Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          q1RUXWMit4R535c8Ab9SCtsKbk4IgsFW0tReFc7l40g=
Subject key identifier:   35:22:A4:ED:E6:65:8C:7A:E3:58:2F:83:2E:E0:45:7C:56:79:D6:09
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019FAB630C7CA47E7144829432788627B62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          16D6
Signing time:             Wed 29 Jul 2026 01:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:22 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: DmISyAPsUJZUF8-fiFzrEXhy69M.roa (hash: TEVgv9r0sVnxKS36YRt3J8jYs1KrjVhAbf7djSDQraI=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: DpbIa/tvXB2eAqU80DPPID9sS0SCEbEV9XpVKLJqPdo=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:0c:7c:a4:7e:71:44:82:94:32:78:86:27:b6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Jul 29 01:00:22 2026 GMT
            Not After : Jul 30 01:00:22 2026 GMT
        Subject: CN=3522a4ede6658c7ae3582f832ee0457c5679d609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:0f:1e:c7:55:db:fb:c3:25:83:15:75:16:
                    97:ed:4d:c1:0c:b9:d3:f6:02:1e:0b:9d:00:79:16:
                    81:1d:62:67:ca:de:e8:cd:ac:df:0b:a7:6e:3d:fa:
                    23:4d:d7:e3:5d:3f:5c:45:e4:1a:58:a5:21:55:d9:
                    1a:ba:a5:3f:60:9f:14:31:dc:88:84:b1:f6:b4:eb:
                    ba:3a:5a:f4:a3:b6:86:62:9c:be:10:df:56:f8:78:
                    bd:56:5e:34:10:49:8e:be:3a:48:da:c2:bc:35:68:
                    5f:fa:05:5c:c8:04:0c:7a:f6:db:ce:39:81:03:8d:
                    63:36:10:3e:e4:00:bf:09:bf:2f:07:a6:a1:e5:c1:
                    78:26:0b:b6:16:48:f4:6d:fd:c5:6b:d4:0a:9b:2d:
                    12:67:94:54:c4:39:9e:6b:4c:72:7e:67:d2:ed:9e:
                    ee:10:d7:4c:db:7a:30:ba:0e:f2:e9:0d:c2:53:25:
                    e9:82:f9:39:5a:f9:88:9e:2f:79:cf:5f:31:d8:1d:
                    ed:55:20:d7:1b:96:f6:70:d8:77:45:c7:83:76:89:
                    66:41:f9:df:ac:67:d7:0b:f5:82:81:f9:07:f8:35:
                    f9:bd:0a:97:43:5e:e0:71:ce:1c:30:19:10:a8:47:
                    be:eb:7c:06:ca:3e:16:ba:74:f2:3c:2d:ad:a2:7c:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:A4:ED:E6:65:8C:7A:E3:58:2F:83:2E:E0:45:7C:56:79:D6:09
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:c6:32:1e:74:86:a0:1b:80:a3:0b:a1:c8:c2:8a:28:59:
         f7:22:7f:6d:d7:ff:7e:64:89:2f:3b:07:a7:fa:9f:5c:77:fa:
         13:bd:29:4b:0f:06:4d:fa:bf:6e:26:e8:25:0f:30:ac:83:27:
         e4:f0:b1:58:9e:be:f8:d1:83:ff:45:48:86:fa:f7:20:a2:5a:
         0a:0d:dc:8f:36:73:13:42:f5:91:65:26:f7:b4:65:fa:79:11:
         9a:93:aa:c8:69:e8:32:16:c3:26:4b:50:25:b5:d3:83:a8:c1:
         db:dd:62:82:2e:83:fc:0c:84:1a:5f:20:4e:08:1a:f6:1e:e6:
         78:c6:45:e6:a6:9d:16:70:ed:d8:49:c0:33:bc:49:50:3f:4a:
         c5:5c:0b:2c:62:07:a3:38:86:f5:aa:2b:94:b9:5f:13:c5:88:
         e9:92:65:a4:5b:2a:9f:32:59:d7:a2:96:e5:cf:fa:6f:12:75:
         22:3b:89:fb:a6:63:12:69:93:64:e1:92:d0:67:5c:56:68:89:
         b6:0f:89:de:7f:eb:7f:86:73:7c:78:5f:90:ca:2e:49:04:92:
         27:28:23:d8:6b:d9:47:7e:49:f3:30:44:32:44:38:58:c8:6f:
         48:cf:5e:9c:13:10:55:f7:10:e2:22:68:f0:90:86:1a:22:d9:
         98:f7:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:09 2026 by rpki-client