Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          qedn/GtSwP9DQUAbWawTgyBhD/SuWLCZRPKcQr33ElI=
Subject key identifier:   9D:1A:04:74:F8:57:B1:B7:AE:1F:98:E0:38:55:E8:C4:31:A2:84:F3
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       01975046327CBB451A47F145DB232CD29100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 16:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:07 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: a8btJJXjj2xX8+FyC17aD0IUUxk/vMENevpvOGwvMyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:32:7c:bb:45:1a:47:f1:45:db:23:2c:d2:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Jun  8 16:01:07 2025 GMT
            Not After : Jun  9 16:01:07 2025 GMT
        Subject: CN=9d1a0474f857b1b7ae1f98e03855e8c431a284f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:ab:e2:b9:4a:f9:59:f7:28:9f:b6:35:a0:
                    47:d8:cc:f9:cc:c8:2c:74:92:ec:66:14:f7:a0:c4:
                    cd:0f:25:d5:06:b3:a0:c4:e0:30:52:96:75:4f:31:
                    4f:3f:97:c0:96:38:96:cf:d5:cd:4a:72:12:2c:0f:
                    15:fb:eb:39:58:c2:c7:97:7f:da:15:5f:a1:da:d9:
                    bc:99:fc:5a:ea:e3:5a:00:8f:b0:9b:a8:8f:5a:f2:
                    ac:37:1b:d9:0b:4b:72:16:7d:55:84:b6:f0:50:dc:
                    9f:b5:50:c4:86:c2:f4:a1:0f:06:98:2f:54:3f:9b:
                    17:25:29:6a:02:da:64:74:8c:fd:b3:fe:ff:13:7f:
                    bd:d8:d8:2c:88:96:3a:f5:da:37:93:49:b0:9d:28:
                    17:dd:b5:2c:bd:b9:8a:66:9d:19:5b:4e:a4:f5:3f:
                    18:9e:64:6b:26:be:54:81:ae:5f:0f:2d:c1:4d:dc:
                    0e:7d:68:e8:64:3d:19:72:12:2f:9f:ee:18:ce:f9:
                    83:ec:19:0d:9f:21:54:b3:ae:ee:bf:d7:37:b3:d8:
                    1d:be:02:bf:e9:c1:65:a4:87:60:df:4c:5c:8d:46:
                    9f:16:ff:4b:f5:9c:7e:f0:b8:ab:1f:97:cc:f1:56:
                    40:dd:c6:3d:f3:7b:28:65:9e:fd:81:44:86:62:27:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:04:74:F8:57:B1:B7:AE:1F:98:E0:38:55:E8:C4:31:A2:84:F3
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:d6:d8:05:18:bf:47:10:81:6f:5a:18:90:df:a8:6b:29:
         84:81:92:2c:ca:c5:0b:83:fd:78:99:d2:90:fb:a0:e8:13:b4:
         27:bb:c2:b2:84:49:1c:6a:d1:5b:39:6f:ec:5e:c2:43:14:62:
         0e:ab:50:9f:4e:4b:0c:fb:c2:0d:38:80:81:f9:1a:23:6b:4b:
         59:af:40:c1:23:82:47:7f:17:1b:60:54:c3:25:bb:bd:d2:ac:
         c1:51:a2:e8:bc:33:ae:09:7d:66:5a:37:01:e8:10:ae:2a:d7:
         f5:1b:29:ac:a5:11:a0:f6:54:cc:b3:24:84:b9:86:54:22:88:
         cc:2f:29:01:cf:59:36:22:75:79:d8:70:0f:a7:ed:9b:6e:de:
         d9:42:6b:7f:6d:e6:4e:92:ba:3e:36:9d:12:19:70:d3:48:cb:
         60:ad:8f:f1:0c:87:b1:4a:4f:f6:47:6f:99:a1:03:d2:91:c6:
         44:9f:5b:ff:4a:9b:ab:c9:e4:b6:b3:4f:19:1b:b1:27:9a:9e:
         e7:56:fa:81:59:b3:fb:84:3a:fc:ea:ab:85:d5:9b:41:4c:f3:
         c8:24:92:bd:47:8f:18:de:4a:3d:40:ae:c9:29:58:fe:5f:67:
         46:fa:9f:bd:68:8a:b2:17:3d:2c:8a:cd:81:68:96:7d:89:d4:
         5c:12:cd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:15 2025 by rpki-client