Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          XoquCJURnUgGIFem6I+HlozTv1GQ3/STuy/+TjtZbOY=
Subject key identifier:   C2:8D:11:B2:86:93:28:78:9E:16:53:58:B3:F3:A5:7D:D6:37:A5:E5
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       01975D5CFECA01FF8D317E6E1DAB87CB2944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          0403
Signing time:             Wed 11 Jun 2025 05:01:04 +0000
Manifest this update:     Wed 11 Jun 2025 05:01:04 +0000
Manifest next update:     Thu 12 Jun 2025 05:01:04 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: L/M2SShcAOikV+w2JmMuBLRPlKWRIuOg93ZpsMYYhmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:5c:fe:ca:01:ff:8d:31:7e:6e:1d:ab:87:cb:29:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Jun 11 05:01:04 2025 GMT
            Not After : Jun 12 05:01:04 2025 GMT
        Subject: CN=c28d11b2869328789e165358b3f3a57dd637a5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:ce:be:53:16:5b:49:db:b2:06:f2:55:f2:
                    3c:bd:b1:a6:fb:41:7b:7b:bf:f4:c0:fc:41:8c:51:
                    9c:ae:21:25:73:da:ff:e4:5f:44:5f:e7:78:cb:07:
                    fb:6c:20:08:f5:75:ee:c0:f3:f0:d9:c0:46:9e:5e:
                    58:12:23:38:71:85:b0:a9:7e:f1:74:20:f5:ea:16:
                    82:4a:09:9f:b0:b4:6b:e8:9c:24:91:ca:7e:eb:83:
                    af:3b:9e:1a:10:76:85:f8:98:62:c5:4b:8b:2a:18:
                    05:61:15:fd:05:4c:d3:01:63:e9:20:ff:1e:6e:9e:
                    7c:ab:85:68:49:67:57:ff:14:73:b1:1d:fd:ca:f1:
                    19:09:55:06:f4:45:4b:b2:e8:0e:e9:75:88:9c:2b:
                    6b:42:c6:0c:6d:37:80:65:55:00:a4:4a:50:44:6a:
                    e9:60:0b:51:cd:44:79:32:df:89:cf:21:29:06:5e:
                    38:f6:84:f8:a7:ea:a0:63:62:54:a7:5e:c8:2b:99:
                    17:14:c1:62:f4:b1:41:7e:c8:84:bf:17:00:22:09:
                    84:30:74:7d:20:69:98:70:5f:65:26:35:4f:c1:e7:
                    e7:0f:f4:28:5c:9b:8c:10:fe:2c:99:ca:97:d2:d3:
                    17:75:e8:b7:7d:17:03:c8:75:06:73:5c:42:17:4a:
                    b8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:11:B2:86:93:28:78:9E:16:53:58:B3:F3:A5:7D:D6:37:A5:E5
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:41:33:43:79:80:ed:3f:9d:1c:b1:2a:b5:05:dc:1c:c9:
         b5:c9:e0:ba:06:01:a9:d1:ca:cb:ad:71:db:8a:c1:1c:3a:30:
         1c:5a:c5:dd:93:4c:b3:69:c2:e5:49:a8:c8:35:e5:47:51:fe:
         34:2b:e6:34:54:4e:0b:ff:a1:29:40:60:f3:d2:5a:7e:a7:b1:
         92:41:ac:67:ea:e8:8b:80:d2:60:bf:2a:e1:95:9d:b3:a6:35:
         69:d3:17:66:ae:fa:6b:2d:65:da:4a:4e:42:8c:ac:d3:24:95:
         92:ba:de:12:06:a9:4f:72:1b:f0:df:9e:d2:20:a7:dc:4b:0f:
         89:81:56:8a:7a:ae:2c:ab:b1:e5:5c:33:25:13:3a:4d:6a:82:
         3b:55:46:3b:35:68:6b:89:45:35:0f:9a:29:ec:58:56:4d:d0:
         06:1d:ae:7a:60:35:15:99:cc:9e:19:6e:b1:f8:40:e6:92:74:
         a4:08:6b:1c:72:37:97:dd:80:a6:c0:c8:bf:bf:78:62:88:ab:
         cf:c3:46:1a:18:30:0e:d1:ed:0e:4a:a6:7d:21:98:a0:6b:70:
         62:94:1e:d4:48:27:7f:0d:92:d1:8f:46:99:8d:3f:b3:42:5f:
         1e:e4:1a:e4:17:07:95:75:ab:14:43:2a:e5:61:d7:3e:40:a2:
         30:98:ce:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddXP7KAf+NMX5uHauHyylEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDcxNWRiODgwNDI1NDRlMzg5MzE5YjVlZGMyOWQwZTE1
NmM1YmUwHhcNMjUwNjExMDUwMTA0WhcNMjUwNjEyMDUwMTA0WjAzMTEwLwYDVQQD
EyhjMjhkMTFiMjg2OTMyODc4OWUxNjUzNThiM2YzYTU3ZGQ2MzdhNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW7OvlMWW0nbsgbyVfI8vbGm+0F7
e7/0wPxBjFGcriElc9r/5F9EX+d4ywf7bCAI9XXuwPPw2cBGnl5YEiM4cYWwqX7x
dCD16haCSgmfsLRr6Jwkkcp+64OvO54aEHaF+JhixUuLKhgFYRX9BUzTAWPpIP8e
bp58q4VoSWdX/xRzsR39yvEZCVUG9EVLsugO6XWInCtrQsYMbTeAZVUApEpQRGrp
YAtRzUR5Mt+JzyEpBl449oT4p+qgY2JUp17IK5kXFMFi9LFBfsiEvxcAIgmEMHR9
IGmYcF9lJjVPwefnD/QoXJuMEP4smcqX0tMXdei3fRcDyHUGc1xCF0q4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKNEbKGkyh4nhZTWLPzpX3WN6XlMB8GA1UdIwQY
MBaAFEsHFduIBCVE44kxm17cKdDhVsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzkt
YmIzZDk5Yjk4YTllLzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzktYmIzZDk5Yjk4YTll
LzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncJBM0N5
gO0/nRyxKrUF3BzJtcngugYBqdHKy61x24rBHDowHFrF3ZNMs2nC5UmoyDXlR1H+
NCvmNFROC/+hKUBg89JafqexkkGsZ+roi4DSYL8q4ZWds6Y1adMXZq76ay1l2kpO
Qoys0ySVkrreEgapT3Ib8N+e0iCn3EsPiYFWinquLKux5VwzJRM6TWqCO1VGOzVo
a4lFNQ+aKexYVk3QBh2uemA1FZnMnhlusfhA5pJ0pAhrHHI3l92ApsDIv794Yoir
z8NGGhgwDtHtDkqmfSGYoGtwYpQe1Egnfw2S0Y9GmY0/s0JfHuQa5BcHlXWrFEMq
5WHXPkCiMJjOyw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:30:56 2025 by rpki-client