Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          Ji1CfOu/6VSfQEGOcpKpV5U3Y4PuPSgY8Pb231hX2uM=
Subject key identifier:   26:15:A7:2A:AA:6E:4B:0D:E9:3E:0F:03:8F:B5:CF:77:0D:85:6B:E6
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       019730BB1B0AF6BA83E543AC74063833C958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          1270
Signing time:             Mon 02 Jun 2025 13:00:57 +0000
Manifest this update:     Mon 02 Jun 2025 13:00:57 +0000
Manifest next update:     Tue 03 Jun 2025 13:00:57 +0000
Files and hashes:         1: 7FzoSqKZlb5kD6vPPTk2SfC27nM.roa (hash: 6aAGYHU1rCi9sNjHbIL9N9TC7WU4O97UeTWhOeOg/Oo=)
                          2: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          3: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: T2Mz1SdOJHSwGYMHC2RaH/hnlGmPEOHylBUS+IQAf4Q=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:30:bb:1b:0a:f6:ba:83:e5:43:ac:74:06:38:33:c9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Jun  2 13:00:57 2025 GMT
            Not After : Jun  3 13:00:57 2025 GMT
        Subject: CN=2615a72aaa6e4b0de93e0f038fb5cf770d856be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:4c:31:69:2b:1d:72:06:b7:55:b6:a4:04:
                    aa:b5:cf:b1:84:f4:54:a1:45:53:1f:c8:0b:43:c9:
                    f5:0c:05:8b:dd:1b:5a:0f:36:7d:23:be:e3:e3:ff:
                    9c:a8:50:2e:50:7d:bf:fa:5a:44:f4:41:ac:4a:26:
                    2c:74:34:d1:5f:f2:cb:0a:e6:cb:db:f5:e7:af:0b:
                    b3:64:98:27:92:a6:36:bc:d6:98:de:c3:ef:2f:43:
                    7e:24:1c:a7:07:76:d7:0a:f5:40:b8:09:1e:f2:52:
                    d1:06:2a:51:d2:6b:5e:19:12:ba:79:a9:3a:fe:77:
                    8f:d5:2d:4c:0b:55:85:13:cc:b6:77:d4:bc:f5:64:
                    e3:23:8d:52:86:73:3b:56:20:ce:db:ce:8f:33:63:
                    ea:ee:5e:15:dd:f2:20:68:81:87:f2:79:a3:57:e7:
                    47:3e:92:ec:64:60:2e:cb:a5:65:7e:75:52:fe:34:
                    3b:82:9d:fc:8c:d1:e6:32:8e:0a:ed:e5:f5:29:c2:
                    47:ce:9b:4e:65:9e:6f:a4:1b:8e:f7:ab:20:4b:47:
                    df:4f:d5:c6:24:2d:fb:98:80:c0:16:00:b4:cc:a2:
                    2f:94:3d:21:46:84:56:dd:e7:bb:7f:2a:23:8b:c2:
                    fb:26:b9:ef:b2:0c:c0:a7:d0:4a:84:ed:26:13:d7:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:A7:2A:AA:6E:4B:0D:E9:3E:0F:03:8F:B5:CF:77:0D:85:6B:E6
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e2:c4:24:a1:e9:36:d0:bc:e9:2d:fa:4d:02:13:6c:e5:05:
         31:94:cb:b8:b4:a8:8b:6f:86:a8:42:61:c6:5a:92:63:c6:f1:
         6f:4c:12:4b:e2:c5:6c:9a:71:e9:11:d5:d1:ca:1f:99:68:d1:
         fd:2c:17:3b:92:ec:2d:4f:4a:c3:e7:c0:7d:7b:5d:33:16:47:
         24:2f:e6:fc:7b:b3:e8:6f:cb:48:f9:71:15:4c:08:6a:c1:27:
         ce:4f:7b:24:66:1a:06:01:c6:a6:76:f7:d3:bc:f2:93:b8:b4:
         08:c0:9c:fb:b4:f6:77:bc:4a:5e:f8:50:94:a8:92:55:c8:8e:
         3a:26:11:d4:45:97:5f:4d:d7:d1:d0:ab:14:71:65:64:1f:47:
         8b:94:4c:79:bc:3d:1a:d3:70:d5:b8:90:42:a8:01:53:3b:9e:
         d0:32:91:e5:6d:8a:5f:cb:43:4c:fd:2f:2e:e7:09:21:26:71:
         c8:e4:25:07:1f:61:25:ad:58:2d:bc:bd:08:c6:8d:4f:ab:11:
         b1:ce:0d:f1:34:01:ab:15:ea:d0:3b:35:b9:90:95:d4:5c:3e:
         ff:a3:8d:9a:d7:52:22:73:e0:bc:2d:1c:af:11:9b:34:6a:87:
         31:e8:b1:2f:03:5d:0b:c7:85:4e:34:1b:3e:9f:b6:65:85:65:
         23:f2:d3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcwuxsK9rqD5UOsdAY4M8lYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk
ODVjZDYwHhcNMjUwNjAyMTMwMDU3WhcNMjUwNjAzMTMwMDU3WjAzMTEwLwYDVQQD
EygyNjE1YTcyYWFhNmU0YjBkZTkzZTBmMDM4ZmI1Y2Y3NzBkODU2YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eRMMWkrHXIGt1W2pASqtc+xhPRU
oUVTH8gLQ8n1DAWL3RtaDzZ9I77j4/+cqFAuUH2/+lpE9EGsSiYsdDTRX/LLCubL
2/XnrwuzZJgnkqY2vNaY3sPvL0N+JBynB3bXCvVAuAke8lLRBipR0mteGRK6eak6
/neP1S1MC1WFE8y2d9S89WTjI41ShnM7ViDO286PM2Pq7l4V3fIgaIGH8nmjV+dH
PpLsZGAuy6VlfnVS/jQ7gp38jNHmMo4K7eX1KcJHzptOZZ5vpBuO96sgS0ffT9XG
JC37mIDAFgC0zKIvlD0hRoRW3ee7fyoji8L7JrnvsgzAp9BKhO0mE9ecKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYVpyqqbksN6T4PA4+1z3cNhWvmMB8GA1UdIwQY
MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct
NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy
LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeLEJKHp
NtC86S36TQITbOUFMZTLuLSoi2+GqEJhxlqSY8bxb0wSS+LFbJpx6RHV0cofmWjR
/SwXO5LsLU9Kw+fAfXtdMxZHJC/m/Huz6G/LSPlxFUwIasEnzk97JGYaBgHGpnb3
07zyk7i0CMCc+7T2d7xKXvhQlKiSVciOOiYR1EWXX03X0dCrFHFlZB9Hi5RMebw9
GtNw1biQQqgBUzue0DKR5W2KX8tDTP0vLucJISZxyOQlBx9hJa1YLby9CMaNT6sR
sc4N8TQBqxXq0Ds1uZCV1Fw+/6ONmtdSInPgvC0crxGbNGqHMeixLwNdC8eFTjQb
Pp+2ZYVlI/LTvA==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:29:39 2025 by rpki-client