Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          FiF6QtaITjEw4PLszVkG7WZykUpt40IN7n00fhXq7RQ=
Subject key identifier:   FB:07:C4:85:F7:93:15:A7:AA:90:53:C6:02:AD:BC:BC:EF:D9:14:21
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       019EB7A0E9CBBA0862EBABD203AAFC338586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 17:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:36 +0000
Files and hashes:         1: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: C8CN0WZ8fUIwsN24vAWC3J4g8hsr2X7USCLEmHuszVE=)
                          2: vj_1jofrGODDjfKXShYV7qRv8ZI.roa (hash: 5aSTepYVctMlEXvufzWOc12f0s+jwPXsm+O0hYqWeCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:e9:cb:ba:08:62:eb:ab:d2:03:aa:fc:33:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Jun 11 17:00:36 2026 GMT
            Not After : Jun 12 17:00:36 2026 GMT
        Subject: CN=fb07c485f79315a7aa9053c602adbcbcefd91421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:3b:9b:99:77:4b:99:3c:31:4c:3e:e5:bc:
                    06:8a:5c:e4:94:8f:b9:f3:3d:db:0e:67:5e:c4:da:
                    f0:d0:a2:6b:34:9c:87:5e:c0:96:25:b2:69:bf:af:
                    5b:78:42:a2:0a:5a:b4:e9:dd:07:93:ee:c6:80:88:
                    b1:d4:7c:53:e1:da:37:59:3a:27:42:3f:10:30:24:
                    d1:29:3d:5f:91:0b:b6:01:fc:e8:ee:ee:bb:e9:0e:
                    2b:7e:56:e3:1e:19:70:e9:14:5a:fe:a8:be:a1:7d:
                    8e:7d:de:53:4a:26:ed:d8:01:36:55:85:d4:05:bb:
                    81:f7:4b:bf:35:fd:b0:1f:9d:cc:d9:81:e6:83:4a:
                    5a:16:80:dd:ca:4f:81:7c:ef:cd:7d:23:fd:21:d7:
                    9e:33:f8:c2:83:de:65:4a:cb:f4:b3:76:37:66:aa:
                    4f:27:36:82:c1:07:9a:8f:6c:08:61:ff:07:a5:5c:
                    14:e3:19:04:12:f2:da:01:56:69:22:ec:d7:75:67:
                    2d:d6:e3:31:d5:13:cc:86:5b:6b:5f:d8:86:a1:9b:
                    f8:0a:4d:3b:15:fc:8e:4d:81:53:f2:ea:50:f6:b6:
                    01:56:3f:7e:a1:bb:45:ea:83:fd:80:e6:9a:8a:5d:
                    98:16:29:e7:9a:2d:42:64:17:fb:b5:8b:67:df:cb:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:C4:85:F7:93:15:A7:AA:90:53:C6:02:AD:BC:BC:EF:D9:14:21
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:08:9d:14:3e:dc:7a:6a:a2:28:72:15:c6:61:3d:b6:a0:
         ee:10:e7:de:fe:6b:32:4e:4b:94:45:0e:7f:33:61:23:cf:ca:
         d2:4d:b0:80:ed:9e:93:71:df:12:0e:9f:fa:aa:f1:84:79:35:
         cd:f4:6f:30:82:cf:8f:9a:c0:11:6b:d0:df:5c:b0:86:ba:82:
         7d:6e:7c:df:88:86:bd:fb:f7:b0:92:f8:04:55:71:9f:ab:52:
         12:d3:87:2e:d5:14:6d:16:c9:09:29:29:16:a0:29:c2:a3:fd:
         4e:91:a0:d0:11:6f:0f:67:54:d1:56:9b:1f:e2:9f:01:76:fd:
         da:4f:62:2d:4f:25:1d:0e:96:5f:91:80:a0:60:65:ac:72:28:
         5b:81:ae:e0:5d:e0:a7:44:d1:6e:b8:4c:6d:9d:55:d5:ab:6f:
         5c:0d:3e:d5:d8:e8:fc:44:3a:b9:ae:b7:0e:b1:f5:cd:e1:c3:
         45:5a:3f:4b:76:3f:e0:ed:86:f9:21:8d:21:a5:44:35:fb:79:
         53:44:c7:2b:a7:ea:cb:5f:9c:7f:73:8a:23:fb:6b:ba:8a:fe:
         cd:43:5a:60:da:1a:ea:17:ec:38:0c:18:0e:71:0a:a2:b8:1b:
         cc:cd:9d:b9:f0:4f:21:b8:af:fd:d6:e1:33:e2:e3:c2:5a:aa:
         a1:a9:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:38 2026 by rpki-client