Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File:                     _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier:          Hc+nm4fOp3iOdhNOXJL1NWdJAhW0DXDySPjeTEOZKpY=
Subject key identifier:   E4:81:8A:6B:31:31:ED:BA:C7:83:34:4D:50:6A:BD:7F:77:37:8E:20
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       019D9C9AA3C32246E0E76199DA188467DFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number:          0177
Signing time:             Fri 17 Apr 2026 18:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 18:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 18:01:13 +0000
Files and hashes:         1: T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa (hash: 9UlqFrtBpJ1m/jb2if0Qk7CFK/PRtZG8ru3Zi5n9cBk=)
                          2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: YzxeFTZqc8o/CQmhKNF0qqiPLYeaiarLqXdwnbn0Yfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:a3:c3:22:46:e0:e7:61:99:da:18:84:67:df:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Apr 17 18:01:13 2026 GMT
            Not After : Apr 18 18:01:13 2026 GMT
        Subject: CN=e4818a6b3131edbac783344d506abd7f77378e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:d4:e3:55:2d:6d:f2:84:28:c7:2e:7f:9f:
                    43:cd:9b:ee:ea:4f:90:9c:2c:c8:0a:44:5f:67:d4:
                    de:70:01:2f:f2:2a:06:80:2e:c1:31:09:79:20:b9:
                    da:49:e2:d5:68:96:b4:36:63:d0:3e:f1:44:4c:31:
                    5b:6d:f6:e9:c2:78:b6:a8:6a:97:c1:79:dd:5e:46:
                    85:bc:43:62:a7:85:aa:46:6e:56:d0:91:96:26:d8:
                    5b:13:eb:91:be:fe:87:b4:36:93:04:15:82:61:5f:
                    3d:40:18:df:e2:ae:34:b4:3c:60:0e:b8:55:d6:d4:
                    65:e5:cf:af:51:16:d3:c5:23:6b:b8:c7:9b:71:f3:
                    51:4d:e6:13:9b:73:e8:ae:6f:b3:b9:4f:09:47:3c:
                    30:fe:b8:1e:10:63:41:4d:35:0a:77:6a:b2:49:23:
                    80:b5:1f:57:0b:a8:41:49:88:32:85:3d:1e:71:94:
                    35:4d:ed:ba:f1:76:00:9b:45:5e:e3:f9:44:10:2b:
                    92:92:f6:4e:a9:45:b8:b5:26:fc:73:f5:a8:f7:b5:
                    1c:d0:1d:cf:db:68:9b:a3:c4:38:da:14:c3:20:83:
                    7e:e4:f4:26:e1:f3:f2:c7:52:30:26:89:2c:c7:5f:
                    b8:49:14:d5:70:04:83:e5:e1:bf:08:4c:ab:92:cb:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:8A:6B:31:31:ED:BA:C7:83:34:4D:50:6A:BD:7F:77:37:8E:20
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4e:81:10:70:48:33:e2:df:fd:c0:3b:de:a5:4a:71:47:19:
         a9:e6:96:8a:e2:c8:2c:ad:d0:bc:87:db:70:ce:ba:88:23:3b:
         4e:27:14:37:7a:fb:cd:b6:8c:73:e5:4b:15:5b:ee:77:bb:75:
         e5:54:1b:97:dc:15:e8:af:51:e6:5e:e3:b0:2b:98:81:71:8e:
         2f:ff:0e:26:73:43:66:c4:51:75:0a:12:b2:42:b3:00:d3:29:
         0c:70:44:a6:41:24:62:ee:54:23:31:81:73:03:8e:f6:48:e3:
         93:2b:5d:3f:86:b6:f2:e8:c2:18:2f:4a:1b:38:70:24:6e:c0:
         b2:48:55:4e:c2:72:93:14:89:e7:1d:4c:e6:75:2f:97:fa:c4:
         14:78:98:ae:b2:ec:eb:1c:28:f6:0a:1c:7b:5b:c8:b6:09:ad:
         dc:b3:0c:e1:39:f5:1e:95:77:4b:6f:8d:ca:19:3e:81:e6:a9:
         80:3c:53:1c:91:5b:7a:9b:a6:25:30:e4:0b:3b:73:5d:87:00:
         d0:ff:17:a0:1a:a5:94:09:a3:71:79:7f:ba:6b:51:f9:b0:d3:
         e0:2c:8d:47:3c:39:7d:44:07:95:a8:fe:88:d8:33:ef:16:d9:
         5c:34:a0:fb:27:14:0c:79:53:98:e8:cb:7c:e9:79:31:54:1f:
         f7:b1:32:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:58 2026 by rpki-client