Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File:                     swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier:          3TKaY2QMZcVg3VajZSuMj4611rXJiEr6nwrstTd/tOo=
Subject key identifier:   07:56:91:0A:4E:7F:35:F7:2F:40:9D:20:8F:E3:8A:7F:57:5F:E8:06
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer:       /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial:       01978CFF0059D3370E817CDBCD542083DE75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number:          0C6F
Signing time:             Fri 20 Jun 2025 11:00:11 +0000
Manifest this update:     Fri 20 Jun 2025 11:00:11 +0000
Manifest next update:     Sat 21 Jun 2025 11:00:11 +0000
Files and hashes:         1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
                          2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 0AFjaJF3hBsLkOcwMltxNcXuI2+k9TCH0FlG/qDU364=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8c:ff:00:59:d3:37:0e:81:7c:db:cd:54:20:83:de:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
        Validity
            Not Before: Jun 20 11:00:11 2025 GMT
            Not After : Jun 21 11:00:11 2025 GMT
        Subject: CN=0756910a4e7f35f72f409d208fe38a7f575fe806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:b6:bd:dd:97:46:88:dc:bc:78:e6:17:6a:
                    b0:92:f5:6f:0e:7c:90:16:d2:f3:a9:d7:70:23:bc:
                    f1:ec:ac:71:59:c4:26:f0:51:07:65:00:1b:f0:8b:
                    26:9d:78:42:c4:67:d0:be:d9:e2:d1:f6:28:3e:9b:
                    3f:c4:4b:9a:91:24:8e:1a:4a:84:ee:73:18:ef:b8:
                    93:4d:ba:bb:4b:62:01:31:3d:8d:04:44:06:26:8d:
                    43:ed:59:0e:4a:38:6e:b2:90:f5:43:de:84:3d:05:
                    56:20:4f:31:10:5e:9b:78:1b:a1:6f:00:4d:5c:bd:
                    66:67:0a:4d:2f:d8:63:7a:13:a2:f9:63:ae:9e:34:
                    91:03:bb:0b:52:0d:af:b7:bb:bc:32:ea:d4:09:b7:
                    85:9a:87:15:f6:f5:b5:46:71:b6:f2:05:4c:42:da:
                    14:61:ed:45:c2:37:ad:f0:7d:76:d2:e1:9a:6e:3f:
                    39:6c:1d:d1:c5:d4:4e:bd:37:31:dd:f2:cb:a0:02:
                    dc:73:cd:ca:f1:84:63:62:09:e4:61:e7:91:da:f6:
                    d0:d6:96:84:8e:5b:de:36:9b:ba:8e:99:86:be:96:
                    51:2b:c6:e3:fe:ca:ee:24:50:45:b5:54:06:55:13:
                    cd:d9:b4:4e:08:ca:2e:42:2e:d8:b2:3b:fe:00:82:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:91:0A:4E:7F:35:F7:2F:40:9D:20:8F:E3:8A:7F:57:5F:E8:06
            X509v3 Authority Key Identifier:
                keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:08:fb:b3:ad:62:60:9a:50:41:e2:11:17:85:19:86:23:cb:
         88:00:bf:7b:f3:c3:42:43:ef:c9:48:03:72:df:90:31:f0:1f:
         0d:a9:24:6e:19:bc:a5:94:17:27:ae:fc:2d:ab:ae:9f:32:d8:
         e9:da:63:d1:32:31:b8:9f:04:dc:6e:72:bb:83:83:84:ae:51:
         77:ea:09:23:82:40:56:53:8e:a1:8a:c4:c5:bf:16:62:5d:bf:
         75:fc:cd:84:bd:06:16:8f:9e:8e:dc:0e:e3:16:9a:bf:52:32:
         60:e4:48:38:09:ad:3c:91:6b:27:8c:7d:77:77:5f:56:8c:1c:
         ee:ac:41:80:47:f5:71:bf:be:d1:e9:04:a9:e9:35:18:a0:9e:
         ce:9f:e4:2b:54:21:66:44:ca:0f:75:11:40:e1:1e:9b:f2:8e:
         e0:26:11:86:d0:6b:75:f6:aa:5b:a0:eb:ea:02:8d:79:12:9f:
         5a:b1:23:93:fd:62:12:2a:cf:32:3a:88:5b:d3:e4:0f:2b:42:
         2a:73:d0:64:ed:1e:df:a1:5a:0c:fb:3a:1f:4f:d9:e3:63:77:
         92:2b:17:22:8d:d4:1e:9e:91:31:44:10:50:6c:2e:ed:28:34:
         24:00:da:3f:c7:03:b7:01:56:b1:ab:dc:38:ce:4b:91:fa:20:
         a9:24:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:45:07 2025 by rpki-client