Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          JArE9ePPxkV28SQlw9/l2NCyPyPaJXIn+6ao2FP8JPw=
Subject key identifier:   D6:23:73:57:49:27:F4:1A:FE:CE:79:44:13:E2:3B:B0:27:0B:EC:3B
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       0199FFC7EDBC7A698DDD9D65ED9B566BD93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 04:01:56 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:56 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:56 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: 45x3beopgJgcZpwkOS8SilaqAh8z3DNDfZcb7olbVgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:ed:bc:7a:69:8d:dd:9d:65:ed:9b:56:6b:d9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Oct 20 04:01:56 2025 GMT
            Not After : Oct 21 04:01:56 2025 GMT
        Subject: CN=d62373574927f41afece794413e23bb0270bec3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:16:e3:ed:48:d2:6c:42:51:38:df:e5:54:
                    63:1f:20:2e:43:17:ee:08:30:a6:01:80:b3:2c:52:
                    b0:71:af:0f:3e:f8:7a:a0:ab:6d:0a:99:14:2f:70:
                    f5:97:45:8f:f9:1b:21:86:1e:c6:0a:2d:52:28:8e:
                    fc:75:9e:ae:c0:16:6c:2c:cb:10:66:4d:52:bd:19:
                    2f:2c:23:ce:15:d6:52:ae:e9:0c:54:80:56:57:e2:
                    70:ad:95:ca:77:31:40:9b:27:94:35:63:97:bd:8f:
                    34:d4:8e:3b:01:d7:c2:58:90:09:05:cd:3a:aa:23:
                    59:63:b1:bb:08:e5:e2:32:92:2d:bb:2e:55:e2:cf:
                    cc:1a:6f:88:26:1c:29:86:cc:fc:38:3e:95:07:ce:
                    c5:8a:3a:4c:15:c6:ad:c6:a2:00:90:e9:c7:4a:17:
                    4e:61:5c:76:53:95:1e:ec:b2:be:a6:74:b8:3e:85:
                    c8:06:35:32:26:cd:07:f0:8c:48:87:25:e5:2e:ce:
                    f8:c9:1a:a4:e9:9e:18:53:b3:a7:7d:ce:ed:2d:66:
                    1a:ef:8b:58:1f:c2:32:c7:58:7c:63:bb:74:57:fd:
                    ee:27:0a:b1:8f:a8:82:c6:d9:c5:8f:df:28:40:70:
                    3b:df:28:46:81:ff:7c:c6:84:93:2b:e6:9b:e7:72:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:23:73:57:49:27:F4:1A:FE:CE:79:44:13:E2:3B:B0:27:0B:EC:3B
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:22:f0:93:ba:f5:8d:1d:72:59:ae:01:ff:44:17:fe:f2:23:
         87:04:c9:a8:d6:98:a5:1d:fe:31:b1:f4:65:cc:83:c5:c7:0d:
         b3:7c:79:bb:d6:e6:64:7e:f2:04:70:91:e2:c0:60:6a:3e:91:
         5b:c0:64:9b:d4:05:cd:67:6a:fb:37:3d:c5:f4:a3:79:06:1d:
         40:dc:94:4d:90:6a:40:cf:d0:67:55:80:6d:15:63:1d:a4:1a:
         4a:cd:93:06:95:ca:9e:6d:6f:5c:56:00:96:5f:53:d9:ef:f6:
         99:0e:8c:ab:20:ae:41:69:73:90:8b:67:69:44:a5:67:d0:eb:
         11:d0:12:8a:60:4a:da:ca:33:66:f1:03:69:42:5d:e4:78:58:
         56:3f:3a:67:f8:57:07:15:47:15:50:f2:5e:9a:3f:ba:18:5e:
         7a:a3:7a:41:00:c3:ff:fe:84:94:2a:e8:3f:e5:00:8d:4b:29:
         29:b9:d6:62:e2:40:58:a9:39:b5:00:63:77:75:08:b7:1e:34:
         21:de:72:45:6f:12:0b:fe:06:e0:79:ec:07:ae:e6:f2:e0:c2:
         35:46:2f:95:49:9b:5d:93:ca:4f:6c:76:eb:eb:14:a5:b6:95:
         c6:5e:9f:d8:43:fa:5d:24:7f:c7:03:2c:9d:27:1a:4c:8e:60:
         8f:ea:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:38 2025 by rpki-client