Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          HokqdDznOityW22iqlKQaRW00fazzG7aMiJtYDWyP74=
Subject key identifier:   7D:DB:02:89:FE:6E:55:9C:6A:11:5D:EA:CE:50:6A:44:C9:C2:94:24
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       0196718A7028F2EF0503E1AA11482ECA63E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          120D
Signing time:             Sat 26 Apr 2025 10:00:20 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:20 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:20 +0000
Files and hashes:         1: 7FzoSqKZlb5kD6vPPTk2SfC27nM.roa (hash: 6aAGYHU1rCi9sNjHbIL9N9TC7WU4O97UeTWhOeOg/Oo=)
                          2: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          3: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: LF0Hbdjmd84HHIbuMMtB4QwCxy5Pb37KEAbq7N8o7/Q=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8a:70:28:f2:ef:05:03:e1:aa:11:48:2e:ca:63:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Apr 26 10:00:20 2025 GMT
            Not After : Apr 27 10:00:20 2025 GMT
        Subject: CN=7ddb0289fe6e559c6a115deace506a44c9c29424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:45:51:ed:bb:a1:e9:b7:79:0e:9c:b6:bc:
                    c3:ee:d3:41:f1:c8:5f:1c:0b:8f:13:69:4d:e1:8c:
                    d1:57:6d:ed:07:05:3d:78:f7:38:46:67:10:fd:2d:
                    b6:af:fd:db:b1:5e:d5:30:d2:2f:1b:d5:2e:c2:1e:
                    29:11:cf:e5:3c:76:d7:8f:8e:3a:5e:69:32:00:a3:
                    12:aa:74:8e:7c:ef:10:d4:90:43:1a:48:df:be:f1:
                    93:94:d9:8c:bd:2d:fb:11:45:1d:c3:ab:f6:3d:c0:
                    8f:eb:7d:91:3e:1e:80:10:2c:52:d9:4f:79:d1:16:
                    89:4d:82:21:bc:13:03:18:fa:7e:d0:b4:c1:c0:c9:
                    b1:9e:f6:6a:8b:fc:de:9c:48:2e:e9:0d:d2:31:92:
                    90:59:dd:97:8c:93:0f:e6:69:70:dc:da:6b:10:31:
                    27:e2:1e:2d:32:d8:9a:90:1c:48:cd:fb:97:2b:1c:
                    07:9a:e4:af:b9:7f:22:46:a6:27:0f:ab:4b:a5:43:
                    a6:c9:e0:66:ad:cb:39:bb:9a:38:49:b1:8f:18:a3:
                    76:28:b1:db:55:2e:6b:cc:e9:ae:0d:a9:f5:26:49:
                    49:be:e2:6c:65:4f:f9:e7:3e:2e:3b:dc:5a:9b:8c:
                    6f:21:f1:ce:b2:b6:e7:a1:67:43:58:fc:e9:7b:27:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:02:89:FE:6E:55:9C:6A:11:5D:EA:CE:50:6A:44:C9:C2:94:24
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ca:aa:01:79:01:05:43:73:02:3b:61:64:89:ef:4b:f4:87:
         28:30:16:58:5a:e6:ca:cb:ab:34:b3:ce:bc:cb:77:e4:27:1b:
         dd:f4:88:2a:4f:97:94:94:57:46:e8:3f:18:92:15:d8:61:2c:
         2b:da:ad:b5:35:2c:9d:78:f7:ab:54:a9:ae:e9:50:56:fd:a1:
         e6:81:7c:14:80:3a:cf:90:a3:6c:3e:34:96:f5:7a:ce:79:fd:
         7a:18:4c:85:14:8d:90:a5:5b:16:05:73:d3:63:8a:dd:33:9d:
         29:c3:df:65:44:4b:df:32:b3:82:89:bf:77:46:48:c0:7b:1c:
         3d:f5:82:d0:d8:37:19:16:f7:6c:eb:ea:d3:1f:3a:53:d5:9a:
         b9:00:6d:1f:79:4e:70:5a:64:67:d1:e8:c7:ec:7c:6c:08:f7:
         38:33:16:0e:e4:30:b4:b1:c3:ef:5c:be:15:96:cb:f9:4d:d8:
         64:6a:94:6f:1c:3f:98:e8:68:d9:96:6e:3a:b8:56:48:3e:f7:
         a3:9c:6a:a4:38:6c:98:19:03:7f:fc:bd:d0:90:7f:8e:c1:b4:
         c3:18:e6:cf:91:a3:20:7a:ca:71:31:9f:f7:89:a6:73:0e:be:
         b2:de:e0:a1:77:2b:37:6a:4b:95:5e:78:b3:31:c7:57:e9:66:
         b4:1f:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:34 2025 by rpki-client