Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          NsQ2TgieSpnyttpMGVmfiYhkl7M29OKtWeTyJb/uCC8=
Subject key identifier:   65:C6:87:06:C8:45:69:E9:26:8A:89:BC:75:EC:A1:4E:75:47:A5:F4
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       019D9A3E3A13B4BC2771859BCCB45795FB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          12BA
Signing time:             Fri 17 Apr 2026 07:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:02 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: 72PVCZbUllPDpzRdZwjzkr6kbaAD50fg2KjxIhtmxGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:3a:13:b4:bc:27:71:85:9b:cc:b4:57:95:fb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Apr 17 07:01:02 2026 GMT
            Not After : Apr 18 07:01:02 2026 GMT
        Subject: CN=65c68706c84569e9268a89bc75eca14e7547a5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:90:27:f8:53:93:c7:be:eb:c7:cf:e3:9d:
                    59:2b:9c:d1:08:cc:e9:07:52:47:03:77:b5:e3:b4:
                    5e:59:dc:31:05:67:2d:89:36:d3:24:cf:61:80:7b:
                    37:33:ab:7e:77:6a:71:21:e3:2d:f0:0a:06:ff:5b:
                    b5:44:a9:6b:8c:f2:e9:01:ef:3f:b7:32:3a:03:0d:
                    b2:3c:6b:96:f3:09:33:cc:6d:81:d8:c8:cc:83:4d:
                    37:db:cb:35:e5:0f:80:5c:93:ec:f8:c4:f3:43:d5:
                    5b:e3:ff:0e:40:7d:6b:cb:05:27:fd:e8:a0:07:70:
                    02:53:1d:2e:f6:5b:bf:1f:fc:91:13:af:15:62:72:
                    a8:6f:ca:b8:dc:fb:82:d7:31:b4:8a:8d:12:4f:de:
                    32:0e:ec:d1:25:8f:82:13:8d:a9:0e:15:39:c5:07:
                    8f:37:bb:6e:f1:55:95:bc:1e:44:83:75:39:26:9a:
                    ee:4f:08:6e:b1:18:9d:ee:23:64:af:17:cd:47:a1:
                    d0:f6:42:d5:50:88:6d:96:3c:25:07:a8:da:ca:5a:
                    31:14:05:59:0c:cf:74:46:c1:8e:e7:b8:88:c7:5a:
                    cf:3b:6b:a7:8d:64:f9:b6:95:2d:25:f6:29:46:bd:
                    ce:ee:fb:f2:32:91:eb:73:69:58:58:21:75:94:fc:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:87:06:C8:45:69:E9:26:8A:89:BC:75:EC:A1:4E:75:47:A5:F4
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e5:cc:41:27:06:c1:dd:71:7e:68:19:d2:3a:54:ea:7a:f8:
         c4:f1:6a:2f:a7:ba:8a:d1:9b:fe:cf:44:6a:c7:3f:52:4d:23:
         fe:2f:f6:78:d8:9f:b7:37:fc:62:c1:76:59:75:a5:f2:46:cc:
         82:c9:2d:cc:6e:d0:74:bf:2c:d2:44:2f:80:04:a6:d7:c6:bb:
         d9:21:a3:53:83:77:ba:af:22:90:f1:f5:fe:3a:21:06:e7:fd:
         a5:e4:61:8c:a8:1e:ba:38:88:03:ad:ce:4d:d1:fd:d7:98:d5:
         dd:d0:ac:30:e3:be:23:95:16:e0:ea:58:20:05:21:10:ac:8f:
         fc:ec:c8:f2:4e:53:03:37:7e:fa:0a:03:45:c4:b0:8e:ee:d9:
         73:81:fe:db:26:c0:64:35:db:cb:e9:17:4c:7c:7b:23:91:e6:
         3a:a0:f3:31:c9:7f:92:aa:0e:f5:25:8e:d9:10:6b:23:e3:39:
         6b:33:00:02:6a:29:32:fc:79:90:bf:80:d6:6a:a5:d6:36:44:
         a0:2c:79:52:db:29:73:f8:58:fd:0b:48:3e:0c:7d:51:45:bf:
         c1:b6:15:db:18:a4:7a:aa:8a:b0:e6:86:f6:e7:b9:d0:18:bb:
         88:4e:7a:c2:eb:1d:23:7f:ae:65:c8:2b:19:59:25:5e:ce:b8:
         2e:ca:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:02 2026 by rpki-client