Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          65ApwOj0oOha18gJ2USapjNOmqa1FO/nqqktQ1WTwEk=
Subject key identifier:   4B:E7:47:EB:FA:4E:13:6C:19:D2:7A:C2:31:1F:2F:18:8A:FF:61:BD
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       0199FD343C065B2A1E5DA47353F9B0FC63F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 16:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:22 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: ko/IkNUaIXkxiT9hYlFA9dPxFiGaODpolTCG8BsnrsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:3c:06:5b:2a:1e:5d:a4:73:53:f9:b0:fc:63:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Oct 19 16:01:22 2025 GMT
            Not After : Oct 20 16:01:22 2025 GMT
        Subject: CN=4be747ebfa4e136c19d27ac2311f2f188aff61bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:63:18:d5:67:06:f7:5b:41:5e:80:a3:9f:7a:
                    b6:7b:9f:13:ce:8a:98:1f:68:94:57:0d:db:6f:77:
                    b5:17:92:22:f6:f8:e8:28:59:8c:06:f1:3d:af:18:
                    a9:19:91:1d:ad:e8:a0:b7:dd:ca:86:aa:9e:a9:a5:
                    5d:76:9d:3c:19:ee:0b:ff:33:08:01:f1:b6:e1:c2:
                    26:3b:95:17:09:ad:36:43:0f:4b:a9:41:2c:c5:5c:
                    b4:8c:48:5c:d1:15:d8:c6:13:ea:c2:dd:51:93:f7:
                    27:34:0b:d4:10:e2:ca:35:3b:2e:22:de:e4:2c:df:
                    f1:c2:79:66:6d:d6:17:3d:6f:85:b9:cc:a8:73:4f:
                    d2:39:09:fe:0d:77:f3:b9:ea:2c:49:a1:02:8d:fe:
                    03:ce:60:a4:02:45:bc:e4:8d:1d:b3:8d:96:65:ae:
                    2e:9e:14:64:b2:39:29:d5:16:04:a4:59:fb:b8:a7:
                    a2:2a:ea:f4:6f:29:e6:6a:ad:4e:74:59:b4:3a:e1:
                    73:a4:6c:94:1d:76:a8:92:e3:d2:d1:5c:6c:53:79:
                    20:55:17:03:d6:9c:ba:62:45:ff:5b:3d:3a:df:80:
                    11:a2:35:46:1e:c5:1f:d6:6c:6d:08:3e:f2:f7:a8:
                    8e:b1:59:10:6d:9c:26:9f:3e:a2:9e:15:84:fe:8c:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E7:47:EB:FA:4E:13:6C:19:D2:7A:C2:31:1F:2F:18:8A:FF:61:BD
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:21:47:2e:4d:12:98:9d:02:36:ac:d4:4c:94:27:56:70:39:
         f3:b3:9d:40:ac:5e:9a:1b:a9:c6:98:5b:c7:78:2c:85:f7:1e:
         e9:44:50:85:d0:63:79:f3:a5:a1:6f:14:26:3f:3f:cc:d3:b7:
         be:32:7f:80:91:97:8d:8d:87:86:ca:bb:3f:86:a8:c3:2b:75:
         f1:a6:73:96:8b:67:71:3e:eb:50:a0:2c:bb:f4:43:5d:91:81:
         9a:59:61:90:5a:d6:80:72:69:c8:db:34:45:03:d6:f6:84:dd:
         ae:7a:35:df:c4:ea:09:ca:1c:e4:bd:75:2a:bc:21:0d:9b:60:
         7c:f3:dd:c7:e7:1a:3d:99:e7:34:52:48:4b:e3:3f:3a:2e:8a:
         ae:29:2a:8c:5b:c9:f0:3f:df:c7:87:50:75:d6:9a:71:fb:1a:
         25:5b:26:b6:7e:a6:a7:3f:1b:88:07:8f:81:57:36:ca:b5:8f:
         cb:2b:b8:a9:29:fb:00:ba:62:0e:6f:18:c3:1d:13:dd:4f:00:
         f9:99:57:ab:5b:e4:a9:a4:a2:d6:6a:e4:f5:b0:9f:7e:58:cc:
         7a:3e:14:98:b1:bb:91:81:8c:8d:06:c7:88:0f:b9:29:32:87:
         8b:a2:9d:96:50:f7:89:3f:34:47:f8:a8:c4:92:2d:a8:92:8f:
         70:76:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:13 2025 by rpki-client