Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          ZBkD8XgAecv2UUcGzRM7fFlpp/HkX0gPPAQ16kaJ6kI=
Subject key identifier:   7E:91:04:67:89:06:56:81:5E:9D:39:7E:FC:40:6E:F4:99:C1:1D:F8
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       0199FBEAB5F7635B049E7C6A8EC51B25F2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0DC7
Signing time:             Sun 19 Oct 2025 10:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:27 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: Rq/pV1uAIvWBpAn4sPV5YM5Xt6hEcYxWghISIHQDxJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b5:f7:63:5b:04:9e:7c:6a:8e:c5:1b:25:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Oct 19 10:01:27 2025 GMT
            Not After : Oct 20 10:01:27 2025 GMT
        Subject: CN=7e910467890656815e9d397efc406ef499c11df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:d7:37:13:ca:2c:17:64:10:eb:6e:36:a5:
                    18:53:db:b9:fb:21:76:cc:8e:be:9a:9c:74:4c:b9:
                    dc:98:5a:3c:c3:3e:88:9b:f3:d1:a2:a5:3e:85:b8:
                    38:98:8a:35:ca:c9:6b:e3:45:c8:e8:6a:a4:c5:5c:
                    b8:4a:cc:5d:d1:32:96:8e:68:a3:69:b8:7e:7d:46:
                    8f:cf:b1:70:80:84:4a:67:c5:df:04:44:48:72:ce:
                    13:ea:09:35:87:20:0c:d7:ef:b7:e7:d0:c6:6d:3c:
                    c5:ab:b7:b2:41:da:08:20:69:96:c2:6d:ea:03:5f:
                    0f:09:30:10:6f:6f:ce:be:14:42:66:2e:12:97:7c:
                    31:7c:8d:8f:07:91:e1:89:23:a2:0c:18:ba:cb:75:
                    82:f4:33:9d:97:d8:b3:57:2e:6d:cb:81:16:30:f4:
                    0b:d1:cd:d8:fa:f7:a4:78:c2:9e:7e:6f:38:7f:92:
                    a1:7c:21:fd:59:84:ad:44:f3:49:11:42:e6:21:5f:
                    ae:fb:cd:89:09:64:7a:aa:ec:d1:28:4c:32:cf:c7:
                    2c:0d:aa:7d:58:33:f8:39:ff:e2:c2:f3:35:b1:19:
                    df:b8:41:89:5b:2a:bc:32:0b:ae:20:30:13:6f:20:
                    19:2f:9f:93:ea:2a:f5:42:36:c7:42:e1:90:25:2f:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:04:67:89:06:56:81:5E:9D:39:7E:FC:40:6E:F4:99:C1:1D:F8
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:be:be:b6:9b:c5:59:f5:15:21:74:18:ac:e7:3e:12:3f:03:
         4c:79:f0:35:c9:41:aa:5b:6f:6a:a2:2a:38:cc:28:03:c0:f2:
         aa:06:10:52:e0:3b:64:cd:db:b5:fb:42:f1:a0:8e:6b:be:23:
         4c:cf:37:3e:0b:44:44:0b:99:35:ef:11:67:cb:08:2f:0d:8f:
         c8:b1:63:59:f3:d0:bd:cf:35:25:05:b2:88:02:bf:91:e0:e1:
         86:e6:c9:c8:10:0e:e1:20:ba:ab:c0:b8:1e:fb:c5:01:ce:1e:
         8c:0b:71:8e:a8:9c:f3:6b:74:13:5c:7b:d9:28:4c:06:b6:16:
         44:13:78:41:b4:10:00:3d:30:50:14:3c:e3:1e:8d:e6:34:dd:
         c1:33:99:eb:23:35:e3:0b:c5:6a:5e:08:1a:b5:c5:2b:b5:80:
         14:a9:20:08:3d:a0:f8:d0:dd:9b:24:70:53:a6:2c:9b:3f:37:
         91:ce:01:45:a7:6a:cb:f2:10:d3:6c:a6:40:a4:33:62:db:82:
         39:ce:3b:76:ee:84:01:45:8d:db:4c:bb:78:11:fb:68:f1:47:
         a6:58:47:75:11:dd:92:2b:17:6b:5e:2d:a0:44:80:cc:20:a7:
         fd:dc:0a:a3:6a:b9:84:6b:e8:f5:31:07:06:e4:08:f8:7f:5b:
         4d:4f:e7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rX3Y1sEnnxqjsUbJfLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmQ1ZmIwOThjNDMzMGViN2E2NTE4ZDkwMzY0MmRhMzYx
OWIwNDcwHhcNMjUxMDE5MTAwMTI3WhcNMjUxMDIwMTAwMTI3WjAzMTEwLwYDVQQD
Eyg3ZTkxMDQ2Nzg5MDY1NjgxNWU5ZDM5N2VmYzQwNmVmNDk5YzExZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMjXNxPKLBdkEOtuNqUYU9u5+yF2
zI6+mpx0TLncmFo8wz6Im/PRoqU+hbg4mIo1yslr40XI6GqkxVy4Ssxd0TKWjmij
abh+fUaPz7FwgIRKZ8XfBERIcs4T6gk1hyAM1++359DGbTzFq7eyQdoIIGmWwm3q
A18PCTAQb2/OvhRCZi4Sl3wxfI2PB5HhiSOiDBi6y3WC9DOdl9izVy5ty4EWMPQL
0c3Y+vekeMKefm84f5KhfCH9WYStRPNJEULmIV+u+82JCWR6quzRKEwyz8csDap9
WDP4Of/iwvM1sRnfuEGJWyq8MguuIDATbyAZL5+T6ir1QjbHQuGQJS+GyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6RBGeJBlaBXp05fvxAbvSZwR34MB8GA1UdIwQY
MBaAFEltX7CYxDMOt6ZRjZA2Qto2GbBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzkt
MWJmMGE4MGYwOWM0LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzktMWJmMGE4MGYwOWM0
LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr6+tpvF
WfUVIXQYrOc+Ej8DTHnwNclBqltvaqIqOMwoA8DyqgYQUuA7ZM3btftC8aCOa74j
TM83PgtERAuZNe8RZ8sILw2PyLFjWfPQvc81JQWyiAK/keDhhubJyBAO4SC6q8C4
HvvFAc4ejAtxjqic82t0E1x72ShMBrYWRBN4QbQQAD0wUBQ84x6N5jTdwTOZ6yM1
4wvFal4IGrXFK7WAFKkgCD2g+NDdmyRwU6Ysmz83kc4BRadqy/IQ02ymQKQzYtuC
Oc47du6EAUWN20y7eBH7aPFHplhHdRHdkisXa14toESAzCCn/dwKo2q5hGvo9TEH
BuQI+H9bTU/nLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:31 2025 by rpki-client