Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          JihRQhSpRaEaPtx0rR4MSKC0qKLTlh88meWNkHxUKpM=
Subject key identifier:   AC:16:30:F4:1B:CA:71:62:2F:68:52:72:74:A4:F2:93:59:C0:6D:5C
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019CAEDA595AEA947FD32D7DDC0774D53EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          154A
Signing time:             Mon 02 Mar 2026 14:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 14:01:11 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: Eu3pOBC36Y-pw7OIVyQXZFyVHrQ.roa (hash: b+c4P8KvAFa/U6KE4xCMpIf8v/6ZAEwKWpXn3TBS6Qk=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: se2pzS5SXu1qSFBy7rxu218Gr/v0RzyHgZVa6zCVQKo=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:59:5a:ea:94:7f:d3:2d:7d:dc:07:74:d5:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Mar  2 14:01:11 2026 GMT
            Not After : Mar  3 14:01:11 2026 GMT
        Subject: CN=ac1630f41bca71622f68527274a4f29359c06d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:8a:b9:d3:ec:8b:70:25:fc:29:76:89:79:
                    d5:75:f1:3e:fe:ef:a1:34:23:a3:3f:6b:d1:f2:f2:
                    1e:88:1f:da:3e:f6:82:71:93:4e:95:db:08:58:7a:
                    0a:5d:0e:0d:b1:41:35:2e:4b:c0:4e:7c:00:21:24:
                    5c:31:8b:ed:d4:8a:a7:67:26:70:b7:82:60:ea:09:
                    76:24:f9:e7:ff:5e:b1:44:d8:77:26:23:30:09:42:
                    f3:5d:3f:85:e8:6d:e0:55:de:d8:ca:81:a1:6b:82:
                    41:0e:20:8f:e2:83:dc:f3:03:33:53:60:2b:3f:7a:
                    a9:e5:00:f3:2d:dd:b2:58:6b:de:c1:ae:41:79:f1:
                    2c:15:3e:af:6e:27:c2:d8:29:bb:b8:92:85:f6:83:
                    b7:14:c7:35:2e:19:d4:a6:9a:59:00:44:29:c7:23:
                    7f:15:b6:f2:6e:70:3d:01:52:01:68:a1:c4:a9:cb:
                    e9:06:19:c2:63:23:0e:22:be:1e:84:f9:77:e5:48:
                    5f:7b:29:f2:15:d7:16:db:6a:ca:49:33:fd:48:ae:
                    55:55:e4:36:a5:a1:0a:5a:39:48:81:83:37:36:67:
                    5c:a9:6f:52:a9:8d:80:90:0a:55:cc:b7:bb:7b:cb:
                    37:7c:ef:10:93:5d:bc:70:99:59:18:4d:e9:07:2e:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:30:F4:1B:CA:71:62:2F:68:52:72:74:A4:F2:93:59:C0:6D:5C
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:64:99:05:24:c5:2b:1a:70:65:65:95:21:85:3f:0b:da:
         b6:51:22:81:25:6b:39:5c:e8:0e:96:d1:50:f7:cb:b7:54:c2:
         1a:48:0c:39:52:64:ef:d7:a6:9a:78:e1:c5:0e:f0:3b:47:38:
         73:2d:6f:27:2a:50:fb:98:02:97:f5:30:3d:e6:3c:15:13:fa:
         e7:63:60:84:a4:cb:27:35:10:c7:4a:e4:c2:83:18:0c:d7:e7:
         1a:21:4e:95:0a:b1:41:09:80:f8:cb:89:fe:7c:3f:88:7f:5b:
         3a:e6:b3:cd:79:87:25:17:b9:49:3d:ef:5f:74:b5:63:b7:17:
         0b:a3:31:03:b4:b9:14:6a:84:8c:18:3a:62:30:3d:c9:04:fb:
         d1:fc:3f:f1:38:f2:ab:63:b0:57:ec:f1:47:7f:89:e1:6c:71:
         e1:da:a7:77:c3:14:cb:fd:49:6b:f4:43:8e:f0:ce:b3:dc:8a:
         24:11:bf:09:ac:f6:32:28:08:7e:21:7d:50:0b:94:7a:87:88:
         52:c1:17:ed:a8:a1:d1:c7:52:5f:00:60:dd:bf:9e:0b:a3:ea:
         53:9c:c7:a5:0b:9f:c9:de:25:df:e5:63:65:8d:63:0e:06:5b:
         56:2a:ef:f0:46:05:3a:9c:41:71:e3:8c:a9:f2:4f:40:86:bc:
         35:4d:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:08 2026 by rpki-client