Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          A0j/GdXJ/31R/G/sVhYhMlMzTBRd2cMWx9gLIJuHcGY=
Subject key identifier:   89:64:A4:86:DA:69:6C:EA:40:0A:31:22:4F:4E:C0:3D:89:CD:41:6F
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       01991764C6892324AF26A7011394780B8B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          1064
Signing time:             Fri 05 Sep 2025 01:01:44 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:44 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:44 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: aRKtCWqCg1NNHTnlgm+cyXR+xmStPjSncDxflihce8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:c6:89:23:24:af:26:a7:01:13:94:78:0b:8b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Sep  5 01:01:44 2025 GMT
            Not After : Sep  6 01:01:44 2025 GMT
        Subject: CN=8964a486da696cea400a31224f4ec03d89cd416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:ef:46:d6:fc:7c:59:34:45:4e:35:6c:d0:
                    b1:24:b5:23:a7:2e:c0:d2:f7:cb:bf:e3:98:9e:e0:
                    b4:db:30:0b:31:70:ca:51:a9:ac:25:5b:f6:53:cb:
                    05:db:80:60:46:ec:5e:b2:c8:a3:67:e1:1d:1b:ed:
                    a5:6f:d1:c5:fa:de:8f:65:bc:4f:c0:af:37:54:fb:
                    0c:12:0c:36:43:22:1d:47:88:a7:2b:db:ee:a6:16:
                    71:e5:27:90:54:59:9d:d0:cf:ba:65:89:32:c8:c0:
                    d6:53:f2:48:f0:41:d3:45:79:57:d4:2e:43:44:73:
                    84:40:c0:96:15:f8:b6:12:9d:e3:00:58:62:5c:eb:
                    b4:51:74:c2:d9:d6:65:01:ca:23:9b:68:b3:0d:a3:
                    d1:c9:00:37:41:a4:fe:dd:9e:67:a3:a2:1a:a3:6c:
                    ec:1e:9f:52:3b:f5:04:df:49:a8:f8:05:09:a0:6d:
                    13:80:d6:19:0a:34:ea:8a:da:77:2e:e8:cc:54:96:
                    4e:14:8e:d9:cb:49:ce:3b:57:fd:43:83:9f:56:21:
                    fe:66:78:9e:02:be:42:7a:d5:2d:9a:a3:26:e7:94:
                    92:a0:68:e3:4e:44:25:d9:30:4e:d2:68:49:3b:c2:
                    69:3d:b4:61:3f:5e:0f:b7:5f:b4:b0:e2:88:ed:e1:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:A4:86:DA:69:6C:EA:40:0A:31:22:4F:4E:C0:3D:89:CD:41:6F
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:04:86:4c:e3:2a:2c:83:3c:ed:12:9a:c1:38:e5:e8:50:
         ad:c7:47:0b:c9:2c:43:7d:62:1d:cd:7b:f3:62:7a:7b:1f:f7:
         af:21:ea:19:05:8f:0f:e2:f3:b2:4f:2d:ad:f5:7d:c9:4c:82:
         2c:e3:2e:de:df:07:cb:39:76:a9:8b:af:b5:0c:cb:03:53:5c:
         e9:eb:cd:cc:55:78:83:b1:8c:ef:bf:f9:17:77:ee:eb:2f:a5:
         32:51:f7:27:44:e5:34:a9:6e:ff:f3:c1:ef:d2:4a:6e:97:03:
         b7:66:03:83:9a:36:39:f6:93:31:65:46:fc:78:55:da:9c:ea:
         61:b5:1e:f0:3a:13:c4:48:8e:e0:65:b3:24:bd:99:c4:5c:20:
         ee:d2:c8:3c:e7:cc:0d:e7:54:58:70:f2:74:c2:4d:2e:41:87:
         f3:76:0e:77:5e:bf:2f:0b:95:2b:54:9e:75:5e:bb:c3:06:b6:
         1b:2d:06:2c:f2:7a:98:3d:37:08:be:12:6d:fb:ce:35:33:7d:
         6d:ac:66:37:f7:ef:56:f7:92:6c:87:19:53:0c:d3:16:1a:cb:
         d4:05:bd:eb:d3:27:28:0e:98:e9:90:78:c2:02:01:93:c2:46:
         67:91:c7:ca:58:7a:01:ca:3e:f6:bf:87:cf:1b:8b:c6:07:e0:
         b3:79:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:21 2025 by rpki-client