Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          1ERRxact+bsl2UB7dXGVTChuqjmS++OjfKISovNPAGU=
Subject key identifier:   28:34:92:61:5F:80:72:BA:8C:C0:AD:04:4F:86:9D:E8:EF:B1:DB:50
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019FC66DDF74FFFD138F9DF64A92B5DAFBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          16E4
Signing time:             Mon 03 Aug 2026 07:01:57 +0000
Manifest this update:     Mon 03 Aug 2026 07:01:57 +0000
Manifest next update:     Tue 04 Aug 2026 07:01:57 +0000
Files and hashes:         1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=)
                          2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=)
                          3: DmISyAPsUJZUF8-fiFzrEXhy69M.roa (hash: TEVgv9r0sVnxKS36YRt3J8jYs1KrjVhAbf7djSDQraI=)
                          4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=)
                          5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: fDBc5V6z61yXGcs70hA6Idda7PBAdBrLwt6+xJQeUjM=)
                          7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:6d:df:74:ff:fd:13:8f:9d:f6:4a:92:b5:da:fb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Aug  3 07:01:57 2026 GMT
            Not After : Aug  4 07:01:57 2026 GMT
        Subject: CN=283492615f8072ba8cc0ad044f869de8efb1db50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:e5:78:88:90:96:02:ea:10:ae:1f:0a:0d:
                    78:c4:6c:eb:f3:f5:51:cd:5b:13:79:58:3f:69:02:
                    f1:ae:eb:ec:7b:55:07:43:c8:99:41:0a:64:08:9c:
                    d6:cd:b2:87:9d:0a:cb:8e:da:23:bb:01:5b:67:08:
                    14:7b:92:4d:4b:52:61:6d:3c:df:da:fe:e7:e1:de:
                    d5:f9:46:74:95:e0:5b:29:d6:5f:68:ea:16:f6:ba:
                    4c:be:fd:aa:1e:a4:7e:2c:d9:b8:3f:62:e9:95:61:
                    57:fd:b9:67:2a:f4:88:64:3a:1e:d4:9e:d5:8a:dd:
                    01:d5:8e:a3:3f:aa:5d:04:76:32:72:c4:e3:49:14:
                    c5:84:c5:71:90:a4:68:6a:e5:60:00:3d:72:af:e1:
                    ea:2b:92:f5:90:2c:01:28:15:f5:cd:81:f3:c2:a7:
                    d1:77:2d:da:26:b4:c3:ac:09:55:9b:23:aa:59:3c:
                    78:0e:2d:c9:4d:58:29:eb:2c:da:45:c4:25:40:77:
                    a6:f5:e5:02:d3:75:1d:25:66:04:a5:f7:03:be:57:
                    33:ed:32:67:4e:0c:87:b2:df:56:58:06:0a:8c:6e:
                    47:ad:d7:a8:3f:5b:cc:e6:92:f5:95:d2:b4:d0:83:
                    11:4b:09:39:bd:b1:b7:53:fc:00:27:4d:73:ab:c9:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:92:61:5F:80:72:BA:8C:C0:AD:04:4F:86:9D:E8:EF:B1:DB:50
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:50:9e:3d:7a:27:79:4a:b3:08:44:65:e9:7a:05:76:83:
         1d:8a:8a:59:5a:57:e2:42:1f:f1:65:f0:ac:c4:bb:b0:b3:42:
         ce:9c:e7:6f:32:9c:f7:de:7d:c2:66:9b:dd:78:a1:52:ad:0c:
         ec:e7:95:12:0b:bf:50:1b:14:7a:ab:63:a3:2c:af:28:27:39:
         e2:8e:ca:fa:cb:24:58:68:5e:66:db:8a:0b:38:11:57:04:e8:
         7b:68:de:5b:58:eb:99:a3:43:ce:e9:ff:c1:d4:f4:09:3f:07:
         37:06:8a:49:04:e2:8b:35:c3:39:ac:e3:f3:74:ba:32:60:a8:
         e6:c9:bf:09:6a:5c:46:04:32:b3:6c:ac:23:2a:86:f7:ca:96:
         40:ee:3d:90:27:18:91:d1:f8:e7:1c:af:4d:92:c0:dc:6a:86:
         c7:07:69:98:dc:c2:82:9b:ac:99:d2:0b:e1:cb:2a:b0:10:21:
         6a:ab:9c:56:dd:07:4f:47:80:82:c3:40:a1:70:d1:c9:3e:45:
         29:ab:04:b1:43:b7:44:57:40:66:b1:c2:2c:e5:5d:ef:0f:ca:
         a0:21:f8:cb:9a:f6:59:f0:91:39:15:19:18:12:ca:b0:be:3d:
         d3:be:c5:d7:c9:aa:07:e1:73:6b:48:a6:93:6d:df:35:2f:17:
         e9:8c:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 08:41:31 2026 by rpki-client