Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          Y6qmTPFzSLYlF/9v8dpsYVaGcW6VH81bgrn2zDGI7ME=
Subject key identifier:   30:8C:D2:CC:79:8E:DF:16:28:97:35:07:BD:CD:C3:F4:D2:61:DD:36
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       019CAAC6176EB4A730F18F0B22F1EBB05188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 19:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:34 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: uJOaxQFXw0H9Eykmxv2eU9KNkIBXrhgbq8/gJDiVLcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:17:6e:b4:a7:30:f1:8f:0b:22:f1:eb:b0:51:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Mar  1 19:00:34 2026 GMT
            Not After : Mar  2 19:00:34 2026 GMT
        Subject: CN=308cd2cc798edf1628973507bdcdc3f4d261dd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:17:44:7b:69:f6:05:93:45:de:48:f4:6d:
                    38:26:92:96:a3:6b:b5:fb:b9:88:f9:ad:52:7b:21:
                    7a:c8:b4:f5:38:8f:cd:3b:70:62:5d:57:7d:ab:03:
                    46:21:24:19:a4:99:a7:0b:8f:37:ab:78:d3:14:38:
                    e3:69:48:55:d4:dd:03:04:54:32:62:b3:2e:41:a1:
                    3b:df:f7:dd:59:ce:22:3e:0b:de:24:90:83:67:7c:
                    92:18:b5:b4:8a:4e:6d:75:58:51:40:50:cc:83:57:
                    98:6f:32:40:39:ab:36:c0:c2:1f:1c:23:0d:29:fa:
                    e1:4e:17:43:75:40:e3:17:e5:c0:3a:f1:0a:18:f6:
                    d3:0c:b8:90:e1:82:56:c9:c3:5b:13:95:df:0e:86:
                    8a:ac:d2:f8:14:48:e4:35:a6:51:f9:d7:74:70:f6:
                    06:da:82:85:a5:8f:69:87:6d:ad:67:9a:9e:80:cb:
                    60:65:78:f7:04:82:5f:8e:40:80:64:a7:48:d5:89:
                    f7:79:0d:92:fb:f6:e8:21:a0:3c:11:73:e1:20:44:
                    a3:8f:ab:38:d0:9e:88:10:ec:47:fe:61:92:74:aa:
                    fc:18:d8:48:cb:e6:57:b7:66:c1:bc:de:7b:87:0d:
                    e9:9c:e4:92:9b:36:5e:d6:a4:9a:ef:92:54:b5:76:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:D2:CC:79:8E:DF:16:28:97:35:07:BD:CD:C3:F4:D2:61:DD:36
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:79:7c:36:6a:46:11:3c:72:73:de:cf:3f:58:d7:35:81:2c:
         5f:a0:36:8f:54:d9:01:83:1a:36:11:eb:f9:86:3b:0b:02:f8:
         49:fc:8f:3a:4c:8f:c3:ce:bc:ae:df:7d:da:7c:8e:f5:b0:b1:
         9e:eb:88:72:52:48:33:e3:5b:0a:4b:89:0a:5d:3d:c1:e0:0b:
         ae:8e:f6:ab:3a:4f:77:c6:5a:d2:3c:e3:5f:30:2a:e9:23:47:
         c6:72:4b:b3:bf:2e:f1:15:90:64:ba:e5:0f:1a:eb:0a:f7:e8:
         a0:be:e9:e7:f6:4e:0c:70:05:54:76:15:43:6e:c3:c9:ff:ed:
         5a:ab:f8:73:18:a8:72:00:27:cc:a5:62:40:cb:84:f4:94:da:
         ab:2a:9a:c9:97:ee:c0:b5:7a:75:4b:14:7d:ec:1a:9a:ef:91:
         c4:bf:6b:4d:ab:f9:6f:4d:93:4c:bb:33:fa:1e:5b:5b:4e:c4:
         f0:c2:4a:8f:d4:95:24:63:b1:be:b2:84:88:35:c5:43:0e:0f:
         3c:5c:1e:70:de:73:3f:dd:24:c6:30:3d:02:3c:a6:f2:d3:80:
         38:26:da:e7:00:31:29:7e:d6:7c:ed:31:11:e8:52:6a:17:d9:
         11:23:18:98:c8:8e:74:cc:df:1a:2f:87:55:41:19:f3:57:8d:
         eb:f7:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:29 2026 by rpki-client