Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
File:                     swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json)
Hash identifier:          cSLD/hGvZHB+1kPoYhTWvbkF8lKsSyffZfZ/2BppCGA=
Subject key identifier:   46:9B:84:BF:A4:3A:31:52:C2:F0:73:B7:4B:03:B4:D8:DE:3A:53:61
Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
Certificate issuer:       /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Certificate serial:       01A187BFDB24EE3C97BB7B0B610B08D1E4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
Manifest number:          0442
Signing time:             Thu 29 Oct 2026 13:00:59 +0000
Manifest this update:     Thu 29 Oct 2026 13:00:59 +0000
Manifest next update:     Fri 30 Oct 2026 13:00:59 +0000
Files and hashes:         1: XKDk2rZm147y9FDRHut6I-mUpng.asa (hash: HVEtQIn453IASpjwjYyr9u3FMfLBPM6fQKPVmHUJlwQ=)
                          2: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: 24uQz7gmQJurwfFbxDsdQ2TDRQKbuBxtMSdy5s8ITkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:bf:db:24:ee:3c:97:bb:7b:0b:61:0b:08:d1:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
        Validity
            Not Before: Oct 29 13:00:59 2026 GMT
            Not After : Oct 30 13:00:59 2026 GMT
        Subject: CN=469b84bfa43a3152c2f073b74b03b4d8de3a5361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:55:aa:ae:11:a2:17:60:32:8f:70:49:40:
                    80:ed:8a:48:c1:b6:92:d0:ab:81:2a:6b:4e:a0:19:
                    0c:1d:e7:60:e8:76:f6:75:83:03:01:8b:f1:d6:4b:
                    bf:4c:ba:d3:15:d7:e6:34:7d:20:bf:6a:c3:7c:43:
                    8a:a1:83:46:6c:de:94:1c:d5:84:71:47:6e:ce:d8:
                    19:0e:b8:a9:1f:37:4a:8c:1c:8e:6c:3a:11:d3:96:
                    c4:23:bd:1f:7a:eb:56:a6:ce:55:3d:c4:87:7c:a3:
                    cc:84:85:e5:53:a9:c6:43:1f:fa:3d:cb:c2:18:5a:
                    1e:dc:7a:12:d7:8b:41:d6:90:31:5e:df:9a:66:d3:
                    e5:a2:b6:61:92:fb:5a:39:80:8c:5e:f0:b6:93:12:
                    b5:27:3a:16:4a:74:18:e0:8d:1e:8b:bc:cb:c3:a9:
                    97:08:2d:fc:68:9c:fe:32:2e:e1:15:86:b8:cf:b1:
                    39:55:64:72:23:0b:fb:74:36:56:9d:ba:2a:a6:c9:
                    2b:aa:55:6c:cf:48:49:89:8f:f3:37:59:f9:63:1e:
                    00:78:a6:70:e2:1d:e9:6f:01:f7:13:d6:22:93:1f:
                    23:60:8c:08:15:bc:6d:e1:0a:32:bb:de:22:60:c3:
                    af:e1:b6:7d:92:c7:2f:2b:b3:6a:b6:0e:e5:20:7e:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:84:BF:A4:3A:31:52:C2:F0:73:B7:4B:03:B4:D8:DE:3A:53:61
            X509v3 Authority Key Identifier:
                keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:09:fd:3d:b7:f2:c7:5d:1d:70:22:df:25:95:68:ed:42:
         8f:bb:4a:d4:cd:7b:fb:20:d6:a9:05:fd:e0:8d:20:27:0e:f9:
         c2:85:ee:99:23:6d:de:78:aa:52:1b:e5:7d:33:73:a2:cd:ad:
         6c:e4:90:a7:c9:f9:89:44:f1:6a:15:34:26:c0:0c:78:ea:4c:
         e1:8c:51:72:ab:72:63:1a:8a:78:e0:fa:6d:76:8f:6d:e4:04:
         08:4f:2e:9c:a4:08:eb:10:77:2b:e7:8c:cd:9a:de:9d:a0:a4:
         f7:64:e2:30:ab:04:c5:23:85:4b:c5:39:39:5f:d8:49:30:d2:
         af:7b:91:70:03:3b:af:d9:8b:43:b4:d7:78:27:c2:c6:9c:d3:
         67:39:e8:28:79:94:0e:06:3c:d1:ad:e4:ec:f9:73:60:78:3b:
         ae:e9:f5:22:81:39:dc:4a:07:5a:49:8c:80:fa:b7:81:31:68:
         98:8b:f7:7b:5c:43:b7:fe:a7:5a:56:c7:b0:54:a1:ef:e3:8c:
         8b:18:99:13:d6:1e:89:d7:86:e0:b4:e3:54:f4:f2:f9:d1:e5:
         71:f3:93:5b:8f:94:a4:9a:63:a6:ae:05:21:01:ae:1d:9f:63:
         0e:0d:5f:ba:47:b9:9c:26:0d:0e:69:16:b0:b7:c7:cb:fb:36:
         ae:9f:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:45 2026 by rpki-client