Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          GQ/r7/qS9rNOLF4ob7eHJ0vuf4ERhCXmhx5IXCMlliM=
Subject key identifier:   AC:C8:52:99:EA:4F:D7:98:75:5B:C5:0D:0C:C3:45:59:65:0E:52:36
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019FCC38FD77E9412E0B74086903AAD14B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          16E7
Signing time:             Tue 04 Aug 2026 10:01:54 +0000
Manifest this update:     Tue 04 Aug 2026 10:01:54 +0000
Manifest next update:     Wed 05 Aug 2026 10:01:54 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: DmISyAPsUJZUF8-fiFzrEXhy69M.roa (hash: TEVgv9r0sVnxKS36YRt3J8jYs1KrjVhAbf7djSDQraI=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: oWq6sbmcQhMfe6EGEZJZODXeu9sqyk5KDSCshkqSBoI=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:38:fd:77:e9:41:2e:0b:74:08:69:03:aa:d1:4b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Aug  4 10:01:54 2026 GMT
            Not After : Aug  5 10:01:54 2026 GMT
        Subject: CN=acc85299ea4fd798755bc50d0cc34559650e5236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:83:5f:a9:80:b5:77:8b:b4:1b:8a:f8:55:
                    99:82:60:64:26:f4:24:df:5b:9d:c7:c9:7f:18:0d:
                    44:e3:7b:d9:bd:8a:aa:23:2d:9f:4a:9f:f8:93:d2:
                    9e:d6:ad:1a:ab:d2:91:cc:df:77:c7:70:6e:b4:18:
                    dd:18:54:5f:ae:bb:f4:19:56:25:a7:57:56:f2:4c:
                    15:15:a7:4c:f0:dc:1b:60:7b:7f:0a:67:e1:25:b1:
                    af:0a:27:b6:84:17:ca:2a:1b:f0:aa:a8:64:c0:64:
                    e3:fa:7b:ea:67:d2:ea:8b:52:f5:a4:d6:ff:76:60:
                    24:c0:73:fc:cb:24:f5:89:98:d2:38:77:f9:7e:6e:
                    7a:50:1f:ce:0a:0a:be:49:b0:2d:63:66:d8:df:45:
                    b2:d9:4c:27:b9:93:8d:8e:16:6b:36:ef:4e:e8:36:
                    9f:6d:ea:ea:25:70:5b:70:6e:02:34:85:8e:0b:f0:
                    98:d5:81:b4:b5:62:61:ae:10:c2:e3:78:d5:9d:51:
                    4e:7d:7c:26:36:9a:f2:9f:0b:10:9d:10:69:fc:0d:
                    31:5e:3a:e1:7f:4d:69:fc:89:2e:f1:29:6c:3f:e9:
                    81:68:96:36:b1:01:cf:1d:8d:33:68:a2:1f:1f:88:
                    4b:e0:ef:9a:3d:39:72:14:dc:f9:9c:3e:4d:91:d3:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:52:99:EA:4F:D7:98:75:5B:C5:0D:0C:C3:45:59:65:0E:52:36
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:31:df:ca:df:87:24:c9:31:30:86:c9:15:45:c0:1c:97:be:
         bd:7b:fe:ba:79:51:fa:f3:52:a5:e4:8c:fe:85:13:65:97:9e:
         c8:3e:d7:d6:ed:eb:00:4a:89:67:2d:29:0e:ce:5d:0d:f7:11:
         97:fb:7f:62:6c:b4:ed:df:9a:72:eb:28:1e:3e:c8:fe:00:e9:
         54:61:81:57:8f:05:1a:b3:4f:84:04:66:7d:ae:25:84:0b:9f:
         a2:06:a5:74:f3:f4:8b:fa:b1:a9:e3:7d:91:a9:ec:64:33:00:
         24:87:4a:30:e1:e5:36:f3:d2:de:ae:91:87:b0:ba:34:be:f4:
         c2:95:6f:d5:18:2b:3e:51:24:f3:32:48:77:e0:03:01:e2:71:
         61:f1:d0:ca:18:df:17:11:7e:57:be:b8:30:15:5b:ae:8c:1d:
         d7:de:09:8f:a5:a5:9d:63:ac:37:53:66:f9:d4:1f:0b:cd:57:
         f0:20:8d:24:2b:e6:b2:fc:7c:41:2e:6d:42:5e:9b:0e:50:fd:
         7b:8c:b8:9f:74:e2:da:a4:cd:2d:be:9b:df:a5:31:a2:41:31:
         43:8c:1a:21:ce:36:b2:32:e2:53:8f:4b:40:62:cf:1f:cd:e4:
         ff:40:62:e4:bb:c6:bd:05:d9:dc:06:06:5e:42:13:a6:fa:a1:
         26:3b:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:28:03 2026 by rpki-client