Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          Xm3IDlx71+edAysIVc4YmWm15sUjtsBUHKuCJN7K0EM=
Subject key identifier:   DD:69:9B:91:CD:8A:1E:09:39:75:90:CB:CB:F8:BC:B3:57:AE:DC:B5
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       0197B7EA92025ED8BAA11F41EC2EF6D95E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 19:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:32 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: YnyRGa5++/r7Qgaoxzxv8+BTWaR6X/T18HdoLGBLTzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:92:02:5e:d8:ba:a1:1f:41:ec:2e:f6:d9:5e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Jun 28 19:01:32 2025 GMT
            Not After : Jun 29 19:01:32 2025 GMT
        Subject: CN=dd699b91cd8a1e09397590cbcbf8bcb357aedcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:ce:4b:63:a2:89:38:04:72:35:0a:52:5e:
                    11:16:d8:33:9b:ed:47:07:02:b4:50:ce:95:b3:2a:
                    ab:8b:c3:fc:ad:fb:7d:a5:82:fd:29:96:5c:7d:d9:
                    82:e1:e2:bb:e0:cd:08:79:cb:1e:18:68:aa:3f:2a:
                    c8:b3:1e:f1:a9:ce:7a:c7:3a:db:52:98:b4:8b:6a:
                    0a:aa:14:ae:2c:e3:f5:d2:13:4f:c7:7a:fc:23:9c:
                    bc:98:ae:65:bb:1a:ce:af:24:12:0c:b4:48:ea:8a:
                    bb:c8:8c:d2:d3:33:76:fe:39:17:47:87:47:5a:e7:
                    29:4a:cd:08:5b:36:80:78:b0:c0:aa:ea:7b:0c:bb:
                    6b:40:44:67:72:f2:63:1d:70:5f:84:7e:3c:22:55:
                    a3:36:44:8b:2e:e4:d0:b8:2e:8b:f0:6a:87:29:3f:
                    c4:7b:d2:c6:cf:ae:50:e0:c3:46:e2:5a:00:dd:2d:
                    1f:44:ce:f8:2a:e1:b1:1f:9f:35:8e:36:bb:6f:af:
                    4d:05:3a:8f:08:38:23:47:a3:9c:00:a5:ad:b3:2c:
                    31:58:08:0e:ab:21:b8:54:35:6f:08:28:a1:64:b6:
                    fc:3c:54:bb:a6:28:0b:a9:f1:77:f5:c9:80:40:b7:
                    62:e7:b3:24:01:1f:c1:2d:0f:fe:76:0c:ca:de:27:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:9B:91:CD:8A:1E:09:39:75:90:CB:CB:F8:BC:B3:57:AE:DC:B5
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:e2:28:8b:63:e8:c5:91:1c:af:fe:4c:50:e0:01:56:5f:
         fa:de:b6:b4:7f:10:f0:7a:64:5f:c7:8d:9f:bf:c2:4f:79:96:
         7e:98:84:8c:38:fa:41:a9:ab:87:e7:46:88:64:da:c6:0b:f3:
         87:b3:ec:b6:de:fb:0a:f8:57:5e:3e:9e:c8:c8:15:f1:e3:82:
         74:d7:63:84:3c:af:7b:ae:40:66:3f:4c:b9:7a:db:70:f5:bc:
         ba:82:87:43:6e:24:53:64:f1:e3:6c:dd:b4:e2:2f:de:e7:7f:
         96:a6:65:69:a0:b9:00:9a:37:91:2d:1f:83:ba:fc:76:75:56:
         86:21:22:6a:67:54:86:8d:b4:9a:82:f8:84:38:62:f3:d6:63:
         e1:89:c1:91:38:d2:a9:a3:cf:f3:0c:c3:4e:e0:3d:3b:cb:cc:
         76:63:3b:f2:93:10:7c:17:df:b0:0a:55:b5:c2:8b:a0:34:5d:
         84:bf:2c:26:70:34:4f:3e:be:ce:ef:d9:4a:a6:e1:b7:f5:7a:
         4d:a1:2f:32:e5:6f:70:d6:c7:bb:9a:2d:51:af:45:c4:66:6e:
         ea:4d:f9:6c:fe:2c:77:4c:54:c5:c4:d6:4d:fe:d0:d5:82:28:
         d5:cd:ad:86:5f:c5:00:9c:3f:f7:54:15:40:b4:b3:ff:a3:37:
         12:94:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:36 2025 by rpki-client