Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          p0v4CahQ8pqiqBbKN575d0i+YTDdNtayvkyWoi3l1nE=
Subject key identifier:   C8:91:CD:8A:6B:7C:E3:5E:0F:E6:F7:A1:D5:DF:02:FC:B6:CF:5E:FB
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       0197488C7430954AA4FC81A4AFE7C1966710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0C61
Signing time:             Sat 07 Jun 2025 04:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:53 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: c32R3798Vb6ZVJDgFPH2vcgrsMOt4l2T9c3bvX/4SbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:74:30:95:4a:a4:fc:81:a4:af:e7:c1:96:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Jun  7 04:00:53 2025 GMT
            Not After : Jun  8 04:00:53 2025 GMT
        Subject: CN=c891cd8a6b7ce35e0fe6f7a1d5df02fcb6cf5efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:99:1f:81:66:49:92:fc:eb:aa:42:69:a9:
                    e8:fa:db:09:fe:5a:42:c3:91:f0:9e:5a:96:85:93:
                    77:5f:c6:36:ee:29:26:ee:9e:4c:0c:12:2d:4b:65:
                    25:1c:a2:90:96:1a:58:b3:27:e9:29:f4:09:0e:b2:
                    6f:97:01:38:d4:28:a1:56:67:11:f7:44:ce:4b:e1:
                    f1:f6:25:7f:04:e4:7b:46:d0:57:51:74:81:92:c1:
                    68:50:40:5e:86:91:1c:25:ab:8f:7f:0d:62:4e:fd:
                    41:52:2b:18:b3:67:6c:54:c3:9b:5a:5e:93:ce:73:
                    7e:4d:11:7d:1e:54:d4:75:15:26:6e:ab:d4:38:81:
                    3c:9b:b1:54:fd:7d:b2:b5:35:87:ef:96:15:c7:a4:
                    db:28:a4:e0:24:8a:33:a0:aa:0e:c2:b0:0b:3a:b5:
                    f6:18:7a:b3:56:84:a0:34:ad:bd:09:73:17:b7:9d:
                    f4:e6:01:03:fa:33:50:6d:bb:8e:b4:c1:a1:dd:9a:
                    48:8a:79:4e:f5:ae:4a:91:c5:c5:3b:a6:c5:2f:1a:
                    86:b0:93:b2:d3:32:b7:00:ec:4f:b6:66:cf:ec:fc:
                    4b:3e:59:22:ea:07:a0:25:99:8f:85:30:b4:bd:51:
                    9a:5b:27:24:e0:9f:83:22:b9:65:94:c3:f3:c8:90:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:CD:8A:6B:7C:E3:5E:0F:E6:F7:A1:D5:DF:02:FC:B6:CF:5E:FB
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:02:26:a1:0b:e1:6a:b8:ab:1f:94:97:a8:fa:de:b7:19:4a:
         27:5e:79:5c:02:b4:a2:1d:1e:9b:cb:ff:a6:92:79:76:80:ee:
         5f:29:c9:0a:fb:c9:75:03:2a:99:82:66:40:7c:62:c3:b1:60:
         d5:db:39:0d:00:d5:32:74:b6:6a:1f:14:bd:59:71:31:ca:d0:
         52:0d:d8:41:a6:69:b4:23:12:06:20:36:20:0e:7f:f5:0f:74:
         07:63:3a:ce:e2:ad:ba:2e:64:32:03:99:c2:b6:a7:2f:94:d1:
         b0:8e:95:bd:10:79:fa:5e:20:01:a3:6a:b2:bd:63:23:2f:50:
         da:8e:22:6a:73:c8:83:6f:99:ae:c8:92:96:8b:00:23:04:15:
         59:04:11:95:44:fd:0d:3d:9b:7d:12:a0:c1:9d:b4:67:6a:9c:
         32:6f:1e:93:63:91:eb:10:bd:fe:c4:52:b5:1e:20:5b:79:5f:
         29:b8:eb:92:e2:b0:06:86:30:b3:1b:64:30:8a:aa:0e:ac:18:
         f8:33:79:6c:0a:05:dc:00:b8:d7:4a:57:3a:f2:7d:39:f7:d8:
         fc:6c:9d:20:ab:ed:30:64:46:c0:55:09:56:96:a9:1d:c6:b5:
         d8:b5:af:d2:5a:67:18:69:09:ec:76:d4:2e:89:52:10:34:9e:
         eb:16:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:36 2025 by rpki-client