Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File:                     swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier:          RdINDHWgAMKMXilJWvIwgtxLbOHgLOpwOAm+VfMapbo=
Subject key identifier:   58:06:D8:56:64:00:46:2D:21:55:F5:EA:97:F6:92:B1:31:C3:66:D9
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer:       /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial:       019E20FF136C22FF04E2C4F74D6D24233D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number:          0578
Signing time:             Wed 13 May 2026 11:00:47 +0000
Manifest this update:     Wed 13 May 2026 11:00:47 +0000
Manifest next update:     Thu 14 May 2026 11:00:47 +0000
Files and hashes:         1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
                          2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: uFjOzL2IG0dGj2aWOrGVVqAe3FATrzHMAlhy/OZI3YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:13:6c:22:ff:04:e2:c4:f7:4d:6d:24:23:3d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
        Validity
            Not Before: May 13 11:00:47 2026 GMT
            Not After : May 14 11:00:47 2026 GMT
        Subject: CN=5806d8566400462d2155f5ea97f692b131c366d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:6c:ff:61:67:70:ae:0c:ab:86:1f:32:69:
                    f3:e1:e0:56:7d:21:91:dc:7e:fe:c7:cd:ce:85:19:
                    ad:ae:a8:e1:e5:59:d1:66:7e:4c:16:53:92:db:b3:
                    01:0f:0f:40:90:77:1f:62:dd:98:c8:e9:0a:f9:95:
                    1a:4c:06:36:64:f6:15:e9:a1:02:e3:85:f7:e7:3a:
                    c2:99:8f:0c:98:f7:99:57:92:51:73:33:05:4b:3f:
                    88:dc:8d:76:ab:40:1a:79:d8:3c:68:da:b0:e8:eb:
                    9c:73:4a:0c:6e:0b:25:5c:ac:6e:58:77:f9:cb:64:
                    c0:0f:b7:0b:a9:f3:ed:c2:c4:2f:d0:52:41:fa:50:
                    0d:dd:1e:3e:4a:c3:bc:76:ac:ae:a2:42:96:e1:08:
                    19:59:6a:bf:38:01:bf:75:56:39:e6:64:7d:5c:31:
                    3c:59:eb:b8:78:1d:bf:cb:a7:be:58:35:86:08:23:
                    41:db:b1:66:52:f3:65:98:b5:18:37:e8:79:10:ad:
                    25:f5:90:e2:8f:70:37:5f:35:7c:ba:61:6d:2a:b1:
                    91:65:ca:78:c8:b7:53:ee:1b:5e:e4:92:81:93:10:
                    fa:fa:2e:28:c6:04:61:df:f8:87:59:0d:95:7c:f6:
                    01:c8:a2:7a:18:82:25:18:7f:da:8b:5c:dc:b8:11:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:D8:56:64:00:46:2D:21:55:F5:EA:97:F6:92:B1:31:C3:66:D9
            X509v3 Authority Key Identifier:
                keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:f9:aa:60:62:f4:84:bb:e9:b8:c2:9f:09:f4:0b:37:5e:
         e9:49:3c:53:48:76:2f:bd:ff:77:f5:29:32:33:05:f1:49:07:
         51:22:52:dd:20:a4:8e:5b:81:e8:49:23:fd:e2:b6:86:40:68:
         f5:87:99:8b:59:09:f8:e7:ad:7d:c5:7e:d7:4c:ca:30:40:7b:
         39:c0:34:6c:e0:34:dd:8e:27:13:1e:c6:4b:af:4d:4c:92:ba:
         65:fc:19:ff:ed:43:69:09:2f:55:cb:db:a3:43:8b:fc:5c:00:
         21:eb:79:cf:79:14:eb:3a:bf:dc:83:34:15:66:81:21:a0:36:
         2a:8c:9f:8c:3b:61:7d:47:6c:37:6b:f7:e9:4f:d8:17:f5:51:
         ff:7e:a2:6d:1a:73:0d:8f:0f:7f:1e:02:e4:4c:40:cd:bc:ba:
         37:36:b2:d6:ad:8c:98:56:54:4c:40:2d:b0:c0:54:5b:e0:02:
         4b:d6:99:56:e1:e1:fd:8d:87:e8:82:96:47:c0:63:65:33:f1:
         05:7c:c6:e5:25:30:44:e2:8e:95:82:13:cb:ae:19:84:5e:37:
         eb:aa:da:70:03:89:cd:72:c0:0a:90:09:5c:bd:f7:36:97:f3:
         90:0e:6b:92:fe:76:b0:40:f6:3c:0c:bd:0c:c9:6d:52:c8:02:
         cd:fe:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:34 2026 by rpki-client