Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
File:                     sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft (raw, json)
Hash identifier:          IZpDMKDrjKT0pO3PFLTOaykIhR9VfpqIW978vYYdpgk=
Subject key identifier:   B5:8A:C1:DA:AD:FA:A1:12:B9:C9:3E:41:3A:CB:10:30:C4:48:33:D9
Authority key identifier: B1:6C:22:DD:01:2E:26:93:06:98:64:FA:95:76:32:5C:37:3F:16:4A
Certificate issuer:       /CN=b16c22dd012e2693069864fa9576325c373f164a
Certificate serial:       019D29291336C1E5F812A348A7F49ECEB254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
Manifest number:          0212
Signing time:             Thu 26 Mar 2026 08:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:50 +0000
Files and hashes:         1: sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl (hash: 1fX+V8htdgoY994zKjrcLOXokOiIEBTIdQVlG0m5hYQ=)
                          2: xKy2YzDgnzteH29hXlw5ygQsbto.roa (hash: QUhXlxlNtimAJYg+iw8/GAwdsz7qa9LXTGj2DtwPMLU=)
                          3: yOizv0ngZ5_drKa6G3e2eMv4JcQ.roa (hash: 78twEcQRWeeSTsAaIGS7NX3qo3s2zavBjfgKjDBo6bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:13:36:c1:e5:f8:12:a3:48:a7:f4:9e:ce:b2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16c22dd012e2693069864fa9576325c373f164a
        Validity
            Not Before: Mar 26 08:00:50 2026 GMT
            Not After : Mar 27 08:00:50 2026 GMT
        Subject: CN=b58ac1daadfaa112b9c93e413acb1030c44833d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:57:d6:92:34:a8:e4:1f:3b:bc:a6:13:1d:
                    98:62:01:87:17:94:a0:c6:89:d4:1b:a4:9b:b7:a6:
                    9a:63:a6:af:9a:9f:33:4c:b0:26:18:34:cf:58:f9:
                    70:e7:60:3c:11:48:93:52:be:5a:2f:15:59:5e:08:
                    68:2e:15:0c:35:87:1f:33:69:45:f4:08:ee:91:fe:
                    7b:0e:a6:4e:3a:a5:1d:04:5f:4c:04:74:21:fd:a8:
                    fe:e8:e5:d9:9d:36:a5:8a:a0:b1:33:7b:26:b9:9d:
                    81:f4:ce:c4:af:47:95:34:46:22:aa:43:38:c4:5b:
                    d0:c3:2b:70:78:34:d1:f5:58:24:44:df:66:62:f4:
                    ea:05:0a:55:37:bc:76:a4:6e:83:6d:3a:7a:c9:54:
                    f0:a9:30:77:9f:21:76:a4:f0:22:79:06:99:b8:f8:
                    93:b5:b0:7c:c8:02:13:d2:88:78:fe:de:d4:cd:70:
                    b5:23:d2:0f:f3:27:b2:4b:ca:0a:b9:49:44:71:81:
                    9c:e2:b3:fb:be:1d:11:ee:6d:1b:07:c8:ee:fa:90:
                    a7:7a:25:09:af:8e:6c:e8:c5:1c:c9:a8:69:f6:bd:
                    24:39:6d:3d:d0:2d:85:c4:1f:f6:c3:c6:06:a9:ce:
                    71:76:d6:cc:21:e3:f1:12:1a:66:13:ff:32:67:31:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8A:C1:DA:AD:FA:A1:12:B9:C9:3E:41:3A:CB:10:30:C4:48:33:D9
            X509v3 Authority Key Identifier:
                keyid:B1:6C:22:DD:01:2E:26:93:06:98:64:FA:95:76:32:5C:37:3F:16:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:99:7c:2b:36:5b:98:cc:c2:51:c4:3a:72:d9:af:60:1f:
         e1:25:23:ef:03:5f:cf:61:4f:a4:00:be:04:05:a1:c0:22:18:
         64:e8:3c:37:09:aa:17:b3:b6:0c:fd:5e:7a:be:2d:85:0c:99:
         66:ed:a5:06:99:0b:f1:25:9a:dd:d0:6b:34:97:2f:56:50:5a:
         b3:df:6b:0d:5c:d3:fd:9d:1d:82:81:fc:10:2f:4b:d0:6b:b0:
         7a:fd:bb:5d:85:8e:3e:7c:44:f3:ce:0b:33:d3:03:ce:94:2b:
         cd:30:6d:06:c5:f5:47:f0:72:af:0f:c1:86:29:a9:df:7a:cd:
         92:21:1c:9b:19:5f:df:34:9a:9a:46:40:dd:0d:ff:4d:77:80:
         d7:f6:a1:ce:f9:20:95:61:10:50:f4:69:79:b4:27:eb:76:97:
         e6:10:e0:a9:b9:91:16:74:0d:88:e4:1d:f6:4f:39:a0:34:15:
         44:24:ad:c7:f2:b3:e8:b5:48:3a:09:40:24:fe:bf:76:5b:20:
         b8:75:dd:f1:63:30:c0:91:c2:2c:7d:94:22:7c:a6:71:6a:95:
         bf:65:31:e8:8e:aa:2c:61:00:54:0e:4e:f1:2d:77:1c:ca:7e:
         d3:3d:1a:bf:38:55:5d:64:a9:24:01:e2:fe:69:74:b5:7e:39:
         e2:e0:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:41 2026 by rpki-client