Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File:                     sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier:          BcKaVvs6Ed3u9PjGlwJdIFadwcK9bbgncZWv3KgdaF8=
Subject key identifier:   B8:2D:10:4D:95:88:C6:F1:B9:DA:A1:55:33:24:31:AE:52:23:2E:F1
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer:       /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial:       019F0A073A402DB5A7A905026FEE54C1F22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number:          010D
Signing time:             Sat 27 Jun 2026 17:01:13 +0000
Manifest this update:     Sat 27 Jun 2026 17:01:13 +0000
Manifest next update:     Sun 28 Jun 2026 17:01:13 +0000
Files and hashes:         1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: RQF1hsl4fwddt7EGT1x/ZOHRIfKJBm3EObhcEPeP+EU=)
                          2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 17:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:07:3a:40:2d:b5:a7:a9:05:02:6f:ee:54:c1:f2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
        Validity
            Not Before: Jun 27 17:01:13 2026 GMT
            Not After : Jun 28 17:01:13 2026 GMT
        Subject: CN=b82d104d9588c6f1b9daa155332431ae52232ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:1c:e0:a7:e8:16:ee:f8:38:ad:0c:68:e5:
                    15:2c:9a:93:0b:0a:b0:8e:e9:c5:33:36:46:08:de:
                    56:26:1e:b1:90:11:b6:1b:97:11:e5:62:5a:3a:89:
                    cd:c6:ad:82:4a:bf:a0:a9:b1:95:58:a4:b2:5a:d4:
                    b2:68:23:f6:6f:a7:a7:b2:f9:93:4c:0a:03:93:80:
                    af:18:77:6f:ab:4e:88:06:25:ae:07:34:1a:f0:61:
                    94:8b:e4:54:97:0d:a3:3b:27:bf:6f:af:69:98:fd:
                    1f:29:44:ff:b1:4f:ef:b6:d0:d8:d0:4a:1f:cc:bc:
                    f1:ae:20:8f:92:08:9a:ce:36:7c:56:a7:48:30:66:
                    9b:7c:e6:84:ad:69:00:64:19:d2:c7:a3:65:67:02:
                    43:73:b7:d9:46:b8:b5:2d:34:e1:73:6c:a9:8a:3b:
                    4a:ae:fb:5e:d6:8c:7e:a4:88:fd:78:9b:af:62:29:
                    75:b6:3f:4d:49:bb:8b:f4:34:6e:0a:be:22:4b:1e:
                    20:a8:f7:b7:0b:c1:d0:bd:38:81:50:81:d2:8d:ea:
                    52:47:71:04:d2:9b:7c:ab:09:db:01:f6:21:3f:8a:
                    5d:a6:df:c3:cf:6d:d9:3f:8f:2f:5f:3b:93:13:45:
                    d4:7e:67:c8:48:2e:03:18:e5:5e:ad:64:dd:0b:94:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2D:10:4D:95:88:C6:F1:B9:DA:A1:55:33:24:31:AE:52:23:2E:F1
            X509v3 Authority Key Identifier:
                keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:16:d9:df:af:d3:5f:b5:b9:76:c4:79:b8:52:56:07:63:
         08:0f:a8:4c:aa:95:2d:f4:b7:19:02:21:a1:9f:2b:84:ff:32:
         16:70:a4:9a:c1:f0:57:60:20:6c:c6:31:c6:79:66:9c:3a:64:
         0c:33:89:80:ab:ea:f0:bc:ea:77:13:db:93:d4:45:30:96:71:
         88:4b:96:1f:a7:5b:c9:6c:29:68:bd:1d:51:e7:dc:3d:4e:79:
         8e:1b:69:40:54:d0:1d:55:d8:c9:a4:8b:c2:18:cb:34:1b:73:
         f1:3b:78:be:02:50:57:7d:bb:66:83:7e:c5:4e:26:15:5a:fa:
         91:24:ca:73:2d:fd:e8:58:e7:56:53:3d:ea:59:58:8f:fc:80:
         db:99:c9:74:10:f3:fc:54:bc:16:5b:49:e6:90:b2:cb:5a:db:
         86:d9:ee:6c:c6:10:e7:f2:29:2c:2c:7a:f5:0d:80:66:86:8d:
         63:3a:25:25:94:cd:b8:4c:b6:aa:ff:cb:47:5f:13:28:fc:dc:
         13:25:12:47:50:98:72:e8:6a:bf:6e:c9:d8:3e:8b:19:e6:00:
         5e:32:1a:f8:b8:5b:7e:fe:70:3b:8a:05:cf:bc:06:67:a8:29:
         c8:05:6b:72:05:d2:ed:5f:c0:9e:79:ab:04:2e:73:0b:51:d2:
         65:a9:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:08:38 2026 by rpki-client