Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
File:                     swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json)
Hash identifier:          SmlpzVafa9O/6N9cyFPRb7DeBqflQ1cQaLPfumcwoeU=
Subject key identifier:   F4:F1:7D:7C:39:99:8E:71:17:4A:ED:D1:19:4A:7C:0E:0D:49:A1:EF
Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
Certificate issuer:       /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Certificate serial:       01A0D236D332DAFEB68C411DD15D991BFD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
Manifest number:          03E4
Signing time:             Thu 24 Sep 2026 07:00:03 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:03 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:03 +0000
Files and hashes:         1: XKDk2rZm147y9FDRHut6I-mUpng.asa (hash: HVEtQIn453IASpjwjYyr9u3FMfLBPM6fQKPVmHUJlwQ=)
                          2: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: hfnJST+S6z5qKuR+Bzwebpgiiy6DTVCgIpuBV9I0G1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:36:d3:32:da:fe:b6:8c:41:1d:d1:5d:99:1b:fd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
        Validity
            Not Before: Sep 24 07:00:03 2026 GMT
            Not After : Sep 25 07:00:03 2026 GMT
        Subject: CN=f4f17d7c39998e71174aedd1194a7c0e0d49a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:45:30:85:6d:36:40:1e:7f:57:d1:de:1b:80:
                    62:22:3f:5e:32:7d:4f:e8:e9:e2:8e:15:34:a8:28:
                    6d:a3:52:3e:db:0b:f8:16:ee:c3:74:9d:61:df:21:
                    56:a9:d5:b7:87:53:b0:49:96:c6:18:92:07:bc:2d:
                    41:21:f7:4d:12:a9:34:b7:f8:6a:a2:52:11:ec:db:
                    24:7d:59:a0:36:fa:79:05:6f:21:4b:ac:78:fe:df:
                    b9:58:34:f5:dc:69:71:ef:57:6b:89:8d:98:ef:53:
                    0d:41:77:6a:c2:ec:0c:8a:56:63:58:58:92:cb:e5:
                    c3:06:d4:a2:83:6b:25:17:08:10:a6:c8:17:b2:8e:
                    6f:87:62:8a:a8:90:80:f5:21:c9:9e:99:85:81:40:
                    45:9a:d8:35:31:01:d1:75:88:ef:c0:35:8f:a3:0c:
                    43:f9:2d:e9:01:2c:dc:b1:52:b4:9e:f3:c0:3a:17:
                    c7:ff:2a:dd:ea:9b:dc:5f:4a:01:ea:20:8d:4c:6c:
                    fe:e4:c6:79:f5:03:37:b0:9e:fa:02:74:53:e8:5f:
                    a4:6e:9b:3b:48:8d:5a:d9:e2:6b:e5:2c:2e:19:8f:
                    10:7a:a2:df:70:fc:6a:dc:04:57:33:6c:5f:07:e5:
                    c2:78:e4:cf:f3:ee:98:45:35:d2:3f:68:0c:f7:77:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:7D:7C:39:99:8E:71:17:4A:ED:D1:19:4A:7C:0E:0D:49:A1:EF
            X509v3 Authority Key Identifier:
                keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:60:b7:21:47:ec:81:4a:df:10:38:ac:a6:0a:c4:33:fe:
         c6:bb:31:11:50:51:5f:1f:31:34:f8:bf:6d:7d:83:65:33:b0:
         ed:c2:8c:63:bf:21:16:0f:f4:29:39:30:40:6b:54:69:cf:42:
         c8:aa:b3:a2:75:f9:f1:e4:5a:39:df:45:9c:3d:14:45:32:f6:
         f8:d1:62:95:04:fd:3f:aa:ea:bd:2e:3d:b2:e8:d2:bd:5d:2d:
         9b:3b:78:a4:b6:50:77:9a:ba:61:54:8c:e8:5e:94:57:11:b0:
         c3:f4:a7:63:5f:05:56:b9:71:0b:06:17:c7:c8:5d:13:6f:ec:
         13:3f:86:a3:be:da:8c:56:b2:50:b4:84:8e:9b:dd:e1:3d:ea:
         0a:17:d5:67:3f:1b:0c:c4:1f:f3:87:0e:42:a7:d8:82:fc:12:
         38:47:a7:45:98:4b:42:8d:23:08:73:52:99:91:af:87:e6:2b:
         f2:5b:6b:c6:e1:c5:ab:a7:9c:6e:46:06:67:b7:83:a3:17:2d:
         36:8e:f1:fd:8f:a7:e8:66:25:e4:f2:a5:34:53:1f:09:c8:8a:
         54:10:b4:5e:84:73:81:a9:60:39:c2:bb:b1:06:8c:11:31:5d:
         16:8e:f4:98:78:30:fa:b2:c7:ad:be:1f:cb:d8:a0:79:21:a6:
         10:c7:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:28:43 2026 by rpki-client