Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File:                     sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier:          wXmVGTPVVEoFhXlRL02WZLi1HAcOY3WhCVs++0rC5Zs=
Subject key identifier:   84:70:AF:9A:64:87:0F:F8:1D:84:0B:83:C7:3C:CB:AE:79:07:47:D4
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer:       /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial:       019EC1B74A138902A191487D7DE2DCFD6C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 16:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:15 +0000
Files and hashes:         1: AlaUHxPXq3ieER5sys598dlOxkM.roa (hash: RZxV/h17P4vk9KS8WEdEwr+BTicC2yMkPA4IqVUF7TI=)
                          2: N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa (hash: pIzqatQWuAi6HRtGir05ok6akFOjuueWgSLx9RmL4l0=)
                          3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: k+Tg1X2P5HEKLPNhfTabKly5RF6kc64RFYtsMwOWKh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:4a:13:89:02:a1:91:48:7d:7d:e2:dc:fd:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
        Validity
            Not Before: Jun 13 16:01:15 2026 GMT
            Not After : Jun 14 16:01:15 2026 GMT
        Subject: CN=8470af9a64870ff81d840b83c73ccbae790747d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:f3:0a:4f:f0:0c:f9:65:25:6a:c8:41:2a:
                    47:0d:74:f6:ee:fb:f0:1a:9b:32:8e:a7:85:99:3e:
                    eb:36:69:02:9c:7b:f1:fb:23:e5:ed:e0:b6:fc:3a:
                    b3:08:5f:75:20:72:01:bb:a6:21:12:93:b0:6d:38:
                    08:5c:91:9d:21:44:5d:59:6e:82:d9:c4:1d:f2:b0:
                    1a:69:3e:cc:47:b5:dc:ec:93:db:58:aa:da:db:88:
                    84:39:30:e6:88:ed:f7:34:d7:93:b8:7b:81:c4:46:
                    e9:bf:ab:44:6c:53:d8:85:17:13:d1:4f:ad:93:6e:
                    9b:eb:d1:78:3d:31:5b:b0:df:eb:4a:ad:2e:2b:03:
                    42:b5:8d:ff:e4:41:f7:c1:07:6a:82:a1:2d:e9:0f:
                    8c:2c:76:24:f2:7d:b8:4d:54:26:25:94:61:b0:cd:
                    8d:9a:06:d2:7d:b4:3b:4b:74:c0:03:6a:97:08:49:
                    63:31:52:5f:d6:01:2e:02:e9:c7:b0:81:f5:de:bc:
                    17:62:4e:e7:42:bf:4d:a7:f0:62:16:8f:d5:3d:09:
                    8f:19:fe:24:09:68:71:2a:13:d2:cf:00:b7:ee:d6:
                    e1:01:86:3b:36:b6:bd:b9:ec:86:e2:84:d4:46:82:
                    8b:95:f9:96:c9:66:bd:ed:92:fd:51:f0:03:45:2a:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:70:AF:9A:64:87:0F:F8:1D:84:0B:83:C7:3C:CB:AE:79:07:47:D4
            X509v3 Authority Key Identifier:
                keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:cd:29:32:ba:e6:2a:eb:ef:6c:24:a3:f5:72:38:a6:d0:
         c8:42:3e:ae:e6:4f:46:36:ef:15:b5:5e:b2:3a:7d:f0:5b:19:
         7b:ba:7f:b6:c9:82:26:81:f0:fe:c6:27:fd:00:eb:38:c0:69:
         79:4b:09:f5:db:d2:f4:2e:0f:cc:b1:12:a3:6f:17:eb:e9:24:
         f5:64:e5:92:bd:9d:df:68:f3:55:d4:1d:eb:8b:71:d2:2d:fb:
         bd:8e:75:a2:b8:07:4a:f2:49:48:ce:38:07:4a:87:ee:fa:aa:
         ad:f7:e6:68:78:80:a3:10:05:47:c4:fc:e0:36:40:50:10:2a:
         6d:06:60:14:cd:fa:57:2b:c7:89:1e:53:03:98:81:45:c4:8c:
         70:2a:f6:18:90:bf:99:bc:c4:e3:77:83:76:11:9a:dc:ec:e5:
         79:97:58:de:a0:5f:60:ba:24:3f:b6:fd:d8:0b:8c:a9:fa:04:
         22:00:35:08:5d:e1:44:5d:87:de:8f:49:d9:b1:a9:e5:ce:8c:
         97:5b:77:4f:9d:d7:07:f1:2f:95:20:e3:a8:63:47:21:cf:1e:
         43:92:c2:4b:4a:92:e6:3c:49:e7:48:40:32:83:fc:da:fe:af:
         98:07:1b:25:8a:da:71:99:04:fb:35:ea:0a:89:b4:c0:33:26:
         bc:57:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:15 2026 by rpki-client