Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          SK8Bp+pffnk96+TbeqQQiFVNlWNtJQifRgv6pUTlBBQ=
Subject key identifier:   50:02:9B:3B:6F:46:6F:7A:23:16:17:06:E6:A9:A5:74:1D:60:1B:41
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       0196857F7897358AD048CEB42724C87E8EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          1518
Signing time:             Wed 30 Apr 2025 07:00:45 +0000
Manifest this update:     Wed 30 Apr 2025 07:00:45 +0000
Manifest next update:     Thu 01 May 2025 07:00:45 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: sXc+IzVDHVejqBxsWnW16db1wHn1zQK+gEe4hhasLyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:78:97:35:8a:d0:48:ce:b4:27:24:c8:7e:8e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Apr 30 07:00:45 2025 GMT
            Not After : May  1 07:00:45 2025 GMT
        Subject: CN=50029b3b6f466f7a23161706e6a9a5741d601b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:b8:63:35:a3:3c:80:7f:80:48:32:a4:e2:
                    b3:dd:84:4f:21:fa:a4:72:19:96:63:5a:89:ee:8b:
                    0f:b7:56:3e:0c:05:bf:1b:e0:62:ed:87:96:38:ab:
                    76:e2:5f:02:52:c2:89:58:da:42:48:2b:b2:c5:40:
                    db:06:ff:af:2c:3c:cf:de:20:92:6d:d1:39:78:18:
                    32:6a:2c:07:12:f9:6c:53:62:92:7f:7c:98:c9:28:
                    c0:68:23:dc:84:88:a9:92:38:96:73:68:72:36:71:
                    a4:82:9b:62:b3:e2:76:e0:80:7f:87:71:8e:90:48:
                    c3:27:08:e5:8e:36:86:48:5c:41:1d:76:dc:59:ea:
                    26:7b:1a:c7:33:80:24:38:7c:f8:b3:6a:9f:d5:09:
                    a3:8e:d5:0e:a0:94:06:d5:23:d0:73:e1:3e:96:5e:
                    20:9f:47:53:14:b6:69:88:3b:3d:8e:1f:fc:c7:4d:
                    93:cd:06:c1:1a:f9:e8:7b:31:a7:2a:f4:2f:22:1b:
                    71:f1:99:2b:b0:61:a2:df:b4:55:0e:7d:29:67:00:
                    15:6d:ca:ee:fd:47:8b:3e:54:e2:7f:8a:a0:8b:1f:
                    44:b9:2d:1e:21:8c:e2:53:cb:33:49:97:e9:77:61:
                    64:40:f4:3e:f0:4f:b6:68:17:e8:d8:60:65:da:74:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:9B:3B:6F:46:6F:7A:23:16:17:06:E6:A9:A5:74:1D:60:1B:41
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:97:83:21:cd:e3:79:76:b5:ca:64:ff:40:a7:3a:bc:61:
         6e:0c:4e:1c:9a:b4:c9:de:15:b2:12:83:fb:7e:15:98:13:6b:
         e2:23:05:1d:4f:3d:2e:49:a0:25:4b:46:ec:6a:2f:d9:73:f9:
         bd:d4:37:46:ba:48:d9:4c:77:b1:27:41:e2:6a:76:a1:f1:63:
         92:b1:09:4c:92:e4:fd:74:33:1c:f3:e3:51:78:5d:d5:d3:fe:
         52:41:f8:3a:61:b1:a0:85:18:c3:bf:19:f6:4c:34:fc:ec:0d:
         c7:70:4d:17:48:c9:8f:d2:94:22:a1:39:ce:ae:bc:8b:d1:0e:
         0a:22:3b:bd:4e:47:01:45:d8:ab:44:3e:09:e8:b8:4e:b7:67:
         02:40:c2:cf:93:8f:bf:fb:ca:86:54:4c:ee:03:32:1f:27:18:
         31:e6:bc:07:a3:31:2d:e3:50:94:e3:1e:95:d6:0b:6a:c5:1b:
         6a:f8:2e:02:ab:4d:85:2d:7c:69:dd:d1:ca:38:78:6a:be:78:
         5e:e7:06:78:cb:9b:d9:6b:5e:62:f6:e0:72:c2:df:e6:50:69:
         35:a4:1a:32:3c:b7:35:fd:1e:26:d3:43:b2:c7:da:92:0f:09:
         7c:bc:41:89:d5:63:17:97:90:af:96:a7:f0:4e:cc:c9:d1:75:
         e0:06:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:01:31 2025 by rpki-client