Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          BKbYRoilCD0QDgOcogn3vwOjTY6JyrnOo4cSg8wOPx4=
Subject key identifier:   06:EF:C8:B4:02:69:6B:BA:D9:F3:F7:CF:C2:A3:82:A5:D6:2A:6A:24
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       019EB845BAE6EE88D482C824F0A6A7A6FE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          07D2
Signing time:             Thu 11 Jun 2026 20:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:38 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: azzcpd7cEGumdJzlw1amKgu0lOe7pigrwXVg5n1VKC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:ba:e6:ee:88:d4:82:c8:24:f0:a6:a7:a6:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Jun 11 20:00:38 2026 GMT
            Not After : Jun 12 20:00:38 2026 GMT
        Subject: CN=06efc8b402696bbad9f3f7cfc2a382a5d62a6a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:91:d9:f6:d7:53:00:f5:53:af:ed:e3:30:
                    0a:cf:1c:72:7c:b9:53:c4:64:c1:03:6a:13:92:7f:
                    46:8e:60:09:dc:3a:9b:d2:cc:82:1d:6d:a9:29:c8:
                    df:6a:d6:d4:2a:aa:ba:43:35:1c:e9:e5:a3:c1:28:
                    2f:a7:b3:8e:78:d2:29:1d:c1:c9:5c:ab:e9:4f:98:
                    90:ce:2c:ad:4b:f9:35:4c:ea:eb:d1:9a:3a:3f:72:
                    85:0b:23:81:45:1c:77:64:03:15:f1:9b:46:e5:23:
                    76:e6:58:aa:0e:b7:19:10:bd:e0:88:f0:54:cc:44:
                    31:06:79:e4:3b:15:ee:0a:a0:10:ad:95:dd:cf:28:
                    e8:97:ec:fb:91:30:a7:3c:cf:e4:55:70:8c:c0:85:
                    1a:97:01:ef:4f:ff:8d:ef:f7:3f:76:e1:02:7c:d5:
                    7b:d0:28:04:10:9f:41:69:3a:a3:3a:d3:c1:2b:11:
                    55:d0:36:e0:f1:7e:70:d0:73:ba:41:dd:31:fa:96:
                    bd:a0:d1:bb:95:07:b1:87:01:ec:33:76:f6:d8:c1:
                    93:14:7b:19:30:42:dc:43:39:99:c6:45:d2:12:fa:
                    fa:e2:2f:0e:fb:0e:90:9a:5f:2b:5e:e9:26:f7:ba:
                    f2:33:fd:6f:1a:08:85:84:32:bc:bc:e1:9b:99:b5:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:C8:B4:02:69:6B:BA:D9:F3:F7:CF:C2:A3:82:A5:D6:2A:6A:24
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:0a:e8:74:f0:04:ef:25:c6:4b:29:64:78:f4:a7:6f:cb:
         c7:2f:87:f2:ba:ed:62:16:64:96:74:a7:13:b1:52:56:49:30:
         ee:61:7d:99:ed:17:e1:74:29:94:15:e8:93:f0:be:b6:50:63:
         83:87:8b:5f:2d:04:d0:f8:55:ba:c0:54:2c:07:d8:6d:69:9a:
         6f:ef:1b:f0:aa:84:44:e4:f5:96:a3:86:66:b5:71:fd:ec:15:
         a4:cf:2f:7a:e0:8e:ca:63:f1:3f:34:51:18:49:dc:91:85:42:
         0e:75:6e:62:c6:25:4c:eb:07:90:ef:1c:71:d5:69:02:7e:f1:
         a0:b3:0c:ed:49:f1:11:6c:40:c1:ca:95:90:e0:62:88:d5:aa:
         e2:b8:5e:cf:d7:25:6f:3d:6b:b8:86:9c:0d:e9:64:2b:ae:7d:
         6d:6e:a2:fe:64:75:46:3a:79:54:49:c2:6c:96:44:fc:0b:e5:
         2e:f3:09:a9:41:9c:75:a6:de:9b:26:63:20:92:cd:8d:c7:87:
         e9:0c:06:2d:08:ba:e8:ce:15:ea:9a:f9:d8:2f:e3:da:c5:68:
         ab:09:1f:3c:89:73:bc:d2:49:39:21:a9:e4:69:ae:17:db:e6:
         a5:6b:fb:56:4e:7c:7b:b5:9e:cc:42:93:55:fd:8d:4f:3b:22:
         41:7e:03:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Rbrm7ojUgsgk8Kanpv4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDcxNWRiODgwNDI1NDRlMzg5MzE5YjVlZGMyOWQwZTE1
NmM1YmUwHhcNMjYwNjExMjAwMDM4WhcNMjYwNjEyMjAwMDM4WjAzMTEwLwYDVQQD
EygwNmVmYzhiNDAyNjk2YmJhZDlmM2Y3Y2ZjMmEzODJhNWQ2MmE2YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwWR2fbXUwD1U6/t4zAKzxxyfLlT
xGTBA2oTkn9GjmAJ3Dqb0syCHW2pKcjfatbUKqq6QzUc6eWjwSgvp7OOeNIpHcHJ
XKvpT5iQziytS/k1TOrr0Zo6P3KFCyOBRRx3ZAMV8ZtG5SN25liqDrcZEL3giPBU
zEQxBnnkOxXuCqAQrZXdzyjol+z7kTCnPM/kVXCMwIUalwHvT/+N7/c/duECfNV7
0CgEEJ9BaTqjOtPBKxFV0Dbg8X5w0HO6Qd0x+pa9oNG7lQexhwHsM3b22MGTFHsZ
MELcQzmZxkXSEvr64i8O+w6Qml8rXukm97ryM/1vGgiFhDK8vOGbmbWuswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbvyLQCaWu62fP3z8KjgqXWKmokMB8GA1UdIwQY
MBaAFEsHFduIBCVE44kxm17cKdDhVsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzkt
YmIzZDk5Yjk4YTllLzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzktYmIzZDk5Yjk4YTll
LzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCMK6HTw
BO8lxkspZHj0p2/Lxy+H8rrtYhZklnSnE7FSVkkw7mF9me0X4XQplBXok/C+tlBj
g4eLXy0E0PhVusBULAfYbWmab+8b8KqEROT1lqOGZrVx/ewVpM8veuCOymPxPzRR
GEnckYVCDnVuYsYlTOsHkO8ccdVpAn7xoLMM7UnxEWxAwcqVkOBiiNWq4rhez9cl
bz1ruIacDelkK659bW6i/mR1Rjp5VEnCbJZE/AvlLvMJqUGcdabemyZjIJLNjceH
6QwGLQi66M4V6pr52C/j2sVoqwkfPIlzvNJJOSGp5GmuF9vmpWv7Vk58e7WezEKT
Vf2NTzsiQX4Dkw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:52:18 2026 by rpki-client