Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          lBqTKdH5YBl0wJipZqTvFj55ZJkwUJYdqjhHAFfJJsQ=
Subject key identifier:   DF:35:0B:D3:F9:88:18:D2:EF:4D:A6:02:85:85:31:DD:A6:FF:AD:81
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019A09700849ABED5141096850E462484D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          13EA
Signing time:             Wed 22 Oct 2025 01:02:08 +0000
Manifest this update:     Wed 22 Oct 2025 01:02:08 +0000
Manifest next update:     Thu 23 Oct 2025 01:02:08 +0000
Files and hashes:         1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: zHaZSAW4zM77yHMrPacI9xJkVpZQPkUN02RYEpCKpDU=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:70:08:49:ab:ed:51:41:09:68:50:e4:62:48:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Oct 22 01:02:08 2025 GMT
            Not After : Oct 23 01:02:08 2025 GMT
        Subject: CN=df350bd3f98818d2ef4da602858531dda6ffad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:3c:2a:69:19:94:84:75:12:86:c3:57:2f:
                    c2:b3:d1:88:c2:c3:d7:29:d4:05:66:b7:e1:d5:ca:
                    9c:5f:5b:4d:70:dd:e3:17:16:62:69:04:e1:93:b6:
                    6f:33:8b:eb:01:c2:74:8f:f6:0a:c4:66:06:f3:f6:
                    e5:38:52:4b:f7:b1:0d:22:09:88:df:ed:63:13:fa:
                    fe:7a:72:fa:a6:d0:8a:26:ed:87:ad:a2:95:f3:60:
                    e8:11:ce:26:60:1c:c8:49:2e:37:37:59:0f:3d:6b:
                    33:79:25:76:c3:f3:58:d1:12:c0:c5:c7:fd:8f:ab:
                    cc:0a:b8:79:d3:8a:ba:6b:69:85:c3:7e:1e:7c:9c:
                    62:00:e8:1f:70:c7:7d:d4:5d:68:0d:7c:78:43:cc:
                    a8:04:6f:93:9d:d4:0e:33:16:eb:89:da:c3:45:b3:
                    cd:38:de:f9:88:c0:0b:ac:2a:62:4f:3a:b3:06:e1:
                    84:5f:58:74:75:10:a0:3c:ff:1a:73:5a:97:b4:f5:
                    d2:ce:1c:66:c4:cc:63:18:42:66:04:fb:91:52:9f:
                    44:6d:bf:d2:70:eb:37:77:d5:15:47:31:bb:67:24:
                    94:65:13:bd:40:bd:bb:d5:ff:87:09:86:82:5d:fe:
                    1e:38:b0:2a:de:40:d4:61:e4:e6:64:d6:17:33:dc:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:0B:D3:F9:88:18:D2:EF:4D:A6:02:85:85:31:DD:A6:FF:AD:81
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ba:05:6f:f3:58:54:3a:32:d2:68:8e:5a:64:23:01:fd:90:
         7a:3b:80:18:c9:d4:8f:68:4e:31:87:64:1a:8a:9e:a2:9d:8c:
         d8:d1:69:90:e4:9b:36:d0:70:8d:25:69:01:8d:71:0c:69:8b:
         9d:06:2f:8f:3d:18:c8:1d:81:fb:1a:02:54:e3:bc:cb:7f:68:
         78:7c:0c:d4:d1:56:bb:27:f5:2a:c9:b4:2d:50:2d:78:c1:6d:
         15:14:ad:1a:3d:c1:b7:24:62:29:02:a5:1c:4f:5f:93:59:31:
         81:cf:9e:fb:8e:82:7d:2a:75:c0:d3:a0:d5:4d:5b:53:6e:f0:
         5b:71:c9:80:fd:83:65:5c:44:77:2f:8f:e5:b4:bf:27:3b:f0:
         d0:89:48:07:13:45:af:3b:59:3d:d6:c2:54:37:e9:12:c6:a9:
         7a:e4:36:1b:0d:fb:f5:86:50:43:d0:32:3b:00:dc:f8:b4:ef:
         b0:82:2f:a5:a4:bf:6b:30:88:44:c2:d4:5e:3d:24:e8:60:77:
         45:03:a7:d4:51:42:a7:ff:d6:e3:07:d5:0b:99:a5:be:22:0c:
         ba:29:9a:94:13:c0:32:88:39:cb:f8:52:85:ca:64:62:4d:7a:
         c7:20:7b:75:1a:ae:5a:02:e3:49:10:3a:e7:d0:c8:7d:7b:cd:
         d7:53:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:24:41 2025 by rpki-client