Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
File:                     sw_SVclrQucrVojGcPbiYRmtOTU.mft (raw, json)
Hash identifier:          NTll+HySQF38Vwfy6N2T6V5cSPTYTZSaZpxICPRM5yI=
Subject key identifier:   CD:87:F5:64:53:49:D0:B2:82:03:03:F6:8D:AA:D8:49:33:FB:42:D9
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Certificate issuer:       /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial:       01984708B7B6BA84C42DF7F613430208E5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
Manifest number:          0FE1
Signing time:             Sat 26 Jul 2025 14:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:10 +0000
Files and hashes:         1: jJuFjmJwtlonv8Hkaep_iW0VfF4.roa (hash: zsE4QEwxpdDbj5qFx5golFUOXWQFsfOvDcnMxdvqF7o=)
                          2: sw_SVclrQucrVojGcPbiYRmtOTU.crl (hash: rJT3LIp3h6/fkl2tU7MZUUDoo2fh+6ZO1C9H28e6qwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:b7:b6:ba:84:c4:2d:f7:f6:13:43:02:08:e5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
        Validity
            Not Before: Jul 26 14:00:10 2025 GMT
            Not After : Jul 27 14:00:10 2025 GMT
        Subject: CN=cd87f5645349d0b2820303f68daad84933fb42d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:b6:8c:fe:2a:0d:c2:0f:54:5a:3e:83:e8:
                    2c:06:fa:fc:2a:22:19:b4:c8:c1:cf:b0:2b:79:67:
                    3a:08:92:1f:20:97:65:58:94:b9:de:35:ed:cf:40:
                    bf:13:b0:76:29:00:e3:93:b1:36:0f:f9:0b:2f:49:
                    10:bd:27:bb:a4:5f:da:02:b5:f1:b9:c5:85:98:3c:
                    db:2c:47:70:2f:e0:15:53:fc:c3:9e:eb:06:0e:49:
                    ce:96:2b:c5:85:ee:41:b6:59:6d:64:a1:2c:83:83:
                    3b:77:82:ea:bc:ef:14:de:a4:0a:20:3b:b9:9d:01:
                    7e:fa:0d:af:91:87:cb:39:1a:78:59:5d:bb:61:40:
                    58:d8:91:85:a5:bd:c9:91:09:3f:4e:06:f1:52:15:
                    ac:b8:03:1e:aa:e5:09:6a:d6:a7:1e:84:ac:87:43:
                    ba:90:70:af:56:85:a2:61:45:7d:f7:71:a9:7f:35:
                    b2:86:3f:87:b1:f8:62:8b:30:a2:b8:cb:b4:34:23:
                    6f:29:fd:1c:b9:7d:b0:b1:64:8c:3f:db:8d:c2:5d:
                    8f:93:8a:2a:9c:00:37:dd:a5:ab:20:a2:a8:db:3e:
                    8f:61:5b:60:db:80:1e:5f:77:44:b0:d0:e7:39:a0:
                    31:66:0f:5e:b2:94:2f:81:78:5e:d4:4f:60:e0:94:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:F5:64:53:49:D0:B2:82:03:03:F6:8D:AA:D8:49:33:FB:42:D9
            X509v3 Authority Key Identifier:
                keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:49:db:c6:37:1d:d0:35:32:bd:d2:48:93:54:4b:85:8a:
         90:e0:82:d4:73:f2:f6:3e:06:f8:bf:7f:91:32:1b:a7:34:70:
         04:fd:b8:b7:02:7c:ad:0b:c9:83:7c:3f:14:d1:f4:9e:71:07:
         77:54:59:84:40:d5:11:b6:22:b4:2f:25:b2:7e:b0:f4:c8:74:
         21:6c:73:1b:d2:49:64:c1:57:57:31:40:b5:ff:5f:70:49:93:
         75:e6:50:38:b0:8d:6e:9c:cf:92:11:0e:90:66:6e:53:f9:14:
         ae:58:97:83:19:d2:7c:fd:16:b6:01:c2:53:9f:49:78:4b:0b:
         f0:f0:8e:0c:47:28:4e:1d:db:16:55:ba:09:d4:92:43:07:e0:
         e1:1d:84:aa:16:66:92:d6:19:db:95:c9:b7:fb:b4:3b:ad:e0:
         b9:88:01:cc:45:87:94:0b:df:e3:60:ea:e8:10:bd:63:c4:3f:
         28:52:27:a6:ca:43:f5:a1:81:85:c8:ee:b1:28:a2:8f:08:6a:
         40:ba:ad:c6:79:bd:79:38:ed:5d:e6:bd:de:8f:b4:e7:9b:76:
         67:c1:bb:7b:97:96:54:b9:ab:db:1a:fe:7a:dd:08:28:5b:0f:
         6f:cb:d9:cc:aa:f0:47:f7:fe:b7:9d:f7:24:25:5f:4e:af:80:
         7d:77:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:30 2025 by rpki-client