Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File:                     _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier:          POFgUyIgkqudBscKQ0X/Z2kc/2JBqhiUVGw+gdW8knE=
Subject key identifier:   16:21:2B:0D:99:02:5E:80:1E:96:30:77:45:2B:DB:42:AB:B6:68:34
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       01A0C2FB07AE17DC0F7D27A812D4648A0533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number:          031D
Signing time:             Mon 21 Sep 2026 08:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:26 +0000
Files and hashes:         1: MHpsCZyP0IVYMoHWzqfloOQWEZE.asa (hash: hTcP8Hkd9/FsM/qMperPFuWrlLFufrbGXDvfXB44n3Y=)
                          2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: iOEgG/37UvpKZvDMoIfjIvJdsUV6TOEvkb5WdwFcBSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:07:ae:17:dc:0f:7d:27:a8:12:d4:64:8a:05:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Sep 21 08:00:26 2026 GMT
            Not After : Sep 22 08:00:26 2026 GMT
        Subject: CN=16212b0d99025e801e963077452bdb42abb66834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:6f:1a:c4:b6:c4:85:67:40:81:88:81:e2:
                    c1:d1:d4:7a:47:bc:b5:a0:ae:81:c2:39:95:cf:04:
                    80:64:11:e0:6e:36:f4:94:98:3a:d5:6e:e6:76:bf:
                    6a:a6:36:60:f6:ca:89:00:e3:28:0d:ac:c2:31:9c:
                    df:dd:45:00:fe:8f:e3:25:ca:99:f3:6a:36:70:1f:
                    89:01:c8:bc:90:da:16:f7:24:b6:3d:14:72:0f:46:
                    07:c5:3a:b6:f8:86:44:4b:16:24:60:76:55:c9:a6:
                    a8:67:8d:16:3c:bb:9b:f3:2a:4f:33:1e:7b:75:e1:
                    86:a7:0c:89:ba:ce:e8:90:40:5a:83:70:4a:38:bf:
                    5a:5d:b7:b8:e6:12:c8:0e:d7:fd:13:dd:d6:3a:6b:
                    81:e7:fe:dc:60:4f:b7:0d:b4:62:ce:a8:d8:0f:cb:
                    8c:2e:cf:be:1d:72:ed:d0:a0:98:b1:84:6e:cb:9c:
                    6d:29:6f:cd:6a:bd:96:cb:13:a8:83:5f:2b:33:2f:
                    3e:96:9d:c3:2a:11:b5:a6:5e:54:34:f3:bb:1a:f5:
                    7a:aa:e7:9a:0a:e6:04:0a:bf:fe:c5:17:e8:77:91:
                    2e:2d:6d:1d:e0:d5:53:9d:50:48:23:af:af:92:91:
                    75:b2:b5:d1:73:22:37:f9:7e:98:e5:b4:af:88:ec:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:2B:0D:99:02:5E:80:1E:96:30:77:45:2B:DB:42:AB:B6:68:34
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:92:e0:4c:35:aa:22:a8:bf:04:ca:4b:58:7c:81:10:d2:
         49:89:fb:b0:9e:ef:f2:5c:9a:40:85:45:fd:67:5f:5d:6a:21:
         41:2d:10:ea:34:11:f8:fd:2b:41:f7:11:e2:21:b6:3c:b3:dd:
         48:9e:df:74:71:33:23:79:4d:e3:33:2f:d5:5d:38:4e:d0:0b:
         16:da:df:e5:20:b3:7a:21:9a:a6:39:46:22:b6:9c:d0:e0:35:
         15:98:d3:82:89:80:05:d2:d3:ae:99:5d:25:e4:94:90:ee:1e:
         ae:59:42:ff:a4:5c:8b:5d:a4:6c:2d:a4:18:db:38:27:ab:83:
         20:52:74:68:95:0e:8f:c8:2c:1a:8f:44:32:06:58:f3:84:a7:
         f9:b2:30:db:64:a7:2e:ee:c0:56:84:11:2e:fb:b7:5f:13:92:
         7b:51:cd:bd:e0:e9:b3:96:09:17:b4:ba:db:ae:39:4c:6a:4e:
         eb:d9:45:b7:7d:ab:0c:e4:31:38:c6:f5:fe:63:c1:ed:c6:0a:
         6e:19:d0:ae:b0:d6:b2:9f:b2:10:5d:79:62:b8:f5:52:0a:b2:
         d0:79:1a:95:69:0f:34:1a:f2:2a:53:d6:e7:3c:12:dd:b7:9c:
         79:46:88:15:72:02:dc:50:b7:3b:75:84:0a:9c:23:ab:a2:38:
         3c:78:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:07:08 2026 by rpki-client