Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          4mUXUz2ecYlc1FhuuokZTfZQi7NSOTeta8Has8dDUp8=
Subject key identifier:   35:75:6F:19:6A:4E:B2:51:49:CB:62:A6:4E:3D:DE:8C:C6:D7:70:77
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       019D3865F4BDC3987F96F99F06A8D83CD49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0F74
Signing time:             Sun 29 Mar 2026 07:01:38 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:38 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:38 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: FF2utcr+10FRe9KBl2I+6eZxAPO5+Df+sd2fEdmSBUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:f4:bd:c3:98:7f:96:f9:9f:06:a8:d8:3c:d4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Mar 29 07:01:38 2026 GMT
            Not After : Mar 30 07:01:38 2026 GMT
        Subject: CN=35756f196a4eb25149cb62a64e3dde8cc6d77077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:f5:58:08:e0:e1:cd:8a:7a:52:8f:ae:e0:
                    97:ff:d8:78:ac:b5:c8:c8:17:15:a7:21:33:a1:ab:
                    7d:af:d6:a7:52:01:25:1b:eb:bb:ba:e0:fb:0c:77:
                    e5:63:ea:12:be:48:76:af:1e:b0:b8:ed:a8:1d:11:
                    8d:0c:0f:78:fc:a2:97:0b:ca:78:af:a6:29:28:97:
                    e4:f3:88:47:5a:65:6f:93:d7:07:6a:55:53:95:9b:
                    47:82:82:c7:13:a3:bf:8c:a2:06:48:79:0f:15:21:
                    e7:c7:bd:51:7a:4c:0f:41:ba:04:4d:f3:45:1b:40:
                    e2:95:24:13:3e:6f:83:70:43:4c:23:74:70:6f:88:
                    20:27:e7:63:51:6f:5f:d8:84:33:0e:6e:6a:11:d7:
                    b2:38:1f:16:31:0b:da:55:f3:be:a5:e6:1c:55:3e:
                    cc:3c:5f:f6:be:d6:da:7b:a0:99:30:2a:85:cb:e3:
                    00:b2:f0:f2:48:21:39:fe:77:7f:f7:f9:6b:02:53:
                    cd:2e:4a:71:5c:fe:c1:fb:6a:58:2f:ba:3c:a0:69:
                    6f:aa:b2:3d:c3:05:79:1b:46:2d:be:55:77:47:74:
                    7e:c9:be:d5:01:f3:c7:61:96:3f:1f:79:58:98:2b:
                    11:f7:e5:3d:16:33:5d:11:04:09:1c:33:af:5d:ec:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:75:6F:19:6A:4E:B2:51:49:CB:62:A6:4E:3D:DE:8C:C6:D7:70:77
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:da:f4:de:98:5a:58:6d:7b:5f:82:9d:11:31:f9:ee:41:9e:
         43:e0:08:14:e3:99:e8:57:a6:9e:28:c7:0c:29:1b:cb:b2:38:
         b7:57:15:32:c2:dd:5e:1f:d7:0e:ee:56:62:49:d8:d7:e7:50:
         f4:7d:84:ec:7b:7c:23:31:39:46:d8:49:95:ad:cf:03:93:9f:
         1f:74:30:44:21:21:43:f9:a6:87:5c:cf:0a:b0:f7:3f:1a:89:
         70:9e:d9:bd:74:43:35:9c:72:6f:14:b3:84:c3:d2:dd:25:ad:
         80:09:8d:b7:ff:0b:35:13:f3:87:52:5d:44:9a:4c:e9:7f:7f:
         15:b4:65:62:42:1a:3a:4c:3f:9d:cd:54:90:39:5b:b2:6f:65:
         cf:c8:1f:9e:2d:88:82:f2:05:7e:5a:23:84:00:3f:14:e4:01:
         7a:a1:a4:e9:97:3a:30:90:1b:72:a7:6a:ce:e0:c3:28:fd:3c:
         a2:1e:0b:66:26:bb:26:06:b9:1b:e7:ee:51:90:84:72:fa:6c:
         3e:dd:7f:ed:29:34:13:d3:86:13:be:ae:3b:3e:90:3b:40:ef:
         57:e7:13:e4:b6:97:c6:11:ae:3d:68:a9:13:d7:80:e8:8f:f0:
         55:3a:c2:08:2e:51:c8:48:31:92:b7:55:0b:07:11:5b:5d:43:
         02:17:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:16 2026 by rpki-client