Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          BPp3PTpSQWexTBkCYz4pO1b2ZuI+CAeIpu7hE6Kn3fY=
Subject key identifier:   F8:CF:29:B1:21:D7:73:FE:AE:81:0D:A1:44:BC:48:36:B5:34:F5:01
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       019D265FEF03E3CB730969AC9FF993DD76E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 19:01:54 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:54 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:54 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: /KM1d6LFu+iwYsN7IxEo+GUx4/5F+98R7i85gAz9pPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ef:03:e3:cb:73:09:69:ac:9f:f9:93:dd:76:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Mar 25 19:01:54 2026 GMT
            Not After : Mar 26 19:01:54 2026 GMT
        Subject: CN=f8cf29b121d773feae810da144bc4836b534f501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:d8:8a:ea:c7:85:4d:b2:52:53:e3:c2:8d:
                    df:db:71:a6:38:08:ad:79:8d:7f:b4:82:bc:e1:2a:
                    18:dc:13:29:dd:aa:b1:cd:7d:fe:16:09:97:7d:c4:
                    8b:f3:55:27:14:93:ba:f8:3c:d3:92:6a:75:f2:f6:
                    a4:f7:5d:19:b3:2a:1f:15:ea:8b:c1:7e:19:e0:16:
                    de:cc:1c:3d:29:be:7b:7a:17:99:38:24:70:47:f0:
                    3a:70:33:ce:34:e0:92:11:ec:58:61:74:4e:82:c2:
                    96:ab:6e:b0:c0:f6:7e:b8:a2:4b:dd:82:1e:e4:97:
                    ed:91:84:d3:d6:18:a0:ca:8a:ac:35:c5:c1:b2:51:
                    3d:fd:08:a2:0e:5b:b0:b0:3d:7d:f5:9b:48:e1:cc:
                    bf:2c:f9:3f:9a:ff:55:54:88:77:1b:c7:7d:71:10:
                    b7:8c:30:76:2f:56:14:63:4e:9a:f3:38:1e:41:3f:
                    fc:2b:a2:1c:0b:f2:b9:9f:0e:ec:d0:a3:6c:55:d7:
                    57:29:a9:44:a6:1b:67:f3:74:1c:21:93:c9:89:95:
                    9e:8b:6d:a9:f0:b9:37:e0:9b:4f:71:87:bf:bc:a3:
                    36:6d:5c:ae:d7:13:a9:72:d1:bf:fa:21:21:6e:27:
                    c5:de:f9:a3:17:b1:68:1b:4e:1c:36:e3:b1:51:c2:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:29:B1:21:D7:73:FE:AE:81:0D:A1:44:BC:48:36:B5:34:F5:01
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:56:e2:39:3c:c4:18:1c:f0:5c:d1:53:8f:b1:7d:0d:80:
         b8:c6:aa:93:7d:db:94:11:99:8a:15:82:5b:78:6d:7a:e4:60:
         99:ee:63:24:d4:0a:3f:f1:f2:a6:7a:5e:d1:48:b7:2d:fa:c1:
         48:cc:30:b3:d5:01:dc:27:50:68:32:85:13:62:61:0d:cd:24:
         2a:f4:2f:42:15:77:04:45:db:3f:83:50:2b:8a:fe:26:d7:f5:
         6e:a8:e4:1e:d1:f2:4e:aa:fb:55:f5:11:a4:a3:fe:c4:cb:b9:
         eb:be:0b:a2:d3:ee:c1:6d:58:34:7e:6c:84:30:68:4e:30:31:
         bb:fe:41:bc:f4:ee:8f:f4:06:e1:63:8b:f8:f6:d6:cd:98:0d:
         21:4f:95:71:b9:00:c0:ad:d5:67:d7:18:fa:6f:96:56:2e:f8:
         29:a4:bc:b4:a5:4f:5b:c9:ab:3c:35:40:5e:59:0a:d9:89:5b:
         69:ec:ba:dd:63:7e:42:1a:00:c2:7f:b5:6d:1d:69:c3:45:fc:
         6d:07:29:5f:52:71:2d:7f:2f:f8:68:fe:f7:19:9d:c3:a5:18:
         28:94:d4:f1:a6:94:2e:85:72:da:c4:d0:bc:44:9d:24:a7:a0:
         ea:e8:32:9f:b1:e8:be:3d:66:a9:fc:d0:91:d5:40:8e:78:fc:
         48:35:49:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+8D48tzCWmsn/mT3XbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGEyYjQ4NGUyNmYzMGQzNWZkODJhMzQ0MjdmZjIyMDFj
YjUwMDMwHhcNMjYwMzI1MTkwMTU0WhcNMjYwMzI2MTkwMTU0WjAzMTEwLwYDVQQD
EyhmOGNmMjliMTIxZDc3M2ZlYWU4MTBkYTE0NGJjNDgzNmI1MzRmNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I/YiurHhU2yUlPjwo3f23GmOAit
eY1/tIK84SoY3BMp3aqxzX3+FgmXfcSL81UnFJO6+DzTkmp18vak910ZsyofFeqL
wX4Z4BbezBw9Kb57eheZOCRwR/A6cDPONOCSEexYYXROgsKWq26wwPZ+uKJL3YIe
5JftkYTT1higyoqsNcXBslE9/QiiDluwsD199ZtI4cy/LPk/mv9VVIh3G8d9cRC3
jDB2L1YUY06a8zgeQT/8K6IcC/K5nw7s0KNsVddXKalEphtn83QcIZPJiZWei22p
8Lk34JtPcYe/vKM2bVyu1xOpctG/+iEhbifF3vmjF7FoG04cNuOxUcL+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjPKbEh13P+roENoUS8SDa1NPUBMB8GA1UdIwQY
MBaAFLMKK0hOJvMNNf2Co0Qn/yIBy1ADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQt
M2EwNDY3ZDVmMTA1LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQtM2EwNDY3ZDVmMTA1
LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+dW4jk8
xBgc8FzRU4+xfQ2AuMaqk33blBGZihWCW3hteuRgme5jJNQKP/Hypnpe0Ui3LfrB
SMwws9UB3CdQaDKFE2JhDc0kKvQvQhV3BEXbP4NQK4r+Jtf1bqjkHtHyTqr7VfUR
pKP+xMu5674LotPuwW1YNH5shDBoTjAxu/5BvPTuj/QG4WOL+PbWzZgNIU+VcbkA
wK3VZ9cY+m+WVi74KaS8tKVPW8mrPDVAXlkK2Ylbaey63WN+QhoAwn+1bR1pw0X8
bQcpX1JxLX8v+Gj+9xmdw6UYKJTU8aaULoVy2sTQvESdJKeg6ugyn7Hovj1mqfzQ
kdVAjnj8SDVJFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:25 2026 by rpki-client