Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          OieQO8kgDbpEtPbU79yVPOKun0Vzz6BGIc0Lm4ypZb0=
Subject key identifier:   63:DB:6B:A2:7D:DB:17:4F:E6:D9:5F:6D:52:AD:F7:F8:6A:E3:93:B9
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       019A18E168C8D0E2DCCA262BA0567293E9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          16F2
Signing time:             Sat 25 Oct 2025 01:00:16 +0000
Manifest this update:     Sat 25 Oct 2025 01:00:16 +0000
Manifest next update:     Sun 26 Oct 2025 01:00:16 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: KHQ/xXnMOy5ThRlQWm82ccLf/GKPP5bo6YE6AVEot2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:18:e1:68:c8:d0:e2:dc:ca:26:2b:a0:56:72:93:e9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Oct 25 01:00:16 2025 GMT
            Not After : Oct 26 01:00:16 2025 GMT
        Subject: CN=63db6ba27ddb174fe6d95f6d52adf7f86ae393b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:b8:7a:32:c4:98:fb:aa:b6:d8:ec:ac:aa:
                    30:c1:99:98:f1:4b:c1:35:af:d3:09:fc:b3:f2:80:
                    ec:77:0d:4f:42:fa:2f:53:ad:22:d3:11:fc:a2:81:
                    ab:06:6c:b1:9e:04:64:7f:e4:e8:6f:7e:54:1f:88:
                    ae:3d:c3:70:34:45:86:bc:15:4e:5b:66:b8:96:e0:
                    e2:ba:56:fc:d8:de:ab:6c:f6:b8:6d:48:42:6b:9b:
                    06:c0:78:b5:92:da:d4:4d:9e:ff:00:d5:3d:e8:68:
                    ff:8c:a5:99:5f:7b:1d:f8:2f:ff:36:b3:ff:7d:e4:
                    0b:12:8b:3d:1c:ce:fd:fe:0f:48:c8:48:fe:c4:3c:
                    09:06:f4:91:97:c2:a2:9a:b1:f5:5a:90:6e:98:2d:
                    0a:d7:d5:da:a0:23:8c:6c:2b:da:2a:19:9b:cf:70:
                    58:0e:91:4b:82:4d:d4:82:ea:fd:9f:09:15:b4:1e:
                    45:cf:d3:08:60:d6:e6:b8:7b:7b:23:fd:d1:6f:bd:
                    3a:24:64:f9:b1:d9:da:51:d5:be:55:25:ed:ff:04:
                    d7:4c:84:14:f0:c7:ee:bb:b6:2c:f8:b2:d9:ae:b9:
                    38:d7:c1:82:96:8b:5b:cc:92:44:5e:55:df:15:27:
                    47:25:7c:b2:8d:d5:87:65:57:01:4c:c4:b9:fa:08:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:6B:A2:7D:DB:17:4F:E6:D9:5F:6D:52:AD:F7:F8:6A:E3:93:B9
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:5e:91:c6:be:07:1f:84:86:99:68:0f:88:e6:7a:13:1f:
         fb:93:ef:47:6d:95:bf:bb:99:b7:79:a6:63:ee:48:e2:6c:bd:
         26:57:03:5e:51:33:75:9a:44:06:bb:25:39:1a:7b:e2:2a:66:
         81:ae:4e:70:bb:cb:96:51:47:b6:39:7c:b7:66:a5:eb:32:31:
         66:17:65:bc:7f:df:b5:96:3d:63:b0:28:b3:5d:74:b4:89:69:
         8a:02:5f:0e:40:c4:f2:96:2e:e2:7e:3a:63:d1:13:ca:ff:a5:
         45:8a:9e:a4:32:07:4e:29:bf:1f:5c:f9:52:dd:bb:76:77:9d:
         58:81:7a:af:2c:a6:9d:4a:60:24:81:3c:8e:86:00:14:95:98:
         e1:bb:29:a4:96:6c:1b:ea:17:4b:bc:a6:ef:86:a3:13:1e:4d:
         2f:7a:45:fa:c1:7c:9f:04:36:f6:c7:72:48:31:46:4c:26:b3:
         d2:39:51:99:85:20:31:ab:fb:39:c9:ff:73:ce:45:a2:61:da:
         90:af:68:65:5b:cf:df:dc:1e:aa:55:26:24:39:b8:13:85:44:
         84:af:68:d1:c6:b9:0c:97:28:36:4e:be:0e:96:88:7c:9c:88:
         34:14:97:55:f5:8e:e1:3d:3c:9b:b9:a7:99:6e:d7:fb:a8:b1:
         ca:d0:14:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4WjI0OLcyiYroFZyk+nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMGNkZTRjNGY5MzI5OTk2MzY4MGQ2YzRmYzA2MDRmN2M4
NDI0M2IwHhcNMjUxMDI1MDEwMDE2WhcNMjUxMDI2MDEwMDE2WjAzMTEwLwYDVQQD
Eyg2M2RiNmJhMjdkZGIxNzRmZTZkOTVmNmQ1MmFkZjdmODZhZTM5M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ha4ejLEmPuqttjsrKowwZmY8UvB
Na/TCfyz8oDsdw1PQvovU60i0xH8ooGrBmyxngRkf+Tob35UH4iuPcNwNEWGvBVO
W2a4luDiulb82N6rbPa4bUhCa5sGwHi1ktrUTZ7/ANU96Gj/jKWZX3sd+C//NrP/
feQLEos9HM79/g9IyEj+xDwJBvSRl8KimrH1WpBumC0K19XaoCOMbCvaKhmbz3BY
DpFLgk3Ugur9nwkVtB5Fz9MIYNbmuHt7I/3Rb706JGT5sdnaUdW+VSXt/wTXTIQU
8Mfuu7Ys+LLZrrk418GClotbzJJEXlXfFSdHJXyyjdWHZVcBTMS5+gh78QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPba6J92xdP5tlfbVKt9/hq45O5MB8GA1UdIwQY
MBaAFEsM3kxPkymZY2gNbE/AYE98hCQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82YTNiYjctNzA2Ny00MmU4LTgwOTct
ODk2MjBjMjUxNTBlLzEvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi82YTNiYjctNzA2Ny00MmU4LTgwOTctODk2MjBjMjUxNTBl
LzEvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxlekca+
Bx+EhploD4jmehMf+5PvR22Vv7uZt3mmY+5I4my9JlcDXlEzdZpEBrslORp74ipm
ga5OcLvLllFHtjl8t2al6zIxZhdlvH/ftZY9Y7Aos110tIlpigJfDkDE8pYu4n46
Y9ETyv+lRYqepDIHTim/H1z5Ut27dnedWIF6ryymnUpgJIE8joYAFJWY4bsppJZs
G+oXS7ym74ajEx5NL3pF+sF8nwQ29sdySDFGTCaz0jlRmYUgMav7Ocn/c85FomHa
kK9oZVvP39weqlUmJDm4E4VEhK9o0ca5DJcoNk6+DpaIfJyINBSXVfWO4T08m7mn
mW7X+6ixytAUyg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 05:10:18 2025 by rpki-client