Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          9BudDUgD4DCzEPmdhJaO1/cmzD1LI1BszImA1vtds5o=
Subject key identifier:   C6:26:D9:39:57:FA:62:24:CC:3D:EF:02:2E:9E:39:F9:8C:7A:41:FE
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       0197B8212882BB1E8EA761E6406BAE5BEE7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          0432
Signing time:             Sat 28 Jun 2025 20:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:10 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: P1qrHEBROaHI1UvEKSKaZf0wXd5KOwtVUcu4GgLO/7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:28:82:bb:1e:8e:a7:61:e6:40:6b:ae:5b:ee:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Jun 28 20:01:10 2025 GMT
            Not After : Jun 29 20:01:10 2025 GMT
        Subject: CN=c626d93957fa6224cc3def022e9e39f98c7a41fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:cd:d1:18:54:19:99:19:cc:0f:42:f2:28:
                    72:7c:80:1c:b6:d3:9e:db:33:99:7c:9c:38:65:b4:
                    8b:eb:5f:a2:dc:43:fe:13:5e:8b:62:46:af:9f:da:
                    c4:c8:3c:53:1d:62:58:15:4c:17:38:79:b6:07:84:
                    c8:c9:07:cd:e6:bc:e1:b0:ff:6a:6e:be:35:99:c5:
                    af:16:45:c9:4b:27:29:bc:6f:6f:46:cc:4d:bf:f8:
                    af:10:bb:b8:f3:04:f4:2e:52:65:27:36:3f:1a:5b:
                    b5:b5:89:3d:23:07:30:7c:7f:0a:72:ee:e0:da:e5:
                    29:0a:41:81:93:6d:35:ea:69:80:0f:e0:bf:ac:7e:
                    57:1f:86:6f:23:4e:e8:82:14:d5:d1:b4:96:b4:da:
                    80:4c:1b:c5:74:e9:c5:44:7a:80:88:f1:fe:79:d0:
                    90:e9:46:2a:0e:ac:1f:2d:67:11:9c:52:b2:ff:10:
                    32:30:85:62:41:b0:e7:6f:db:d9:2d:12:04:ff:44:
                    e1:f5:dc:97:83:3c:48:80:e9:5d:4d:31:68:81:4d:
                    27:1e:f9:6c:41:f3:75:48:73:dc:82:f1:dc:ea:48:
                    6f:b4:74:42:3d:d3:52:08:3b:f5:ad:d3:72:9d:a3:
                    1d:01:04:7f:69:fa:1a:da:cd:66:c3:dd:83:50:85:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:26:D9:39:57:FA:62:24:CC:3D:EF:02:2E:9E:39:F9:8C:7A:41:FE
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:a1:f7:c6:53:3d:7f:11:a4:29:c2:d2:13:0f:f3:96:40:
         c7:f5:3c:27:7a:04:2e:6b:54:a3:56:8c:af:55:f9:0d:19:3c:
         1e:ed:b6:1a:32:9c:6b:a5:56:d2:6d:81:4e:51:ee:6e:89:1d:
         20:bf:b9:7e:cd:4f:8b:53:32:f1:61:a0:73:49:8c:bd:12:ce:
         9f:9e:a5:37:cc:db:24:cd:95:75:9c:00:e7:11:85:62:6f:62:
         19:97:5b:8a:df:19:44:62:d5:8e:3d:a5:4d:bb:2f:88:59:75:
         a4:5a:dd:d5:d1:2d:42:68:8e:58:0f:5b:f2:58:e8:06:5b:85:
         c9:5b:33:60:b1:d3:ca:55:fa:34:9a:6c:be:b5:4d:40:ea:df:
         2a:18:ed:c0:2a:ba:de:ec:4f:96:34:fb:09:d2:60:52:0d:4b:
         e2:8b:f1:8a:e6:33:41:d6:52:f0:17:bd:09:70:26:9e:dd:1a:
         35:06:6e:6b:1e:fd:2e:a2:64:b1:3c:54:40:e7:4f:76:e0:cc:
         ab:45:e7:2a:34:63:fc:23:b9:35:e6:28:57:c0:94:dd:a3:5e:
         fb:f2:1c:19:04:e4:ed:4a:b2:b7:ee:1b:ed:fa:9f:f6:b6:fa:
         5b:67:ee:a6:f5:a6:83:55:fa:67:a8:79:4d:64:21:5f:7a:a6:
         60:3e:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:41 2025 by rpki-client