Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
File:                     swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json)
Hash identifier:          V3iS9Z8IxL6Nm19Rao5WvH9O8Owt+++KHrAY1CmGiNM=
Subject key identifier:   D7:E0:14:FA:1E:83:6E:CD:E3:E9:12:21:9A:EB:1B:C2:41:41:3E:EB
Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
Certificate issuer:       /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Certificate serial:       019F8F7F61333972A69203D4C1A9CE8A4200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
Manifest number:          033C
Signing time:             Thu 23 Jul 2026 15:01:57 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:57 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:57 +0000
Files and hashes:         1: suSBosB6ZPd_W4emu3zBfqLbEBM.asa (hash: pYF0yuaUu1l598QY83668ga60lPz6WKtPBeqYzSRY3k=)
                          2: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: cy6yIXyvwenA3+q3eeXb//8fgR9PQp+FtLV1GMG7Ml8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:61:33:39:72:a6:92:03:d4:c1:a9:ce:8a:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
        Validity
            Not Before: Jul 23 15:01:57 2026 GMT
            Not After : Jul 24 15:01:57 2026 GMT
        Subject: CN=d7e014fa1e836ecde3e912219aeb1bc241413eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:a7:bc:67:48:77:dd:ea:e0:1f:32:54:e8:
                    2d:f3:78:1b:e6:4d:0f:45:9a:15:bc:5c:79:c8:56:
                    33:ba:13:79:8e:28:4e:c7:ed:00:5c:7a:00:ab:88:
                    10:41:86:dd:64:57:fa:72:9e:1f:e6:69:2e:0d:14:
                    2c:7c:d9:94:4a:f1:06:e3:58:87:ed:5e:6c:d9:40:
                    e9:bb:b2:ed:8d:bb:4f:a6:26:33:c5:34:0f:65:b6:
                    8a:22:bf:1c:6d:5c:2c:95:06:da:45:d1:8e:e4:c1:
                    ba:32:f5:d6:e7:97:8c:56:39:33:3d:79:aa:a9:31:
                    6c:b0:c6:ef:25:05:fa:ce:15:45:fe:43:9e:6a:0a:
                    c0:91:db:e1:5d:66:51:ac:c7:aa:16:e7:25:54:3c:
                    94:d9:c9:73:34:a7:66:ac:f6:7c:46:dd:27:4f:1a:
                    d4:1a:d7:c9:80:27:9a:be:d1:c3:71:2f:77:97:7f:
                    2e:a6:ec:d3:ff:41:9d:42:65:7c:70:41:c4:1b:92:
                    03:e4:61:66:9b:06:8f:89:a0:95:70:17:29:9b:8b:
                    aa:a5:14:c2:ef:e2:80:eb:fc:ad:ae:1f:9e:ff:f0:
                    62:af:30:30:21:fe:da:15:ff:bf:40:72:f9:54:f7:
                    9a:8b:e0:f8:5d:8b:a0:7c:3e:18:10:e2:ec:25:d6:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:14:FA:1E:83:6E:CD:E3:E9:12:21:9A:EB:1B:C2:41:41:3E:EB
            X509v3 Authority Key Identifier:
                keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:cc:6a:d1:0b:bd:f3:79:95:e9:0d:b5:4a:7b:2b:09:de:
         0e:16:02:ad:25:2f:98:8b:22:e9:1e:38:09:59:ac:5b:44:14:
         41:31:8c:02:8c:20:6c:a8:65:7c:58:4d:5b:65:7d:3d:80:92:
         2e:5a:b9:da:2e:71:8a:91:a2:96:38:e7:eb:70:32:45:2d:31:
         8b:b8:2b:db:9b:00:50:73:a4:d6:c7:ca:0b:f7:b2:0e:f3:8f:
         ca:ff:0a:fd:a1:74:2a:c3:bd:1a:7c:a6:b2:f0:d0:80:6c:8b:
         b4:67:bf:43:e0:c2:e6:1a:77:c2:63:2f:d7:fc:e6:80:94:c1:
         f6:2a:3d:4f:4f:8c:ba:06:bd:06:e5:47:d6:9e:56:eb:47:72:
         cc:5c:6f:1f:c9:b2:ec:9c:c4:73:90:c1:a5:41:30:ef:5f:c8:
         26:c1:72:8d:b7:cb:ea:2f:2e:a6:ad:14:e6:4b:aa:0e:f4:f1:
         2b:d2:dc:f4:08:a1:81:96:9f:10:0f:e0:56:bb:f7:f3:95:d2:
         bf:f0:84:91:fd:9f:db:8a:ff:b4:60:9a:a5:ce:14:0f:93:79:
         e5:ac:52:df:3e:00:4e:81:b5:c4:b6:7c:31:ab:ca:07:2c:77:
         d8:02:70:fb:13:f2:14:48:93:ca:20:96:51:91:4a:03:28:dd:
         a7:76:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:15 2026 by rpki-client