Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft
File:                     SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft (raw, json)
Hash identifier:          oag8REhubZnBY8pG0FxB3PlnJaGGx4oP+vDeLpnezTA=
Subject key identifier:   AF:E4:0B:5D:8D:1B:69:85:D3:D9:CC:A4:C0:DC:60:C1:69:F5:FE:FE
Authority key identifier: 49:66:0A:42:AB:A4:AD:13:01:BD:C9:D9:99:7F:03:92:AB:D3:D5:37
Certificate issuer:       /CN=49660a42aba4ad1301bdc9d9997f0392abd3d537
Certificate serial:       01A12B7B44F72B75ECA777B606983466FE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft
Manifest number:          1D
Signing time:             Sun 11 Oct 2026 15:01:01 +0000
Manifest this update:     Sun 11 Oct 2026 15:01:01 +0000
Manifest next update:     Mon 12 Oct 2026 15:01:01 +0000
Files and hashes:         1: PR4cjb7TwCF3nvoaUAKE6vLnzmo.roa (hash: onmK2uhZ6VucoMgY3R+P36xwuJrneHeLV1QrP56N3nI=)
                          2: SWYKQqukrRMBvcnZmX8DkqvT1Tc.crl (hash: 3CQnpMHztGt6UR0mwb2k4IhfZRBsdLrYZm8TEsTqsvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:44:f7:2b:75:ec:a7:77:b6:06:98:34:66:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49660a42aba4ad1301bdc9d9997f0392abd3d537
        Validity
            Not Before: Oct 11 15:01:01 2026 GMT
            Not After : Oct 12 15:01:01 2026 GMT
        Subject: CN=afe40b5d8d1b6985d3d9cca4c0dc60c169f5fefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:8e:bf:da:25:9e:a2:50:25:ba:59:31:3a:
                    54:02:51:4f:bc:6b:11:4e:6a:6b:d6:f5:4b:db:2e:
                    2e:4f:65:31:fc:9e:a0:f3:90:18:32:5a:9a:2f:58:
                    a5:9a:70:f0:d7:69:d7:bf:96:af:96:bc:f4:b1:6f:
                    52:3f:43:89:1f:4d:12:21:bb:c4:aa:57:6a:fe:3b:
                    1e:5d:bf:3e:bb:9c:0c:3f:2d:8a:96:74:6e:dd:58:
                    1f:b1:a4:1b:2e:44:9e:22:a6:82:82:e0:9c:65:67:
                    a5:8f:93:62:f8:ac:4d:88:e9:9c:d9:a5:83:fe:21:
                    07:db:7d:56:35:4a:29:52:69:81:7e:4a:c0:56:84:
                    31:97:2d:e8:0e:d4:32:da:30:f7:2c:3e:b8:25:a0:
                    e5:50:c3:11:cc:ed:e8:9f:c6:fc:31:f8:ac:5c:41:
                    1c:3d:b9:66:17:8b:d4:36:4e:ee:47:08:ab:af:92:
                    e1:bc:70:ff:7a:ec:d0:f4:ee:35:d9:c9:a3:d6:af:
                    e1:b4:82:ac:01:a5:b3:87:11:c5:a2:76:c3:6b:75:
                    3c:c6:fd:cf:62:28:4d:d1:34:c1:91:6f:b2:18:2d:
                    1e:00:be:f1:22:04:5d:1f:9d:e5:54:a3:ae:91:45:
                    77:4a:0d:67:80:d1:96:93:09:6e:3f:ce:97:af:58:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:0B:5D:8D:1B:69:85:D3:D9:CC:A4:C0:DC:60:C1:69:F5:FE:FE
            X509v3 Authority Key Identifier:
                keyid:49:66:0A:42:AB:A4:AD:13:01:BD:C9:D9:99:7F:03:92:AB:D3:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:37:99:58:04:c1:6c:33:95:fb:b3:f0:9f:42:5a:30:f3:06:
         00:b3:2b:01:79:46:ed:bd:90:7e:d6:81:2a:bf:ab:a1:64:6e:
         9d:09:a1:99:87:63:3b:6a:da:d9:d2:a8:b2:59:80:d7:ab:53:
         33:f3:fe:9e:0f:c2:af:5e:25:4f:e6:02:ee:ad:f9:2a:15:19:
         ed:45:e5:17:2a:c8:18:d6:3e:50:a7:3c:00:38:ce:c7:21:80:
         9b:5e:8c:d6:cc:b3:ec:6a:03:b2:73:81:c2:2d:a9:02:00:e1:
         0f:a9:e2:26:d7:b9:ae:63:fd:b8:55:04:d8:4b:31:d1:d2:df:
         d7:10:dd:9b:67:4e:a4:38:7f:09:be:db:92:40:2c:d2:82:fc:
         52:08:05:74:d1:ab:c9:f8:ea:35:a3:5e:31:e1:7f:77:87:00:
         af:8f:81:75:a8:51:60:d0:0f:40:30:b8:0b:cc:26:d9:e0:44:
         7c:77:19:66:46:5a:48:73:ee:38:d1:47:08:ad:7d:62:af:54:
         a6:f7:bf:68:49:b8:a7:3b:46:ca:43:44:ef:a1:59:69:08:4d:
         85:9c:1a:25:04:1f:94:e3:3d:8a:32:10:1d:49:d0:fa:c8:14:
         a0:f3:bf:98:f3:cf:ad:f2:cf:69:6b:a3:19:b5:4c:9d:77:90:
         69:65:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:43 2026 by rpki-client