Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          XXVW4Ak/FOx57roB+QYKzcv/BvA1W4Tnxeg71OTNSE0=
Subject key identifier:   2E:17:69:CB:C6:26:A5:FC:55:13:CA:1C:40:6E:EC:E1:D5:D3:59:63
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019D9A74CC09D046E289183AFC08B258808D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          15C4
Signing time:             Fri 17 Apr 2026 08:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:38 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: Eu3pOBC36Y-pw7OIVyQXZFyVHrQ.roa (hash: b+c4P8KvAFa/U6KE4xCMpIf8v/6ZAEwKWpXn3TBS6Qk=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: nGtSb5kJ1B1/Xmv4Dsoke9xEVpHwHT1mpd23oIOwav4=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:cc:09:d0:46:e2:89:18:3a:fc:08:b2:58:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Apr 17 08:00:38 2026 GMT
            Not After : Apr 18 08:00:38 2026 GMT
        Subject: CN=2e1769cbc626a5fc5513ca1c406eece1d5d35963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:fe:1a:8e:6a:db:06:47:f4:28:f1:b3:66:
                    fb:ae:a8:d1:da:5e:5c:b9:6c:d6:69:61:8b:12:a6:
                    99:16:11:83:ae:82:7c:24:ef:f5:1a:ad:9b:83:1d:
                    0b:56:b9:47:13:74:df:83:45:3a:ed:44:eb:d0:be:
                    f5:4e:0f:53:ee:eb:bd:49:35:74:80:5a:31:63:7d:
                    0d:1e:78:6b:46:51:cd:62:22:c0:ba:5b:1c:4f:28:
                    2f:49:92:ea:0c:fb:90:33:fd:3f:6a:78:6c:b6:dd:
                    ce:ac:0d:8a:2c:c9:85:e4:53:f7:2e:a2:a2:a9:61:
                    cc:35:66:90:33:22:04:e5:92:d7:69:9c:60:78:74:
                    f4:4d:ec:36:f1:b4:dd:f6:d9:2d:6c:48:6d:a4:28:
                    c0:94:89:4a:a4:4b:cd:97:3c:ac:64:3e:1e:fd:4c:
                    4b:40:d9:0a:f7:23:8f:82:28:4f:4b:3d:bf:09:3f:
                    f0:3d:bd:63:0f:a1:06:ea:e1:cc:05:80:03:b3:16:
                    93:32:8c:cf:2f:a0:aa:a6:4d:6b:fc:a4:3f:2c:9c:
                    ca:b5:81:45:13:11:24:30:03:f7:cf:06:45:0e:94:
                    74:25:9b:bf:42:a8:af:88:93:3b:d6:84:65:ed:28:
                    5a:cc:e4:32:67:34:18:00:4a:2c:ec:77:5d:2c:f7:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:69:CB:C6:26:A5:FC:55:13:CA:1C:40:6E:EC:E1:D5:D3:59:63
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:ac:e9:03:0b:a3:63:0f:18:90:1c:03:67:0e:0b:99:44:
         51:6d:ce:58:aa:04:84:36:d5:d0:65:17:b8:19:25:be:07:82:
         c1:dd:1e:eb:83:ac:8a:00:77:ef:40:1a:e0:cd:fc:27:56:64:
         fc:b8:39:46:d4:e4:ab:4c:06:5a:8e:96:24:8b:6d:10:5f:77:
         5b:18:dc:c4:1f:06:22:05:8c:5d:26:d4:d1:12:9b:3b:91:d0:
         44:30:cd:78:4a:6c:96:6d:fc:7a:b1:7a:7b:7a:af:e3:a7:56:
         54:14:63:c4:4e:d2:cf:3b:6a:fa:05:cb:3e:0a:b7:5f:b0:5e:
         f3:4f:3f:f4:a1:e3:b6:76:1c:cd:98:62:f0:99:0b:44:44:3d:
         da:3a:59:18:ae:20:f8:f4:b2:1c:be:67:4c:6c:98:79:ad:7e:
         72:ae:ce:73:64:46:4f:9b:5a:42:71:9a:70:e1:01:5f:5a:3f:
         07:0c:42:cb:f0:c8:ad:8a:bc:2d:38:af:49:a9:bf:0f:e7:6d:
         dc:82:0e:ae:20:d8:24:12:83:17:73:10:6c:db:34:9a:27:0d:
         f1:6e:87:80:f1:92:1f:5f:de:b5:d3:22:33:a9:1f:03:f4:21:
         b6:dd:94:71:12:b3:08:5f:45:fe:7d:be:6b:5f:d0:cd:b1:5e:
         d4:64:a6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adMwJ0EbiiRg6/AiyWICNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk
ODVjZDYwHhcNMjYwNDE3MDgwMDM4WhcNMjYwNDE4MDgwMDM4WjAzMTEwLwYDVQQD
EygyZTE3NjljYmM2MjZhNWZjNTUxM2NhMWM0MDZlZWNlMWQ1ZDM1OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKf+Go5q2wZH9Cjxs2b7rqjR2l5c
uWzWaWGLEqaZFhGDroJ8JO/1Gq2bgx0LVrlHE3Tfg0U67UTr0L71Tg9T7uu9STV0
gFoxY30NHnhrRlHNYiLAulscTygvSZLqDPuQM/0/anhstt3OrA2KLMmF5FP3LqKi
qWHMNWaQMyIE5ZLXaZxgeHT0Tew28bTd9tktbEhtpCjAlIlKpEvNlzysZD4e/UxL
QNkK9yOPgihPSz2/CT/wPb1jD6EG6uHMBYADsxaTMozPL6Cqpk1r/KQ/LJzKtYFF
ExEkMAP3zwZFDpR0JZu/QqiviJM71oRl7ShazOQyZzQYAEos7HddLPdhDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4XacvGJqX8VRPKHEBu7OHV01ljMB8GA1UdIwQY
MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct
NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy
LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyCs6QML
o2MPGJAcA2cOC5lEUW3OWKoEhDbV0GUXuBklvgeCwd0e64OsigB370Aa4M38J1Zk
/Lg5RtTkq0wGWo6WJIttEF93WxjcxB8GIgWMXSbU0RKbO5HQRDDNeEpslm38erF6
e3qv46dWVBRjxE7Szztq+gXLPgq3X7Be808/9KHjtnYczZhi8JkLREQ92jpZGK4g
+PSyHL5nTGyYea1+cq7Oc2RGT5taQnGacOEBX1o/BwxCy/DIrYq8LTivSam/D+dt
3IIOriDYJBKDF3MQbNs0micN8W6HgPGSH1/etdMiM6kfA/Qhtt2UcRKzCF9F/n2+
a1/QzbFe1GSmyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:33 2026 by rpki-client