Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          ooDIpqE0wm9uTxwO2L2HM2VhWdWeuEPmxrRizYTMtqM=
Subject key identifier:   5A:2D:20:23:03:0E:FF:1D:45:64:BD:F7:9B:B5:84:8B:D7:45:0F:40
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       019CAAC690CC7EEA2A675B558A1FA9430FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          07F6
Signing time:             Sun 01 Mar 2026 19:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:05 +0000
Files and hashes:         1: 1-8KgAPre3SF7bRKA3fLmqxwchcI.roa (hash: u0Xe2ZYaUqmKlNfA25Uh4YAKw25zRG/IeNSgOriRYIQ=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: spQltq2cMo2t6n1rNuQtVhcoq7k+VVlyGOgN1YGIZ1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:90:cc:7e:ea:2a:67:5b:55:8a:1f:a9:43:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Mar  1 19:01:05 2026 GMT
            Not After : Mar  2 19:01:05 2026 GMT
        Subject: CN=5a2d2023030eff1d4564bdf79bb5848bd7450f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:59:11:1c:6e:fc:76:22:68:52:d0:f2:29:
                    b6:ac:20:29:24:e6:ce:bc:0e:2b:56:0b:5e:4d:f0:
                    83:60:48:ff:b1:b7:3c:58:eb:6a:69:bd:33:d3:66:
                    f2:9e:6b:40:a2:39:20:5a:b0:86:49:d0:79:b2:8f:
                    94:57:cc:9e:86:a5:d6:ff:4d:20:64:95:44:4a:0f:
                    32:b1:76:31:2c:d6:c0:e9:0b:67:94:f4:32:c3:56:
                    a7:90:8c:07:5f:49:8a:ad:06:23:d4:1b:16:af:15:
                    2a:ed:91:1b:1f:32:56:5f:88:d1:d7:ba:d1:28:cf:
                    6b:03:a0:02:e8:86:d8:fb:62:b7:95:c5:bb:fd:5b:
                    ef:d3:45:81:72:eb:d6:d0:37:a9:71:82:19:02:7e:
                    d6:5d:1c:a4:bc:8e:d1:a5:4c:74:31:07:d0:3d:f2:
                    94:91:c0:17:c9:96:13:8b:3c:94:2c:fa:42:50:dd:
                    88:2a:72:89:13:f6:6b:83:0f:8c:36:ab:43:22:ff:
                    76:99:94:6d:a9:bc:1f:5e:54:2b:a3:0d:ac:ea:c2:
                    5c:78:a2:66:42:a6:8b:1b:43:cd:14:5a:2e:bc:b7:
                    07:a3:e1:1c:65:88:c7:ad:fd:94:64:36:c5:0c:5a:
                    a7:62:d2:ee:da:b8:e3:59:89:50:b3:da:f5:b8:6e:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2D:20:23:03:0E:FF:1D:45:64:BD:F7:9B:B5:84:8B:D7:45:0F:40
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:78:33:3c:a1:b2:49:63:2f:d0:a4:db:66:49:93:72:e0:b4:
         7f:80:51:fd:fe:6c:80:19:14:9c:b8:25:58:47:61:de:5b:e6:
         d8:12:3b:7e:60:9c:bf:11:fe:4f:4a:03:19:e1:cb:db:00:30:
         76:33:c0:40:8d:71:aa:c1:a2:6a:6b:5b:e4:97:ec:3c:66:c3:
         a5:f3:4c:67:70:07:10:eb:c1:4f:77:06:3e:0d:bc:ec:be:28:
         11:9d:25:05:72:4b:d8:da:e3:30:6c:4e:c9:1e:27:9e:80:a9:
         60:23:f7:59:5d:d3:99:c0:8b:4f:1a:7b:ee:21:76:1e:9d:07:
         10:85:a5:63:28:5f:5a:2e:6f:6b:d9:38:16:cd:c3:6b:e8:4a:
         8b:bc:44:ca:4a:dd:85:d4:31:bd:02:ac:3b:a1:63:d9:37:ee:
         88:25:3b:af:4d:8a:6b:ff:33:d1:e4:3b:ad:a1:5b:4c:fb:06:
         ca:5e:5e:f7:0c:30:35:d5:08:b2:b8:6e:b1:41:80:b9:ab:29:
         45:03:a8:9f:ca:e1:ff:33:05:38:54:89:fb:8e:c3:07:bb:11:
         ae:1c:ee:c7:3e:42:77:71:40:e0:41:0d:3b:24:95:5c:ee:63:
         da:a5:47:10:fa:24:f1:be:fa:7d:d7:eb:c1:2c:a6:e9:71:9a:
         52:71:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:06 2026 by rpki-client