Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          xrb+RWYcMhDJNOHpb4rhir1Tc03q8QZyEygRilzwRcQ=
Subject key identifier:   81:B9:D4:E5:DF:BC:C1:DF:C3:8E:C7:EE:BB:12:74:81:42:14:40:3E
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       0198D5F159F15CAE2610EDDCBD0EBBCC97E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          04C6
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: g9NXqVBBqbgFpoDVeJiMCV1xqNy03SaDlgbrvtDVDqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:59:f1:5c:ae:26:10:ed:dc:bd:0e:bb:cc:97:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=81b9d4e5dfbcc1dfc38ec7eebb1274814214403e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:0e:5d:9a:85:3d:ab:ee:23:e7:cc:92:a7:
                    9e:b6:27:98:29:eb:af:04:9f:bb:c3:ce:f6:df:f3:
                    3d:c2:99:1c:fe:d5:d1:75:8b:9f:cd:92:ea:d2:da:
                    1c:9d:d7:4d:70:c6:26:6d:e4:da:0b:47:53:c8:55:
                    1c:01:24:57:bb:22:ad:17:72:ee:d7:b2:78:42:fe:
                    8f:18:3a:a3:3c:37:56:b0:66:b4:76:36:36:9f:bd:
                    b4:42:ba:bd:92:e4:4b:16:0a:9a:8b:2b:4d:24:83:
                    3b:44:b6:67:65:0f:40:08:45:94:23:b3:67:ef:53:
                    7e:ff:a6:5d:50:a8:23:1d:86:bb:98:7f:a1:5e:31:
                    d2:b3:75:f3:45:aa:aa:4a:b7:00:46:a4:aa:d2:a0:
                    7c:60:17:c8:4f:60:3f:d1:bb:1b:28:7c:b3:e7:ee:
                    9d:80:f4:ef:a7:51:bb:90:e4:67:5b:ca:53:89:3a:
                    b3:0f:5c:9f:b1:48:08:0f:59:54:57:c8:58:ba:0c:
                    fc:72:f0:98:d8:43:9b:42:bc:be:60:bc:ed:45:5f:
                    8c:b9:59:10:42:5b:e3:ca:cd:4b:4a:2c:6d:48:c3:
                    9b:c0:d1:ac:da:43:d1:c8:8d:a9:c8:3c:e3:99:a4:
                    a0:12:d7:22:c9:32:3d:80:8b:a9:f7:97:95:cb:e0:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:D4:E5:DF:BC:C1:DF:C3:8E:C7:EE:BB:12:74:81:42:14:40:3E
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:d4:26:11:ca:71:d8:c5:0a:a8:85:f2:97:3a:14:a2:e2:
         3a:85:0f:1c:f3:9b:1c:a7:90:6b:f2:01:f7:6c:c8:d1:12:08:
         94:bb:cf:24:9c:ec:78:02:df:a9:b2:98:13:15:91:c0:b5:7c:
         6b:b2:00:c0:94:b0:4b:e0:d4:e6:b1:7d:60:a0:d0:b8:0a:87:
         36:cd:08:8a:39:ae:41:2b:4b:72:98:13:70:24:00:93:3a:cc:
         21:e7:20:8c:32:1a:76:40:7f:6e:fb:f3:e8:2a:7f:b7:2a:49:
         39:53:48:ab:fa:cc:1f:4c:0c:f2:6a:5d:2e:48:a2:65:61:f3:
         54:b6:37:f4:ed:f1:be:83:ca:99:5c:2b:f7:b8:1f:98:4b:c3:
         ee:99:44:bb:d5:eb:98:0f:fd:bb:1c:47:f7:9b:5c:b2:3b:b0:
         5f:fb:8f:9f:3f:43:6b:98:1d:30:9f:0c:ce:7a:fe:52:dd:62:
         ff:bc:90:1b:dc:ec:4c:b4:d3:73:c7:ec:3a:e1:bb:e0:61:e4:
         81:2b:69:f4:0f:f2:0a:2d:9f:ce:cd:e6:20:bd:ac:28:da:6d:
         d0:6c:ab:e8:84:1c:8b:8a:ab:3f:9b:a6:91:3d:a0:f4:6b:f9:
         a2:b0:50:6b:ed:27:50:26:f6:67:5b:39:18:1e:21:e4:3c:cb:
         ac:1e:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:54 2025 by rpki-client