Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          jO6u+87johDrz6HaLLv9yRHIaYWBAGx8So786TvdEX8=
Subject key identifier:   2A:6F:7C:59:D7:11:92:4B:3C:A2:15:8C:4D:85:4C:61:D4:BD:BC:95
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       0199FD6B63AC7E29A5DCE499267FC142BAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          055F
Signing time:             Sun 19 Oct 2025 17:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:37 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: xqRdKndHpIW0RDzTu9tXwuNxAxTS9wsLS3oN97qsTCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:63:ac:7e:29:a5:dc:e4:99:26:7f:c1:42:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Oct 19 17:01:37 2025 GMT
            Not After : Oct 20 17:01:37 2025 GMT
        Subject: CN=2a6f7c59d711924b3ca2158c4d854c61d4bdbc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:3f:2a:48:69:50:a2:cd:a4:f3:cb:b8:df:
                    5d:69:ec:1b:aa:18:0c:07:4d:53:80:c9:56:10:59:
                    25:52:4f:eb:31:8b:fc:ed:3d:78:78:86:ef:56:e5:
                    02:10:ab:fd:5e:bb:eb:6f:2b:c8:27:42:04:53:d8:
                    cc:13:f7:50:82:a9:f5:45:d1:0d:5e:2b:9a:43:bd:
                    5d:2d:96:f8:aa:47:9d:97:66:d4:a9:f6:ad:55:ee:
                    81:f1:3d:46:89:ee:45:d5:37:bc:ac:81:fc:9e:35:
                    1f:3e:63:8a:ae:36:4a:ca:99:a1:b7:57:45:39:bc:
                    8a:88:45:0b:8d:87:12:ad:c5:96:86:67:da:28:30:
                    a8:79:a8:3f:ec:93:7a:8b:19:88:f1:02:49:23:22:
                    61:ed:78:90:d6:f3:8c:1c:24:0b:3b:12:fc:31:9f:
                    b2:b8:4b:96:f3:e5:62:ac:a4:d9:4c:b3:f7:f5:c3:
                    eb:9b:e3:f4:5c:45:d9:8d:42:52:07:49:62:37:54:
                    2e:d0:fb:45:87:15:84:88:22:fe:ab:49:cb:2f:9d:
                    48:86:29:4f:bd:ff:48:c0:be:0a:70:25:18:e3:f4:
                    9c:49:c4:90:1a:bb:fc:ee:c8:77:db:35:e4:e0:d3:
                    76:e3:d8:a5:3c:fb:ca:10:94:42:b9:9f:dd:d5:88:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:7C:59:D7:11:92:4B:3C:A2:15:8C:4D:85:4C:61:D4:BD:BC:95
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:45:1b:72:72:88:eb:f4:ee:1c:2d:16:cb:ab:be:e8:2b:
         af:07:52:08:cf:cd:dd:a5:e0:09:db:5e:3d:d9:5b:65:4f:61:
         c3:88:ec:dd:a2:a3:d8:2a:f9:87:ca:97:1d:34:bc:0d:29:b5:
         22:20:85:cc:07:3e:24:94:43:1c:5b:34:e8:bb:cf:bb:c5:79:
         29:b4:64:b3:c8:8a:b9:f2:37:ea:62:b8:6c:e4:49:b7:f5:09:
         ef:5f:bf:50:28:2f:8d:df:0f:cf:50:dc:fe:b0:ff:a7:10:b3:
         3f:b8:34:52:cf:52:3d:0f:78:af:8d:6b:1a:66:ae:58:2a:22:
         bc:a1:6a:dc:ca:3e:f8:a8:93:b9:d1:f5:ed:8c:d2:eb:71:c7:
         f7:b6:66:24:7a:cc:ed:ab:19:f6:89:40:53:ab:8a:d0:da:1b:
         e6:4a:a8:23:1c:e3:58:45:b9:33:57:08:45:49:0b:17:ee:38:
         1f:18:b7:8a:8c:63:b4:17:e3:62:76:9c:17:17:8b:34:b4:38:
         61:ca:69:d8:38:f2:8f:18:63:ba:64:66:59:d4:64:88:3c:21:
         cf:c0:89:91:8a:73:6b:eb:c9:3a:f1:9b:73:5c:a4:2a:af:87:
         ea:96:70:a2:2f:1a:f3:5f:8e:fa:cb:57:73:70:9c:f5:d2:ca:
         a7:57:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client