Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          w5JYkuoRoDErpD3FmBImSonn6wV97mJhoMCLc/TYIKA=
Subject key identifier:   82:C6:B3:8D:C0:EE:A8:90:42:F2:78:71:E9:F4:D2:30:86:91:65:87
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019F9248892615FE03BF8CA3B208B9EAC9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          16C9
Signing time:             Fri 24 Jul 2026 04:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:54 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: DmISyAPsUJZUF8-fiFzrEXhy69M.roa (hash: TEVgv9r0sVnxKS36YRt3J8jYs1KrjVhAbf7djSDQraI=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: iDkJsG1mJGPRpLqM1+5AeJbZqs8mhjBDI0E+G6Kgk/E=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:89:26:15:fe:03:bf:8c:a3:b2:08:b9:ea:c9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Jul 24 04:00:54 2026 GMT
            Not After : Jul 25 04:00:54 2026 GMT
        Subject: CN=82c6b38dc0eea89042f27871e9f4d23086916587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:4b:e4:c4:21:68:7d:eb:1f:9b:d8:7d:07:
                    29:b5:73:ba:45:87:14:57:8a:49:7e:76:a2:30:80:
                    ba:e6:81:ec:cc:7b:52:d9:41:88:c0:0e:95:aa:2f:
                    06:4b:29:0a:5e:14:6a:0f:29:af:f9:d4:f7:13:37:
                    ce:7b:bd:57:e0:10:f0:18:99:5f:9c:3d:8a:9b:59:
                    51:34:e9:2b:b8:d4:bf:f3:9b:e2:7b:97:8c:b2:fa:
                    8f:81:7f:b6:6d:6e:ef:7b:be:89:76:df:4b:2c:97:
                    0a:6c:15:41:94:ce:fc:e5:6f:84:ac:67:b2:46:36:
                    1e:5d:2c:81:49:6f:59:b3:78:21:65:dd:37:dd:55:
                    e3:b5:f5:14:89:12:e5:e9:21:b9:e7:c8:d4:f1:72:
                    10:6c:4e:61:94:3a:89:f0:79:a4:76:1a:75:ae:44:
                    32:29:6c:df:34:a7:7b:c5:d2:74:7e:6c:94:d3:86:
                    b0:8a:b7:96:f2:b6:12:84:83:40:c4:51:2b:4e:35:
                    e6:c9:0f:0f:00:cf:a7:38:d9:90:c5:9c:92:3a:73:
                    47:9b:de:0d:06:1c:07:53:f7:bd:34:1e:76:54:75:
                    7c:db:f3:d7:71:52:e0:55:d3:6b:fc:9f:66:ab:29:
                    b7:fc:b7:51:7e:ea:81:ff:66:23:9e:da:06:88:27:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:B3:8D:C0:EE:A8:90:42:F2:78:71:E9:F4:D2:30:86:91:65:87
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:5c:60:88:90:a7:dd:f7:c3:30:11:9f:bd:e9:25:16:2b:
         b8:29:35:5b:16:11:dd:bc:29:f5:e0:5c:7f:31:d9:3d:96:db:
         ad:e9:3e:00:99:a9:00:cc:5b:0f:b0:b4:df:bc:a3:f5:f1:55:
         9c:6d:39:4c:b7:fa:9f:1b:73:7e:b4:48:5f:d8:9d:85:d1:ac:
         63:db:1d:ce:70:c3:21:ec:78:9a:92:36:c1:dc:69:32:3e:31:
         02:78:39:d2:c4:cb:1c:0f:51:a1:7c:a2:d2:8d:41:4f:30:e6:
         00:08:2b:4e:fb:44:5b:c7:d5:02:43:c4:43:75:41:56:16:3d:
         cb:8b:57:df:a2:fc:de:53:91:f7:d5:fb:ea:96:0a:3e:9c:2d:
         bc:2e:37:0b:88:29:47:03:75:77:ff:b1:55:cb:70:17:25:8c:
         e0:3b:ee:18:9c:f8:b4:3d:0f:5b:70:e5:2f:13:07:c0:86:5a:
         18:fb:01:01:2f:4a:97:3c:c0:0a:07:8c:44:16:e2:ca:5b:cd:
         84:94:07:68:10:26:17:e7:47:a4:51:e8:95:79:f3:30:e9:f1:
         8b:75:8f:31:cc:3f:1f:a1:9a:9b:c2:14:9e:c6:b5:e4:bc:50:
         8f:21:72:ed:c6:48:e4:ff:40:fd:a9:2c:63:7e:bc:1a:79:e9:
         1b:59:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:18 2026 by rpki-client