Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File:                     THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier:          rrOj2z1Yg4T7YhtS2+bZbyDDcANlGL3JyiEzGPfMgPY=
Subject key identifier:   DC:C6:6E:8A:81:C5:61:C7:69:74:9F:DE:7B:96:2C:69:FC:8F:37:1B
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer:       /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial:       0196C5DE9F82F4535562679DE521B79484A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 19:00:23 +0000
Manifest this update:     Mon 12 May 2025 19:00:23 +0000
Manifest next update:     Tue 13 May 2025 19:00:23 +0000
Files and hashes:         1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
                          2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: p8AOwh+oo5HVFKggj86aJGndAgxM+WMaOc5mXtolN1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:9f:82:f4:53:55:62:67:9d:e5:21:b7:94:84:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
        Validity
            Not Before: May 12 19:00:23 2025 GMT
            Not After : May 13 19:00:23 2025 GMT
        Subject: CN=dcc66e8a81c561c769749fde7b962c69fc8f371b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:17:0a:0d:dc:97:cf:b5:98:63:bd:57:63:
                    5b:56:bf:5e:48:93:57:f8:11:43:fb:e3:06:8a:18:
                    5d:04:5d:15:8d:53:a8:7e:1e:1f:99:df:eb:03:ce:
                    d0:5a:2a:eb:d0:eb:61:bc:d9:6c:b2:17:bc:9c:ac:
                    bd:4f:fe:53:60:d0:bd:2d:45:14:4b:b8:d9:bf:95:
                    50:df:eb:96:3b:95:d9:ea:6e:3e:48:5e:72:b7:96:
                    2b:3e:88:f4:1a:14:47:42:f5:f5:99:f9:ed:5c:82:
                    3b:51:4a:7e:e0:7b:38:b1:7e:16:25:9b:35:ac:f6:
                    12:08:d6:fa:d2:54:e0:6d:d4:53:46:0d:14:44:16:
                    28:83:3b:73:87:0e:2e:d8:c1:9f:b0:aa:c1:16:8d:
                    4e:ac:be:1f:e9:2e:98:c7:f6:62:09:61:d1:b1:99:
                    b0:24:43:32:31:52:e5:94:1e:9f:45:8c:23:99:6b:
                    60:52:da:a8:e2:3e:17:d6:ff:76:9b:f6:61:f2:70:
                    b0:57:9b:5f:2f:57:13:1a:35:fe:60:1b:df:77:c3:
                    6c:40:75:7f:07:bc:3c:91:fe:74:a6:1c:21:8f:cb:
                    d2:a5:35:19:eb:6b:1b:ef:54:7a:93:7a:cc:9c:4b:
                    fe:5b:bd:b3:f2:cf:eb:3c:0f:67:57:4b:64:8c:d7:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C6:6E:8A:81:C5:61:C7:69:74:9F:DE:7B:96:2C:69:FC:8F:37:1B
            X509v3 Authority Key Identifier:
                keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:06:c7:77:73:25:9f:47:ef:6b:c0:fc:4b:f2:24:d1:81:
         50:f5:56:af:f6:84:97:72:60:50:9e:7e:2c:19:95:90:75:c6:
         83:73:7b:c0:e5:65:58:4f:aa:f0:a2:d0:93:4f:97:9d:4c:27:
         43:9b:9f:6f:9c:db:27:5e:4e:cd:43:18:fa:a7:bf:b4:1b:c3:
         99:d8:6f:eb:ba:a3:32:53:5c:b6:60:5c:19:37:af:d9:0f:14:
         5b:cd:dc:4d:df:a9:bf:6c:e0:3c:fe:b9:dd:34:c1:b6:70:3b:
         84:5f:ab:b9:20:61:24:bb:ac:c0:44:f9:97:ce:da:ce:cb:c5:
         f7:a1:78:1b:75:c6:50:d3:67:11:9f:44:b0:de:ec:e4:3f:4c:
         4a:45:d1:63:6a:2b:98:a2:c2:28:7a:cb:43:23:60:75:19:cf:
         e3:26:f0:f4:e2:ea:2c:6a:4d:44:c3:1a:67:4f:f4:f0:b9:a4:
         e6:4a:63:fa:18:a0:56:62:60:a3:8d:55:fb:36:30:74:46:17:
         8f:dd:ab:ba:63:33:ac:fa:2f:6a:8e:e4:43:d1:de:d6:7f:28:
         ab:7a:1e:e4:1c:ac:d6:c1:90:cd:ea:0a:07:9f:f2:e0:80:51:
         9d:0f:24:84:02:3d:29:e6:19:d7:81:c1:40:c8:7e:88:8e:fd:
         5e:01:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:40 2025 by rpki-client