Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File:                     sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier:          HMU1vASb+L9ULM1vlbA7Dr8ztQ1cjqIG4kNCNYVAYcc=
Subject key identifier:   B0:AF:2B:BB:E0:2D:83:7F:5E:2B:16:A7:4B:34:66:18:AF:2D:13:63
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       019F11C0E0BE59BA8AA77B9507AB6FB44240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number:          0C65
Signing time:             Mon 29 Jun 2026 05:01:20 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:20 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:20 +0000
Files and hashes:         1: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
                          2: KFPzXGig6-JZEigfWypf4i7snd8.roa (hash: gMefxtYQn5VqlQav2iaduqr6+qO+sCBpVkf0YedD9mU=)
                          3: b00eRSDcxFDHs0mQJe5x9UBUR_o.asa (hash: +u0Wv9P2GIEvOKYbCsSWBArRrrqg7QPkXLV0YkQ+w6k=)
                          4: fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa (hash: WrsTXTFioXmfTDbLS+QXmRgF1uIdzCthLYkRozp941Y=)
                          5: kJdLwlq4tT0_ThSn8KK8MvnKNhQ.roa (hash: M0SRuXqVqr9XY+hckmT6i16Fz6tspFxGWFcOgNB9PXg=)
                          6: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: dxBg5HzT/Mo9MIokscSFqO7P+l9zxcIYs/jwkptcNlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:e0:be:59:ba:8a:a7:7b:95:07:ab:6f:b4:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: Jun 29 05:01:20 2026 GMT
            Not After : Jun 30 05:01:20 2026 GMT
        Subject: CN=b0af2bbbe02d837f5e2b16a74b346618af2d1363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:e9:df:17:49:4c:e4:00:c5:dc:77:37:d4:
                    ea:ae:da:df:36:fa:0f:08:9d:55:96:9d:49:e9:c5:
                    09:db:c3:47:9c:a8:33:b8:a6:4e:71:58:52:b5:b1:
                    55:fb:7a:59:be:cf:aa:f2:8d:7b:89:6a:60:7a:06:
                    da:10:b2:ae:ce:2f:5b:2d:c7:74:64:f7:d5:0c:86:
                    2e:be:18:98:7a:86:9b:9a:cf:39:96:d3:cd:ac:38:
                    49:24:00:0a:04:bf:d8:f2:61:ed:42:51:7c:fd:55:
                    45:97:5b:2b:fe:d9:45:11:ac:86:f6:45:3a:3a:53:
                    30:e7:35:38:fa:28:36:ca:80:0a:ee:3e:ab:6c:53:
                    65:c9:10:9b:39:7d:46:37:96:69:9b:5e:af:a1:eb:
                    19:c5:75:bd:26:50:5f:d6:74:88:61:46:05:86:f4:
                    85:44:ab:c1:18:5c:62:12:ad:47:c2:8b:d6:ed:99:
                    a1:82:9c:19:0e:3b:87:9d:26:25:03:b0:ab:95:53:
                    bb:2b:cb:46:6b:e2:b5:7b:6f:65:04:43:c5:03:48:
                    64:82:17:3b:0e:f6:93:1e:3a:07:df:3c:df:df:3e:
                    4b:27:16:8d:40:b8:75:0c:3a:d2:59:b8:58:43:20:
                    1d:28:ac:3a:1d:35:34:bb:6c:7c:6e:69:24:d5:6d:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:2B:BB:E0:2D:83:7F:5E:2B:16:A7:4B:34:66:18:AF:2D:13:63
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:5d:01:77:d1:c8:af:4b:f1:42:36:9a:de:c0:db:b1:3c:
         98:97:27:d6:73:45:9d:92:58:23:c1:dd:15:1f:7b:94:98:4e:
         c6:f9:e6:b4:5b:2c:4c:fc:d9:97:83:36:9f:34:ae:9d:8b:8d:
         08:eb:59:ba:b9:64:5d:7b:d4:57:27:7c:f8:fd:45:cc:71:e0:
         2d:94:e9:34:f3:5a:a7:15:ac:59:56:a0:d7:d6:f3:7a:b0:10:
         52:fc:34:f0:9b:71:48:78:f4:a1:02:2b:a7:97:82:9a:30:29:
         c4:64:9f:6f:58:29:13:64:c6:f0:77:4f:7e:4e:ae:8b:5d:dd:
         79:d0:68:39:35:77:62:af:23:b7:15:b6:dd:fa:8d:58:6d:ab:
         e9:fd:aa:c7:e2:6a:b2:46:98:d6:50:56:02:56:16:fe:e1:9c:
         76:f2:d5:44:a5:38:06:1c:9d:6d:e2:3a:92:94:70:eb:25:b0:
         d5:6b:25:50:c0:c3:cf:2f:dc:64:49:0d:25:ac:87:c2:f0:41:
         ab:b1:99:e4:dc:d9:6a:f4:b2:ed:fd:cf:1f:f6:35:3a:10:a0:
         eb:9d:93:b2:0a:63:0a:f8:3e:3a:fc:e3:58:92:82:e2:f1:78:
         0d:81:bd:fb:eb:61:a8:06:d1:fe:4b:c8:f5:62:0e:9e:5c:41:
         35:04:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:44 2026 by rpki-client