Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
File:                     sWpN-xkGscZ6u1SnCnbMkutIYn0.mft (raw, json)
Hash identifier:          xG5l7rfsbDpOSNS+T8HmlEoCarbEyLttIj39Fsiy+UM=
Subject key identifier:   C6:BE:C3:85:5D:5F:B9:15:EE:E1:48:D9:E9:86:C8:C5:65:0C:C8:3D
Authority key identifier: B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
Certificate issuer:       /CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Certificate serial:       019DCF077D472D2A2DB87E94BC3B82D11CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
Manifest number:          80
Signing time:             Mon 27 Apr 2026 13:01:07 +0000
Manifest this update:     Mon 27 Apr 2026 13:01:07 +0000
Manifest next update:     Tue 28 Apr 2026 13:01:07 +0000
Files and hashes:         1: IZwnZzRSW9CWWDf4DhjKDHRJ7wg.roa (hash: 7+eI0t0v9gnlOSaSNccy+qkb/ocukTrfW/YihjIV1EY=)
                          2: sWpN-xkGscZ6u1SnCnbMkutIYn0.crl (hash: T0meuPGZHVImSjjh6fd0bD7yURTLkFlz8HeHChxnZ7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:07:7d:47:2d:2a:2d:b8:7e:94:bc:3b:82:d1:1c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
        Validity
            Not Before: Apr 27 13:01:07 2026 GMT
            Not After : Apr 28 13:01:07 2026 GMT
        Subject: CN=c6bec3855d5fb915eee148d9e986c8c5650cc83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:39:94:36:43:90:9f:a9:a9:e6:c8:78:17:
                    57:1f:0d:d0:9e:23:e4:e0:1e:47:78:6c:c9:5b:28:
                    ee:79:28:4f:30:61:bd:5f:37:1b:ac:ba:b1:41:70:
                    8d:d5:db:1f:85:5d:b8:f1:b5:47:01:bd:8c:f9:36:
                    00:d6:f7:94:ec:7b:ea:17:83:91:57:96:db:ec:d8:
                    88:45:24:ba:2c:18:1a:dc:be:28:57:34:63:b6:d6:
                    da:26:d4:16:97:50:ff:14:e3:86:91:99:2a:51:18:
                    10:d0:00:39:4e:00:45:e2:9d:e7:12:36:9a:cb:76:
                    50:df:b2:36:04:a7:9f:46:53:cd:6b:ae:87:42:32:
                    90:5c:0f:2d:c3:10:f8:bc:03:93:ab:72:7a:96:02:
                    bb:22:74:ec:ac:69:69:83:65:09:3f:75:9f:de:52:
                    dd:6e:46:fc:c9:e8:59:92:be:c9:c3:1e:85:74:0b:
                    27:71:2f:85:14:36:fe:8d:b2:eb:77:2f:75:cd:ae:
                    7c:f4:33:12:0a:ae:0c:55:d8:7c:ee:eb:26:ba:d5:
                    d6:52:f3:a2:53:94:1b:d3:13:60:38:04:41:7c:76:
                    7d:fa:73:e3:dd:81:7d:0e:b1:85:0f:59:5e:ba:f9:
                    81:90:fc:8f:d8:73:8c:40:f9:52:75:74:a1:c3:83:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:C3:85:5D:5F:B9:15:EE:E1:48:D9:E9:86:C8:C5:65:0C:C8:3D
            X509v3 Authority Key Identifier:
                keyid:B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:4c:22:e4:74:ff:ee:6f:e1:1a:b4:90:39:a1:75:5c:d0:
         38:f2:d5:46:ed:b5:06:87:f8:51:21:56:56:e1:42:79:e8:c3:
         41:9c:0c:a4:04:51:87:47:dd:b7:c2:cb:ff:0d:3f:4f:39:cb:
         65:a8:a2:1d:d4:1d:20:e8:66:24:83:a5:7c:3e:8b:15:17:a0:
         c9:02:56:83:1b:e6:0d:6b:5a:2a:e5:16:6b:17:3e:79:17:8a:
         19:25:f3:f2:f7:ea:87:83:0f:2b:30:05:a4:a2:88:33:50:36:
         d4:2c:ee:61:ca:7b:ac:34:42:1b:7b:13:90:c9:06:b4:b9:b1:
         e8:e5:ff:85:01:1e:01:bc:7a:1b:be:d5:c7:51:2d:78:94:76:
         54:95:ed:86:79:17:4f:ab:53:39:43:04:32:34:55:45:e1:01:
         3d:a7:3b:c7:20:aa:1c:a6:12:1c:55:35:42:d0:ad:b6:0f:d2:
         6e:24:ed:7f:f6:94:c5:61:04:df:9b:87:67:a2:f9:4f:6a:88:
         fa:df:79:3d:2a:5d:05:30:bc:91:1f:eb:9a:7d:7f:d2:01:49:
         6d:32:03:0c:69:86:8e:00:9d:da:d0:a8:08:72:e0:bb:49:64:
         cf:bb:f6:07:3c:72:32:d2:1a:1b:49:e1:97:eb:72:3a:2a:63:
         58:fa:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:09:02 2026 by rpki-client