Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          Bd4CgckabQnCF7zdV4nA4ptLCMHF2HD+Q4AzzR/LMd8=
Subject key identifier:   64:85:16:26:15:7A:14:9E:65:CF:51:B2:C6:71:16:76:74:38:A4:7D
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       01976960CFA1AB021C7BB4935FB37B6742B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0C72
Signing time:             Fri 13 Jun 2025 13:00:41 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:41 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:41 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: suNCTe/CFpBCDduoMvwJKijLnXhz+XFRseYNmzfT5Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:cf:a1:ab:02:1c:7b:b4:93:5f:b3:7b:67:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Jun 13 13:00:41 2025 GMT
            Not After : Jun 14 13:00:41 2025 GMT
        Subject: CN=64851626157a149e65cf51b2c67116767438a47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:12:be:11:f8:47:54:cf:cd:83:58:17:4c:
                    58:a2:a4:c9:9a:fa:b6:18:2c:ca:08:7a:28:28:fa:
                    96:11:95:e8:d1:f0:32:df:e7:04:fc:8c:4d:bf:1f:
                    79:aa:40:f7:4f:a2:7d:ef:13:05:a0:fd:76:68:c5:
                    d7:e9:c3:96:36:e9:34:df:33:54:17:07:3a:c4:c0:
                    20:97:16:6f:ae:3e:2d:10:43:37:9c:28:34:40:c7:
                    b6:b1:8b:fc:9d:e1:6f:98:b7:fe:39:9e:14:e7:67:
                    c1:03:50:0b:0a:2c:ef:31:6d:2a:91:26:e2:14:d7:
                    cf:e0:3c:02:d6:d0:9f:c8:46:55:15:4d:8d:fb:60:
                    29:6b:3d:b2:76:97:eb:27:33:58:4f:3e:04:fa:fd:
                    7c:a1:4a:35:08:2b:78:fe:20:03:bc:20:b4:bc:c0:
                    5f:9b:38:73:aa:ca:a0:06:e9:c2:c0:f2:bc:a3:68:
                    b7:bc:c0:a1:c8:f2:89:12:74:9e:43:ac:56:2e:d3:
                    45:56:03:b8:36:86:d3:65:ce:fb:14:d6:00:44:33:
                    16:d2:2e:d9:5b:3c:cb:11:df:e9:e6:e5:fd:c7:28:
                    19:2d:44:b8:aa:c4:4e:67:80:5b:6b:41:7c:84:11:
                    48:1d:f3:83:ef:19:bf:b6:d0:a7:79:d7:ed:82:bd:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:85:16:26:15:7A:14:9E:65:CF:51:B2:C6:71:16:76:74:38:A4:7D
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:39:5c:b3:f6:46:97:46:85:02:64:c1:96:c7:87:a8:00:96:
         15:58:93:da:61:2c:1d:ce:85:58:a3:46:6b:bc:83:c9:79:5b:
         d5:45:18:e6:4b:07:e0:14:a5:06:8a:0e:a2:34:9f:f2:60:6c:
         7c:f6:aa:8f:88:0e:b4:3d:36:ec:75:fd:4f:b2:cc:66:08:6d:
         64:af:72:46:b6:a1:91:c6:1f:ce:90:58:57:24:da:a7:83:03:
         2b:27:fe:3d:5b:fb:1e:1b:68:91:38:0a:72:3f:77:c5:8c:61:
         c5:46:14:b8:f2:14:88:43:f7:86:66:98:75:bc:03:6c:35:41:
         29:b2:1d:42:90:b4:12:c1:e8:63:9c:fc:74:fe:ac:d6:09:e6:
         43:9f:40:07:67:ce:0a:67:c9:bc:3f:62:b2:94:00:e8:fe:05:
         53:ac:b1:15:50:fb:91:20:4a:2b:da:3d:57:56:a8:57:b1:fd:
         c4:0e:76:21:b9:f8:03:d8:88:b0:12:ab:65:86:d7:16:8f:6f:
         ec:f5:5a:fb:a0:59:d8:be:88:84:44:36:e6:b2:b2:df:fe:af:
         c3:8e:90:1b:ff:f6:23:39:ed:ad:65:2d:c0:b3:f0:7c:20:2c:
         fc:f1:02:0c:b5:da:76:a3:a1:39:00:8b:e6:ef:b6:55:5f:1e:
         5a:11:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:30 2025 by rpki-client