Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File:                     sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier:          60FptB5fOCsBKbkN7lDjxsx0L0sov5QP4vywFtSa3Ek=
Subject key identifier:   47:52:84:9C:CA:F0:33:8B:87:A9:23:C7:17:6D:52:13:C4:10:DD:57
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer:       /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial:       019D99D0D3424B3BE5B7D6E4A4D83FD975F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number:          105C
Signing time:             Fri 17 Apr 2026 05:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:32 +0000
Files and hashes:         1: Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa (hash: hZkfinGaxG52M/5/J2Jc2UXy36GPloEbpDX2tpwbSVM=)
                          2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: 4tC1yy5UUhNARtALJprdvJawvdg+VAXS5OsNmasp8fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d3:42:4b:3b:e5:b7:d6:e4:a4:d8:3f:d9:75:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
        Validity
            Not Before: Apr 17 05:01:32 2026 GMT
            Not After : Apr 18 05:01:32 2026 GMT
        Subject: CN=4752849ccaf0338b87a923c7176d5213c410dd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:2c:eb:ce:15:4e:6b:e2:39:c8:24:19:e1:
                    9b:38:f6:1a:08:bd:93:62:51:a5:c3:36:7a:01:b5:
                    f9:b9:b4:60:d1:35:0d:e2:5b:0d:66:90:b3:60:57:
                    1b:f6:17:f6:3f:40:ac:a1:77:1d:ee:4c:e6:10:b8:
                    5e:aa:11:ad:fa:44:c9:dc:0a:62:d3:79:24:ca:59:
                    ff:a0:a5:dd:26:eb:e1:ec:e8:f0:5a:cb:c9:35:2c:
                    d5:b5:70:50:ca:ad:69:0d:88:94:73:3b:d4:b9:1b:
                    7b:a8:f9:ac:69:ce:33:c2:60:a6:f7:fe:a1:fa:82:
                    b2:06:0e:05:b0:05:9a:2f:8f:95:78:17:17:04:92:
                    79:4c:8c:1b:2e:d4:2d:b7:57:9a:b0:64:15:36:b6:
                    86:90:5f:53:fe:71:36:2c:83:6b:7e:80:6d:5f:b8:
                    d7:ca:2c:4a:d6:4a:91:65:36:ee:72:19:61:bd:23:
                    a9:01:3e:7c:38:47:76:c2:68:b8:9c:55:7d:55:52:
                    aa:3e:69:4f:15:99:48:18:7e:68:96:4b:e4:07:93:
                    fc:5c:4b:34:27:ac:f1:37:f1:20:d1:1e:70:47:50:
                    b9:22:65:3c:f4:79:69:1a:db:e0:79:35:08:67:f5:
                    5f:d3:96:1e:74:f6:37:4c:54:52:ee:99:cb:73:2a:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:84:9C:CA:F0:33:8B:87:A9:23:C7:17:6D:52:13:C4:10:DD:57
            X509v3 Authority Key Identifier:
                keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:98:05:b5:b6:f8:49:de:1b:90:c9:9d:3f:9e:72:ce:74:
         68:d4:b3:37:d5:20:f6:eb:36:fb:b7:29:96:22:94:28:c1:c0:
         d8:42:25:84:ef:98:5a:0c:32:f3:7c:fd:42:d7:fe:9a:a0:b8:
         2d:60:62:1a:92:0a:1a:ae:b1:53:2f:4f:4b:a0:bf:66:97:ab:
         90:ed:1e:ad:c1:9e:d8:66:3b:86:85:86:f1:f1:f6:18:e9:2e:
         8e:37:94:2b:18:68:ee:3b:0d:c9:45:c7:f1:da:c2:2b:37:69:
         09:47:fa:b1:6f:6d:bb:56:1a:89:9d:45:f4:f0:d3:55:f0:6d:
         22:23:89:73:6c:fc:c3:28:5a:35:c6:61:ac:5f:66:48:fa:0e:
         db:ed:18:25:82:6c:7d:24:83:d6:65:a3:42:b3:9d:be:1f:8d:
         1e:bc:d4:15:fe:68:ca:3a:d6:3a:0e:7b:7e:e3:f7:e8:d0:25:
         56:67:9c:75:2e:ad:ff:2e:a4:99:97:f5:68:42:3a:bb:bc:f8:
         68:bf:12:ba:06:2d:62:c6:54:33:7f:c1:54:70:f6:18:dc:68:
         aa:0f:b5:89:d4:89:85:00:5b:07:60:86:6d:2c:f4:54:12:77:
         c1:2d:aa:59:bf:05:da:06:55:ea:26:ef:a3:13:47:0e:4a:85:
         76:7e:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:12 2026 by rpki-client