Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          mmuI0FOJGpDrXoUNjdWSzrl7F/yDCFXkFhc1ddM8Ynk=
Subject key identifier:   54:3D:21:21:CF:1D:1F:75:4D:55:E8:1D:E8:13:04:1A:1D:F6:92:DF
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       019D39AE8B3CFA929D4D9CC8B649FE821DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          1288
Signing time:             Sun 29 Mar 2026 13:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:33 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: Vbab/4LNYlVXhvHhKDmhFGnd51oIdIBDtdQfXIopJBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:8b:3c:fa:92:9d:4d:9c:c8:b6:49:fe:82:1d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Mar 29 13:00:33 2026 GMT
            Not After : Mar 30 13:00:33 2026 GMT
        Subject: CN=543d2121cf1d1f754d55e81de813041a1df692df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:93:3a:5e:c9:94:1f:29:8a:b4:4a:6b:62:
                    3b:af:84:51:ef:7f:c8:f6:44:fe:a0:63:3c:ff:64:
                    e9:9b:33:dc:dc:c2:7c:e4:fe:b0:f6:9e:7f:0e:ba:
                    0d:1b:fe:85:29:96:a9:f1:57:f1:2c:95:69:0b:e0:
                    57:4c:7e:c7:bd:f3:8a:1e:48:d0:c2:2c:6c:ff:d2:
                    d9:fd:8d:6c:52:fb:d6:e3:35:60:fa:14:b1:1b:d9:
                    4b:ff:53:84:86:dd:90:e7:9a:18:75:43:64:ad:b3:
                    42:95:2f:a1:a2:2b:68:d8:a5:bc:05:b5:e7:cf:7e:
                    3a:08:d7:d9:58:7c:58:55:4c:ad:65:ca:4e:23:44:
                    eb:80:b1:62:fd:f4:6c:47:ed:6e:42:a4:d6:b3:01:
                    a7:56:cd:a4:f8:8a:62:30:6d:a4:4c:ce:0f:64:9c:
                    bd:4c:a9:95:16:e7:54:98:94:f1:de:87:01:1e:56:
                    e2:12:7d:b2:9e:0f:99:12:34:f7:50:8b:ce:15:bf:
                    2e:ff:fb:5f:9e:54:3b:13:93:33:0e:ec:62:0e:b7:
                    84:99:7f:ec:b0:7e:7b:3e:1e:cc:33:f3:a3:2d:28:
                    cf:7b:48:54:99:0f:6f:8a:a5:05:6d:8e:38:9c:83:
                    f5:b8:83:f5:64:6b:da:67:bd:f4:02:f5:cc:55:71:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:21:21:CF:1D:1F:75:4D:55:E8:1D:E8:13:04:1A:1D:F6:92:DF
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:86:ad:57:19:97:13:74:fc:46:10:9c:f8:bb:a2:7e:82:
         06:e9:10:e5:35:bd:a8:35:a8:a5:9d:31:6c:2c:7a:c8:c6:14:
         cb:84:b5:87:6b:1f:9c:7a:13:1f:b0:2e:10:ee:6c:59:04:1d:
         7e:71:06:42:40:dc:dc:27:06:e0:58:15:15:27:d0:37:dd:23:
         bf:19:a6:b6:2e:1a:85:14:d6:d3:c3:55:11:bf:ab:0a:13:95:
         88:31:07:6a:88:2b:3e:12:39:0a:d9:26:8a:53:b9:fe:64:46:
         f8:b1:f3:7f:39:c1:95:5e:9a:ea:04:6a:b2:b1:90:3c:54:c7:
         cc:d1:32:52:6d:8d:39:64:47:c7:ca:c2:1a:a7:a1:2c:d2:5d:
         89:f9:31:c4:f7:66:f0:f9:b2:c1:ac:91:35:5d:f2:49:67:db:
         d2:bc:0b:bf:05:cd:08:d3:b4:d8:39:4e:ec:78:3f:82:81:47:
         05:14:0f:13:70:6f:f8:3e:b7:31:e8:4c:1a:b6:a0:18:12:46:
         cb:a1:c2:3e:bd:57:fa:dc:e8:da:da:7a:47:f9:35:01:51:dc:
         4c:55:31:68:ad:81:c4:6a:e1:d5:5c:76:77:90:0f:d5:47:99:
         99:16:f9:e8:87:1f:e2:29:27:1e:65:0b:4c:13:04:ef:67:f3:
         81:1d:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:11 2026 by rpki-client