:96:
                    d6:ce:65:e6:1a:c0:62:b7:60:d5:2b:60:17:0e:d5:
                    bf:ee:84:84:32:42:ef:8f:ad:50:27:18:be:55:98:
                    46:c4:86:81:d9:8a:cf:bb:46:02:08:c6:c8:9e:81:
                    26:52:af:d7:95:df:91:74:80:43:ca:5b:99:d4:65:
                    30:4c:a0:81:a7:4c:64:6a:f4:c6:0e:88:f8:83:b5:
                    dd:6b:1f:ea:06:17:b7:e0:cb:b0:4d:c5:24:b2:cc:
                    30:f5:b5:e2:36:6f:e2:34:4b:29:ad:e6:58:45:44:
                    ab:b5:04:88:a4:ca:9b:84:01:db:c5:e7:c9:f4:89:
                    33:35:c3:b3:0b:d1:72:5d:93:5a:bc:14:fd:93:40:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:DC:67:67:5E:08:8B:5C:2A:5B:78:85:03:73:70:1A:4E:67:C3
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:fa:02:8b:4c:08:df:f8:d9:db:c4:de:51:db:79:94:f2:
         e2:69:2c:43:31:b9:03:ee:65:a7:71:cd:65:81:c1:82:d2:54:
         2c:34:1a:16:f9:38:f8:a0:4f:6e:f2:c1:95:fb:3e:f3:f0:4c:
         fa:65:c7:41:ec:4a:82:7e:77:38:9f:75:6e:ac:8e:4f:e0:55:
         ff:ff:6e:6d:d8:74:bd:c2:c0:f7:08:16:d8:28:10:9d:6d:86:
         0c:c7:69:75:9f:f2:79:06:b1:23:d2:55:8c:2e:f0:25:51:bc:
         78:75:31:77:49:c3:98:b3:38:e7:ee:1e:76:5f:4e:67:87:f3:
         f0:02:46:b1:57:54:a8:4f:73:93:0e:a0:ff:e0:fc:13:26:3f:
         ef:0e:7b:1a:12:34:10:fa:ec:50:e1:fa:3e:b9:e5:a6:89:55:
         69:58:93:b1:04:6f:36:a6:16:2b:cc:fb:97:47:96:c2:bb:fa:
         f9:e3:a5:2a:20:d0:e9:5a:d9:6c:83:31:f4:08:81:db:ea:d8:
         1b:22:7d:62:29:53:ff:bd:a6:b6:a8:02:83:68:90:f3:8b:e4:
         3a:8e:32:38:e3:b7:dd:b0:a6:d5:e0:76:08:8f:2d:be:76:66:
         6e:4f:fd:73:80:13:53:44:43:ab:43:8c:74:51:e2:9f:8c:a0:
         1b:51:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:58 2026 by rpki-client