Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          psTnkne33o1hKcnS3ZJblanX4GDqujhuntS913x2VxI=
Subject key identifier:   63:18:1E:CC:00:95:43:BC:B7:2A:C7:64:A7:09:B4:3B:1B:EA:D4:68
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019873E364F9A289905BF5B6B6E16E69B8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          1318
Signing time:             Mon 04 Aug 2025 07:02:18 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:18 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:18 +0000
Files and hashes:         1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: S1+x3QMABBvzj7Nck24snaq4wHuny4uJf/EUA3PsdHk=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:64:f9:a2:89:90:5b:f5:b6:b6:e1:6e:69:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Aug  4 07:02:18 2025 GMT
            Not After : Aug  5 07:02:18 2025 GMT
        Subject: CN=63181ecc009543bcb72ac764a709b43b1bead468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:4b:48:cb:a9:f9:10:0e:aa:c0:3d:24:23:
                    15:83:75:ff:ee:41:49:94:c8:2f:93:bb:8f:d6:99:
                    57:66:cb:3e:62:ce:1d:00:be:ba:57:e7:88:db:31:
                    72:16:db:91:77:ce:2f:65:82:f5:70:4c:58:44:ca:
                    9f:19:0b:25:74:ca:12:ac:fc:7e:f0:c1:63:cf:2c:
                    f2:f8:78:d6:e9:ce:5a:10:ee:02:62:a4:f8:46:06:
                    88:b5:a4:c3:86:c1:6b:8f:1c:0c:63:1d:67:40:67:
                    b3:5b:6b:59:e6:c2:d3:18:9d:f0:f6:78:e4:15:2f:
                    e5:b6:7d:8d:43:cd:e2:e0:3b:0e:70:f8:99:38:db:
                    58:d7:65:11:a7:77:a6:a2:3c:20:14:85:57:0b:f8:
                    68:a7:fe:63:d9:d2:86:bf:b9:4e:b8:0c:36:61:d4:
                    08:c0:a4:0b:79:15:16:54:96:8f:8a:b2:1a:55:f1:
                    66:a4:16:a7:b9:d7:fb:26:11:1e:0f:10:ca:04:23:
                    13:28:f8:13:b1:d4:5a:46:c3:7f:67:0d:4d:aa:25:
                    bb:bc:88:7a:b8:aa:d1:d3:88:4e:16:81:91:e2:84:
                    7d:29:c1:2b:f1:73:4d:37:95:fc:3f:a1:cd:92:8d:
                    46:80:e5:d0:73:52:9d:c1:7e:0a:80:35:30:ac:8f:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:1E:CC:00:95:43:BC:B7:2A:C7:64:A7:09:B4:3B:1B:EA:D4:68
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:65:77:f0:49:a9:13:55:19:86:56:e8:49:43:66:ea:a9:
         58:07:53:0e:61:4a:16:63:48:e4:3d:92:e3:38:43:3a:f0:a7:
         d3:5c:8b:95:db:af:9b:16:89:c8:5d:99:14:13:ca:3c:25:ae:
         6f:1c:1a:53:05:07:d2:f1:c4:d2:44:e6:b3:08:59:fc:04:70:
         55:1d:84:cd:bf:07:41:79:13:09:61:b7:cc:5d:b7:2f:98:17:
         a4:fe:87:af:ec:72:89:0d:3d:ed:a1:d6:de:ef:f2:d4:77:5a:
         9b:0c:76:ce:75:aa:e4:bb:f5:f8:24:8f:81:21:f4:55:fe:05:
         45:74:2c:63:f7:67:51:63:2c:20:f9:05:72:a6:a0:23:89:55:
         1c:4f:6a:56:5e:76:6a:a0:7a:1c:0d:05:5e:ca:fa:dd:50:a6:
         ac:77:2b:88:6a:2a:5c:b1:44:9f:aa:e2:61:84:fa:7c:bd:b7:
         0a:42:ed:29:43:b6:2a:78:86:b2:06:ac:fe:46:54:6b:a6:48:
         98:d9:06:5a:78:84:7d:a0:c6:2d:02:ac:0b:de:62:cb:0f:77:
         b3:10:d0:3a:2a:33:3f:64:85:0f:48:0b:47:ba:9a:be:bf:13:
         68:a8:fc:e1:d3:37:a0:df:f4:76:34:65:5e:0f:9b:2f:ad:77:
         90:b3:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:22 2025 by rpki-client