Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File:                     swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier:          cWK/OsyxDkBMZ0vI/ZAN4k4GDRmlkzHsMEWvmopcds4=
Subject key identifier:   38:B9:66:07:9B:C5:99:AD:92:11:82:68:04:A0:38:34:7F:33:5C:5D
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer:       /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial:       01991687DEAA783F76D46EB8A5982C8A55C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number:          02DB
Signing time:             Thu 04 Sep 2025 21:00:26 +0000
Manifest this update:     Thu 04 Sep 2025 21:00:26 +0000
Manifest next update:     Fri 05 Sep 2025 21:00:26 +0000
Files and hashes:         1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
                          2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: KHqd5y+SJu9aimY+3/tG4+eWIP65a4dIhZfNyne1IDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:87:de:aa:78:3f:76:d4:6e:b8:a5:98:2c:8a:55:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
        Validity
            Not Before: Sep  4 21:00:26 2025 GMT
            Not After : Sep  5 21:00:26 2025 GMT
        Subject: CN=38b966079bc599ad9211826804a038347f335c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:da:94:a7:64:72:83:01:4d:d9:6c:56:e1:
                    81:6f:d2:fa:3d:99:12:c7:8c:b8:98:a2:4e:7a:44:
                    c7:04:89:cb:69:88:29:0a:1e:09:d6:a0:1d:4c:6e:
                    6d:c1:c7:12:e9:3a:7a:49:a3:65:8a:32:43:f1:6d:
                    50:4a:44:9b:90:2a:97:c0:a5:39:35:40:35:d6:5f:
                    90:e1:35:66:90:86:f1:38:5a:a4:f5:34:5d:76:f2:
                    f1:cd:08:58:9b:67:7f:f5:3b:1d:a6:b6:c3:44:38:
                    72:c8:ff:d4:a4:be:fb:bd:c8:2c:fd:17:a3:f7:d1:
                    fa:04:b4:e6:16:fd:cf:d0:be:37:92:0f:2d:33:d0:
                    f1:a4:e8:3d:29:70:db:e5:b2:4d:12:1e:64:8a:00:
                    38:57:fe:b5:94:b6:69:30:df:8f:bd:3c:1c:9b:0d:
                    a9:66:81:16:c6:b9:89:0d:cf:5e:5f:ec:07:54:64:
                    0d:2f:d9:3f:aa:c6:ff:a2:29:f9:94:71:de:82:6a:
                    db:e8:43:f1:b5:e8:bc:9e:20:6d:b0:cd:e6:04:68:
                    e0:d7:d4:00:fc:7d:ec:4a:c9:e9:59:7a:a1:fd:6c:
                    ea:38:cb:d9:62:25:8e:ef:74:ac:05:73:cc:1d:90:
                    26:39:ba:5d:0e:17:09:85:19:b4:d3:47:40:69:8c:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:66:07:9B:C5:99:AD:92:11:82:68:04:A0:38:34:7F:33:5C:5D
            X509v3 Authority Key Identifier:
                keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:e4:bf:58:41:96:fa:7f:80:ca:41:dd:96:18:99:f6:8c:
         0f:17:ca:00:79:45:fb:6f:2b:ab:84:0a:b1:39:ad:ad:78:88:
         63:00:30:6f:a9:5f:20:0a:10:f4:8a:12:f1:aa:a7:00:6c:17:
         4b:8a:d7:47:16:66:0c:c4:3f:e0:f1:12:1c:d4:89:6e:0d:3b:
         d6:48:1c:60:c7:08:11:c5:c1:cf:05:a2:56:9c:c5:55:c8:b7:
         9f:f4:ac:27:62:33:49:99:70:b7:e2:10:a8:87:12:43:87:6f:
         2e:e4:b8:ec:e4:4b:58:6a:ac:37:64:4e:b4:2c:40:b6:bd:c7:
         0f:e3:91:7b:23:7e:06:78:bf:35:69:09:c6:54:02:1b:f2:a8:
         4f:97:9e:43:39:62:84:be:ae:42:ad:4c:bb:25:4d:81:25:fa:
         21:b2:76:6e:84:e9:01:5d:ec:50:fe:25:92:df:a0:be:a4:7a:
         40:f1:4c:04:dd:8b:ab:5c:f5:c9:31:ca:7d:fd:95:27:42:f6:
         8f:08:54:27:37:98:93:fd:8e:d5:47:c0:9a:24:45:8e:54:c6:
         95:ea:2d:06:5d:94:6f:a6:45:98:2e:fa:db:9c:34:91:07:79:
         03:32:80:80:46:99:4a:92:c2:07:5d:49:16:0d:36:01:d6:86:
         df:7f:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:13 2025 by rpki-client