Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          Q7NVjazY7slOtkUflGR8ishulBywQ8vunbi6TPBg97g=
Subject key identifier:   03:82:16:DB:9E:E3:D6:1E:1B:37:EF:DB:98:F3:D7:3E:D0:E2:E0:4C
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       0198D4736875C6AFCA4D3CD81AAAB4E1FBE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          134A
Signing time:             Sat 23 Aug 2025 01:03:09 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:09 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:09 +0000
Files and hashes:         1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: 2gefM5KOwOoOje6vVm9E3yHS+b5m92SnZssMK8eDImc=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:68:75:c6:af:ca:4d:3c:d8:1a:aa:b4:e1:fb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Aug 23 01:03:09 2025 GMT
            Not After : Aug 24 01:03:09 2025 GMT
        Subject: CN=038216db9ee3d61e1b37efdb98f3d73ed0e2e04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:76:6c:42:5d:9e:fc:4a:1a:bd:a8:22:f2:
                    a6:5b:d4:6d:6d:46:1d:4d:b8:dd:aa:eb:42:45:5b:
                    49:8d:d9:a4:cf:69:8d:25:4c:83:d8:3f:e8:91:c5:
                    d1:4d:29:42:7e:32:33:32:4f:dd:06:86:28:5d:60:
                    b1:13:05:b9:30:1d:48:30:04:cb:c0:a6:3a:c7:5a:
                    df:8d:00:69:f6:ca:6c:e4:c5:5b:22:e2:9d:89:58:
                    27:30:57:f2:83:db:99:fd:0f:27:c9:34:c0:bd:d9:
                    9e:67:e9:3e:14:fc:e3:9a:e7:57:79:26:31:60:ab:
                    79:22:b8:7d:83:5d:d8:5f:90:d8:aa:ce:88:2d:f6:
                    af:c0:07:7d:46:b6:4e:c5:1d:48:81:28:2c:9d:28:
                    cb:85:27:eb:8d:63:55:1e:b4:f9:15:88:76:2b:d4:
                    8b:47:c1:e9:e5:91:6c:e4:03:16:2b:12:2a:a7:b6:
                    c1:83:17:8e:e0:27:42:65:c5:24:bb:0f:39:ca:b7:
                    2b:54:e4:04:a1:7d:46:43:c7:c8:79:00:c6:f6:10:
                    4a:06:0b:3e:50:4c:fb:6d:84:60:f2:3e:c5:80:17:
                    85:50:e2:14:90:1f:c8:30:c1:7d:7b:66:49:1a:ad:
                    ec:00:5b:ea:cc:a5:a8:9b:1a:81:28:b1:fe:bc:57:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:16:DB:9E:E3:D6:1E:1B:37:EF:DB:98:F3:D7:3E:D0:E2:E0:4C
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:b4:e8:ff:a1:26:6b:35:4c:59:23:51:e4:40:13:8c:2b:
         89:8e:7c:11:15:4b:7b:97:8a:e1:f2:92:bd:78:be:45:99:a7:
         b5:e2:e1:7d:71:6f:3a:48:31:15:eb:c5:dc:df:67:98:b8:e6:
         d3:30:00:b2:54:5e:f0:78:fa:f5:16:80:fe:07:ed:01:60:a5:
         ba:95:be:ea:96:24:63:51:f3:b6:a2:3e:b9:c4:6d:b0:90:48:
         7b:9a:8b:61:fb:f1:6c:92:60:39:e3:ba:60:5f:f4:48:b6:2e:
         7f:25:a3:4c:f2:5b:44:d7:01:2f:c9:b5:e0:b1:04:05:0c:bb:
         a4:c5:4a:a0:55:75:32:55:3d:45:47:79:7d:12:c7:1a:cb:79:
         a3:0e:92:50:a4:36:5d:cc:02:85:e5:b8:c6:d7:a0:62:45:98:
         fa:d2:41:41:f3:ba:15:e9:ab:14:a2:2b:19:bb:9b:a3:da:4b:
         dc:3c:a5:d3:16:62:83:5d:43:5f:c1:82:31:ef:74:70:81:d0:
         17:6f:fa:bd:a9:e6:9b:2d:2d:58:59:66:2b:2e:cf:96:77:c5:
         86:77:7c:63:5a:f2:be:f0:e7:7f:b6:26:c5:13:2e:71:8b:c0:
         9e:00:41:00:7a:28:b2:45:96:0b:e1:21:06:2c:87:f5:8e:4b:
         60:63:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:29 2025 by rpki-client