Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
File:                     RmSWpNugTX71InAAYXQ8bF0K5ZA.mft (raw, json)
Hash identifier:          mC1hNI2y8OpRKCxAsCE5H2PEtVM2BR1tC/nUkdG17yg=
Subject key identifier:   FD:99:EA:55:CE:B1:FD:5C:64:30:78:27:DF:2A:CE:80:4A:81:94:0E
Authority key identifier: 46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
Certificate issuer:       /CN=466496a4dba04d7ef522700061743c6c5d0ae590
Certificate serial:       019D3789A686E71CB9E6E5316B16C9BCB508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
Manifest number:          026F
Signing time:             Sun 29 Mar 2026 03:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:01 +0000
Files and hashes:         1: 3dbS8smJeXr53W5r6BKkhghgmVA.roa (hash: NwzZDsWqf9Bvz7l6x4U3TUe9LXVQFlbNiLk7V4n0q2g=)
                          2: RmSWpNugTX71InAAYXQ8bF0K5ZA.crl (hash: U1emrN97TTWqglOX9VYkm1jl3q0FcPL68ulQuSd67Ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:a6:86:e7:1c:b9:e6:e5:31:6b:16:c9:bc:b5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466496a4dba04d7ef522700061743c6c5d0ae590
        Validity
            Not Before: Mar 29 03:01:01 2026 GMT
            Not After : Mar 30 03:01:01 2026 GMT
        Subject: CN=fd99ea55ceb1fd5c64307827df2ace804a81940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:bc:66:2c:5b:4d:88:f7:68:c9:1d:f1:fb:
                    03:01:e3:cd:73:58:f1:be:23:e5:06:0d:fa:76:59:
                    18:3e:79:80:0b:0c:1b:a6:a1:20:42:4b:46:f0:0d:
                    f6:45:0a:03:fc:a0:f1:5e:3c:81:07:83:92:0e:e5:
                    b3:f2:45:e3:ee:6e:af:f4:5c:42:c5:d2:55:f7:01:
                    d1:4e:a8:14:c1:19:c2:75:8a:1a:14:4a:4f:d7:45:
                    e2:4d:a9:8f:bb:d7:39:71:2e:ee:a6:dd:66:25:20:
                    bc:3b:5d:63:8b:62:97:00:13:24:13:ee:73:70:24:
                    fd:16:48:5a:b3:85:88:2d:05:7b:01:27:c9:6b:92:
                    ed:4a:c9:9a:dc:62:99:ef:0c:92:fc:7f:90:42:a7:
                    a8:02:c1:4c:4c:d3:5a:b3:84:0b:67:f5:db:fd:9e:
                    50:53:7a:2f:2f:2e:e6:e9:5d:5f:06:da:13:cf:30:
                    78:50:e8:90:a8:b2:5a:78:6a:c0:af:99:03:de:e3:
                    52:7a:84:14:b7:2f:cb:e8:55:23:5c:16:5f:af:cc:
                    5c:1c:c8:10:75:ae:fe:11:4e:36:39:b6:35:9a:43:
                    58:69:8f:ad:81:a4:61:6e:de:6a:24:a4:85:a8:61:
                    70:a3:5a:4a:fd:83:d6:ba:c6:46:92:cc:c3:96:29:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:EA:55:CE:B1:FD:5C:64:30:78:27:DF:2A:CE:80:4A:81:94:0E
            X509v3 Authority Key Identifier:
                keyid:46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:01:33:9e:f6:2a:97:a2:48:f5:13:b2:68:4d:d0:3c:69:
         20:f3:56:cf:c4:07:a2:10:05:6b:2e:c2:dc:9f:24:93:2b:38:
         96:88:a7:f8:6b:6d:44:ce:ba:77:1b:12:0c:14:72:8f:27:c6:
         c9:a1:5f:38:5a:b9:10:1a:5a:b1:fe:c2:4f:44:48:d3:56:e7:
         b1:f6:2c:b8:f3:b0:14:5e:f9:d5:7f:02:71:e9:67:c1:f7:d5:
         17:ea:96:5a:81:63:00:30:14:e6:ae:e2:b5:4a:ba:5c:d0:58:
         ca:02:70:0d:f2:49:17:a8:c5:a0:a7:e3:ab:24:64:89:5b:86:
         68:b6:f9:9a:b4:8d:a9:b4:51:54:7d:45:09:c6:76:ca:47:54:
         f5:fa:bd:d7:53:ec:d2:9a:5c:b0:5d:b1:48:4a:32:85:61:c4:
         37:09:d3:9b:2a:f2:b3:51:2f:96:7b:2d:bc:d3:bb:de:c9:f1:
         51:da:4d:95:9f:fc:3f:c3:13:19:af:b1:5f:7c:73:6e:b0:3f:
         b7:06:ac:83:1b:cb:67:88:d3:da:58:14:83:44:10:77:23:12:
         5b:ef:80:bb:12:91:49:73:94:5d:36:41:f5:f2:79:b9:3c:60:
         c9:6c:55:2e:13:4f:81:5e:5e:09:f8:98:68:fe:95:e4:17:ae:
         0d:8c:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client