Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
File:                     SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json)
Hash identifier:          V7zW84WXWGRYZUPc79gsB8+Vh3jR/R+JJuNKylKilwk=
Subject key identifier:   B1:6B:DD:0C:2F:6E:52:8F:70:9F:25:4C:BF:C5:40:7E:D0:A8:46:48
Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C
Certificate issuer:       /CN=4b0184a262b3509e1aba61a90becab32b002554c
Certificate serial:       0198D6617A253C6E15B8140B0587BCCDE9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
Manifest number:          15D9
Signing time:             Sat 23 Aug 2025 10:02:49 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:49 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:49 +0000
Files and hashes:         1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: /0hmqGDMYk15UR1atZTq/Of22fP8HcGoyKDWnWVQKzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:7a:25:3c:6e:15:b8:14:0b:05:87:bc:cd:e9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c
        Validity
            Not Before: Aug 23 10:02:49 2025 GMT
            Not After : Aug 24 10:02:49 2025 GMT
        Subject: CN=b16bdd0c2f6e528f709f254cbfc5407ed0a84648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:ea:71:d8:72:c0:46:9c:18:ef:b4:e0:6b:
                    dc:cb:8f:e7:cf:ae:72:ce:f6:b4:31:5a:d6:f0:4d:
                    fc:7a:c0:d2:77:ee:f9:8f:4f:84:5d:45:7d:c7:21:
                    cf:71:cb:37:6a:1b:30:b8:67:47:52:30:89:5d:09:
                    38:2a:d7:61:d6:6b:9d:38:53:89:a7:71:47:1e:bf:
                    cf:1f:f5:f8:25:c7:ad:46:c9:08:87:3a:69:5e:15:
                    1f:42:0f:8e:20:9b:09:5c:ad:99:7c:46:a8:28:e1:
                    21:41:e5:1f:01:09:c3:a6:ad:28:53:3f:c5:38:87:
                    f5:0f:6b:41:d2:86:50:8c:e5:d0:03:7e:9c:5e:85:
                    57:42:69:2d:f0:8e:8b:bb:f4:26:d2:8e:4d:38:33:
                    5c:e1:37:cf:7d:2a:67:cc:5d:e8:79:29:d8:d5:e4:
                    8e:81:fd:0f:01:28:59:6e:fb:ff:1f:d6:78:06:8b:
                    76:ec:ee:0e:6d:9e:20:67:2b:42:94:61:1b:0a:53:
                    cd:28:e6:4a:9d:5c:62:cf:ea:c9:5f:3b:91:6d:65:
                    81:de:b5:ba:e6:f4:e0:91:59:03:4d:05:ff:c1:4e:
                    9f:03:22:65:a5:6c:25:10:68:0a:fb:6d:30:60:51:
                    ee:7d:7d:1e:49:15:4e:ed:0a:f1:77:0d:4a:22:30:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:DD:0C:2F:6E:52:8F:70:9F:25:4C:BF:C5:40:7E:D0:A8:46:48
            X509v3 Authority Key Identifier:
                keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:d0:54:5f:71:ca:17:29:b7:33:d1:ef:32:79:65:14:d2:
         c4:7d:ca:73:27:5d:96:71:24:c7:cb:8d:79:98:10:41:da:82:
         e7:4f:eb:a5:24:63:2a:41:59:a1:c4:26:79:b6:f5:dc:01:61:
         d4:32:8b:69:d4:70:6b:d8:6d:2b:f4:bc:85:74:d0:fd:b4:67:
         8e:e4:3f:86:22:dd:f1:56:d8:03:04:81:9c:ff:64:f6:e2:4e:
         e0:f8:45:04:07:da:00:72:16:84:a2:3f:0c:f9:12:e1:d1:83:
         7d:f0:1f:84:b7:6c:cf:65:e2:9e:1c:84:e0:3e:a3:52:58:47:
         1c:d4:d9:a1:57:7e:ea:2e:04:cd:65:8a:84:fb:70:77:85:a1:
         ae:92:45:39:c5:44:af:9f:9f:8d:6f:20:f5:35:a3:ab:08:da:
         cb:a6:8d:bc:e8:db:e3:6b:bd:8a:5a:3a:9d:79:75:da:49:a7:
         07:48:b6:35:b7:be:3e:f2:42:83:ab:7f:b8:7b:99:b6:f3:d0:
         90:73:c8:9d:00:6e:c4:dc:5b:c2:81:d5:d9:dc:b6:98:a6:94:
         a9:2e:4e:a6:ad:c0:f6:ab:77:a4:0b:65:9f:1f:4a:b5:97:5c:
         44:fa:15:0d:3c:e0:bc:55:07:0d:dc:0b:92:99:84:21:ce:05:
         a6:c7:16:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYXolPG4VuBQLBYe8zennMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDE4NGEyNjJiMzUwOWUxYWJhNjFhOTBiZWNhYjMyYjAw
MjU1NGMwHhcNMjUwODIzMTAwMjQ5WhcNMjUwODI0MTAwMjQ5WjAzMTEwLwYDVQQD
EyhiMTZiZGQwYzJmNmU1MjhmNzA5ZjI1NGNiZmM1NDA3ZWQwYTg0NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhnqcdhywEacGO+04Gvcy4/nz65y
zva0MVrW8E38esDSd+75j0+EXUV9xyHPccs3ahswuGdHUjCJXQk4Ktdh1mudOFOJ
p3FHHr/PH/X4JcetRskIhzppXhUfQg+OIJsJXK2ZfEaoKOEhQeUfAQnDpq0oUz/F
OIf1D2tB0oZQjOXQA36cXoVXQmkt8I6Lu/Qm0o5NODNc4TfPfSpnzF3oeSnY1eSO
gf0PAShZbvv/H9Z4Bot27O4ObZ4gZytClGEbClPNKOZKnVxiz+rJXzuRbWWB3rW6
5vTgkVkDTQX/wU6fAyJlpWwlEGgK+20wYFHufX0eSRVO7Qrxdw1KIjC8vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFr3QwvblKPcJ8lTL/FQH7QqEZIMB8GA1UdIwQY
MBaAFEsBhKJis1CeGrphqQvsqzKwAlVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjIt
ZTM1YWZhMzZhNDI4LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjItZTM1YWZhMzZhNDI4
LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRrQVF9x
yhcptzPR7zJ5ZRTSxH3KcyddlnEkx8uNeZgQQdqC50/rpSRjKkFZocQmebb13AFh
1DKLadRwa9htK/S8hXTQ/bRnjuQ/hiLd8VbYAwSBnP9k9uJO4PhFBAfaAHIWhKI/
DPkS4dGDffAfhLdsz2XinhyE4D6jUlhHHNTZoVd+6i4EzWWKhPtwd4WhrpJFOcVE
r5+fjW8g9TWjqwjay6aNvOjb42u9ilo6nXl12kmnB0i2Nbe+PvJCg6t/uHuZtvPQ
kHPInQBuxNxbwoHV2dy2mKaUqS5Opq3A9qt3pAtlnx9KtZdcRPoVDTzgvFUHDdwL
kpmEIc4FpscWeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:50 2025 by rpki-client