Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          lTgz9qOSx2k+ocNG7UgxNR71H0li+0ZqWVm6A3wxmcE=
Subject key identifier:   B5:40:83:59:EE:1C:31:7F:82:F6:5A:7C:6D:CD:71:45:76:53:1C:17
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       019D9A3F171312C1E81E93403A88B05EF006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          0872
Signing time:             Fri 17 Apr 2026 07:01:58 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:58 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:58 +0000
Files and hashes:         1: 1-8KgAPre3SF7bRKA3fLmqxwchcI.roa (hash: u0Xe2ZYaUqmKlNfA25Uh4YAKw25zRG/IeNSgOriRYIQ=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: GwY2+CxScnQWdG4Yg9ll7B1x+9BrVEoQb3GPW/uNL5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:17:13:12:c1:e8:1e:93:40:3a:88:b0:5e:f0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Apr 17 07:01:58 2026 GMT
            Not After : Apr 18 07:01:58 2026 GMT
        Subject: CN=b5408359ee1c317f82f65a7c6dcd714576531c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:c2:15:10:12:a4:1f:87:f8:60:ff:df:03:
                    36:43:22:a9:79:2c:3e:16:ee:57:17:4c:58:e1:29:
                    01:af:1b:85:52:c4:56:f7:c6:84:17:f8:54:ef:94:
                    46:08:74:91:09:29:a7:65:0d:65:27:bc:58:20:ed:
                    9c:bc:62:c4:c8:16:d6:38:c4:79:56:85:eb:85:2a:
                    a0:ed:d3:69:02:03:77:64:47:d1:14:33:b6:ff:3e:
                    37:81:79:14:45:6b:5b:e3:90:33:63:5d:41:07:4d:
                    08:f9:ae:3a:bc:50:8d:74:34:d6:23:b3:8a:15:be:
                    9a:ba:01:de:12:32:cf:b3:be:ed:70:f2:94:bb:23:
                    7d:ad:77:aa:0f:d3:4e:77:ba:bb:7b:b9:ea:79:89:
                    d7:53:3d:fa:42:0f:e1:d9:20:ec:0c:e6:6e:9e:1d:
                    7e:e1:48:6e:c0:c5:18:b8:83:5c:99:90:95:76:b6:
                    d7:0e:f3:48:fa:39:d8:b2:fd:f7:e8:37:53:43:e1:
                    df:e1:f3:fa:40:0b:24:9b:36:e4:c8:f6:e8:59:da:
                    22:05:6c:e0:af:0e:00:79:d0:ff:27:a9:9f:a3:bb:
                    e4:56:61:3b:8b:0f:d0:8b:d6:a9:2f:97:ce:57:f3:
                    39:0e:47:3a:68:f5:94:40:50:f5:f9:25:da:b2:ed:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:83:59:EE:1C:31:7F:82:F6:5A:7C:6D:CD:71:45:76:53:1C:17
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:8f:a3:b5:82:02:e6:0b:91:fa:fd:0e:22:77:a4:ff:e5:
         fe:dc:ba:45:3e:55:34:52:eb:ca:de:e3:e8:e2:c3:dd:9f:fc:
         6f:b9:46:23:6c:ce:91:f2:62:46:3b:04:67:3f:75:b9:b9:50:
         a0:e9:26:86:86:b3:f8:ed:1c:23:fe:c4:6f:b0:56:17:24:94:
         2e:4b:a1:ab:f8:7d:e4:3c:78:39:23:61:99:65:d9:74:73:ea:
         58:ae:11:08:f5:18:d3:69:7f:25:d9:67:d9:f2:9b:09:f3:33:
         05:d5:c1:e5:46:53:c6:1e:75:26:96:81:65:c5:44:a2:d0:2b:
         32:02:39:bb:19:19:5e:f5:2b:d1:18:82:9e:44:26:24:ed:95:
         56:62:7f:77:c3:0a:25:15:58:33:69:ba:03:ae:52:cc:86:4c:
         15:ba:9e:37:af:05:90:6d:90:40:0f:19:f3:14:b8:f7:47:4d:
         f3:3b:66:43:49:7b:39:5b:ff:dd:c3:88:ef:50:9d:06:23:39:
         4c:fa:75:9d:81:3e:96:b9:d5:ba:a9:ae:27:74:0d:ee:96:72:
         f2:af:6d:53:3e:81:38:ef:66:ce:65:92:ae:55:63:5b:40:34:
         63:58:35:c9:17:a4:0b:f2:89:e4:12:08:2f:cc:6e:62:72:35:
         77:df:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:14 2026 by rpki-client