Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
File:                     SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json)
Hash identifier:          8gdQLhsnLfmfyCgzYqAT79Jq+M9rEtDKbb3sWUNwVhM=
Subject key identifier:   85:3C:A8:13:D0:56:DA:A3:7F:AD:4C:90:61:4F:48:E9:AD:12:C1:E8
Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C
Certificate issuer:       /CN=4b0184a262b3509e1aba61a90becab32b002554c
Certificate serial:       019CAB6BEE4DE6A03E5666F6229613566BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
Manifest number:          17D5
Signing time:             Sun 01 Mar 2026 22:01:43 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:43 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:43 +0000
Files and hashes:         1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: zM5JYbDxllYTrzzD6Vbku5zcrMxPjndgtWGLFFu6y+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:ee:4d:e6:a0:3e:56:66:f6:22:96:13:56:6b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c
        Validity
            Not Before: Mar  1 22:01:43 2026 GMT
            Not After : Mar  2 22:01:43 2026 GMT
        Subject: CN=853ca813d056daa37fad4c90614f48e9ad12c1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:96:89:ab:02:87:02:e9:2f:6d:98:c2:d2:
                    bf:da:c8:2e:59:76:3e:b2:5d:e1:80:61:98:db:f1:
                    4e:50:19:91:fc:a9:1c:95:36:58:44:97:a5:bb:ef:
                    0a:aa:0d:bc:68:ac:88:42:c6:90:fe:0f:3c:c0:4f:
                    ce:6f:a6:e1:73:3b:76:67:0c:36:5d:f9:b0:46:e2:
                    83:3e:af:0c:2d:3a:52:3c:96:24:17:50:e6:42:9e:
                    04:22:d0:24:6a:01:2a:91:ba:ac:a4:8b:5f:08:8b:
                    77:b4:61:7e:04:f8:21:7a:76:d6:98:75:22:25:c7:
                    a6:4d:d5:c7:09:90:8b:8a:8c:72:dc:f7:85:a2:7d:
                    b7:ec:f8:d9:44:7e:de:d4:e3:8c:f3:64:3c:91:4f:
                    c5:8e:e9:00:e8:b5:18:8e:12:3c:28:29:15:b9:e7:
                    b1:11:29:7b:99:dc:f0:e7:a0:e0:99:28:69:cb:30:
                    70:ed:65:3d:34:98:2e:3e:3e:26:74:ad:1c:29:e0:
                    5a:23:a4:f3:58:6f:fc:4c:97:e6:41:22:5d:8f:f8:
                    a7:49:09:40:b8:bb:c3:76:a6:ee:01:6a:4d:48:54:
                    59:e8:1f:7b:da:ec:70:ea:55:73:cc:35:45:c5:d1:
                    ef:dd:38:9a:7f:13:13:dc:ab:8e:a3:94:ae:80:05:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:A8:13:D0:56:DA:A3:7F:AD:4C:90:61:4F:48:E9:AD:12:C1:E8
            X509v3 Authority Key Identifier:
                keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:78:a5:31:66:ef:4f:87:7e:ac:5a:6b:a6:85:29:e2:d3:df:
         31:62:07:f9:03:db:84:f8:f4:61:2c:50:72:1f:a0:d1:35:c8:
         ac:9b:fa:2d:b8:5e:5c:17:5b:76:e5:0a:11:d5:e3:6f:bd:e1:
         11:51:d0:7b:46:3c:b4:39:32:6f:0b:73:90:5f:90:ce:b9:dd:
         b7:7c:df:4c:1a:fd:3f:2e:21:c0:41:e1:20:f6:fe:6d:07:dd:
         99:9f:6a:ae:95:d2:16:04:bd:df:17:2a:ae:7d:48:c4:ed:87:
         3e:c0:5e:88:9c:d7:95:f2:2a:d1:8d:ae:9d:ef:d6:45:7b:d7:
         3e:23:19:2d:0b:a7:a3:59:b6:89:0c:c1:d8:49:86:7b:88:5d:
         bc:7d:58:45:af:46:39:9e:b3:ac:f1:9a:09:f2:8a:e9:95:c8:
         9d:06:13:48:ef:9e:7b:2b:d0:8b:54:5e:3f:2a:4d:bd:69:67:
         fb:05:8c:d6:f6:75:ef:fe:61:f8:fd:81:33:97:e6:83:6a:19:
         95:85:72:22:20:99:fa:13:c0:84:24:ea:30:20:bd:48:29:ee:
         05:9c:b5:96:80:a6:50:1c:3c:0e:50:83:9b:53:d3:83:9d:9c:
         3b:c9:ad:4d:dc:33:c0:f5:97:8b:d0:3b:01:72:83:f8:b6:ee:
         6d:18:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:40 2026 by rpki-client