Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File:                     THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier:          9DzeAKVUqD8YgMlYKRRU/4/3DDgowrne+3DVNvyDcEs=
Subject key identifier:   B6:1E:3A:A9:CC:7B:A5:89:BA:F4:BC:F1:9C:DB:C5:19:60:CD:C7:36
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer:       /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial:       0198481B81FD2CD10BCF4604D0FA6181D744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 19:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:18 +0000
Files and hashes:         1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
                          2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: AIiDwR18dR712YWZVZlmcrW3MN6Z5UkJrsGdXWODZLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:81:fd:2c:d1:0b:cf:46:04:d0:fa:61:81:d7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
        Validity
            Not Before: Jul 26 19:00:18 2025 GMT
            Not After : Jul 27 19:00:18 2025 GMT
        Subject: CN=b61e3aa9cc7ba589baf4bcf19cdbc51960cdc736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:8e:53:1d:84:77:4c:25:f5:6b:c6:d6:28:
                    69:75:c7:fc:4f:bd:c8:e0:22:ef:f4:e7:b4:a1:53:
                    09:34:92:08:60:fd:d1:7b:9e:07:29:19:e6:91:24:
                    e0:c0:9b:21:15:28:7a:29:16:8c:bf:75:d5:93:c3:
                    6f:5b:80:24:1d:e6:78:6a:8b:bd:66:bd:ef:c7:ba:
                    0d:2e:9e:49:0a:f5:57:af:de:20:8b:89:fa:8f:56:
                    c0:b2:64:85:a5:4a:46:9a:24:fd:55:68:86:12:5b:
                    96:42:6c:c3:77:09:d4:32:50:6b:cb:3c:54:b1:37:
                    6c:67:94:00:29:6d:df:df:fc:7f:22:44:11:3c:06:
                    1e:df:16:fd:ad:80:88:b8:3f:79:f5:2b:5e:ae:85:
                    05:c5:55:18:20:9f:24:8c:a5:fa:93:2f:02:1d:17:
                    ed:74:43:63:37:c1:aa:30:17:07:b1:30:45:30:8c:
                    85:30:d2:45:75:eb:75:a0:59:56:cc:83:4e:d7:07:
                    fc:23:f7:f6:95:7b:80:3f:c6:4f:d8:06:07:55:39:
                    6d:91:c0:ea:b0:b2:8c:f2:16:74:6f:fc:8d:f7:75:
                    19:37:3f:78:6d:a6:22:6d:be:4e:e5:cb:19:bd:76:
                    4a:f7:c2:70:89:7d:24:ef:19:73:9c:aa:68:23:42:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:3A:A9:CC:7B:A5:89:BA:F4:BC:F1:9C:DB:C5:19:60:CD:C7:36
            X509v3 Authority Key Identifier:
                keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0e:15:38:65:19:5c:20:88:4e:6d:b4:f7:73:21:d0:de:2e:
         98:55:fb:d8:69:6c:4f:da:0f:4a:ca:13:e3:ed:aa:4b:74:cb:
         5b:bb:98:11:ef:10:00:8a:01:ea:a1:d4:23:0a:fe:10:cb:2e:
         11:a8:e3:73:c5:56:73:78:54:d3:dd:fc:40:e2:75:bb:49:fe:
         df:90:9c:1c:96:02:42:02:b8:f8:ba:cc:d6:87:9b:58:1b:05:
         08:0e:a8:a6:fa:98:aa:08:d9:bf:7c:6e:b5:bc:08:dc:00:a3:
         a0:4e:66:7c:dc:94:fd:05:1f:31:e0:1b:73:83:10:3e:08:55:
         f4:c1:06:6e:9d:fa:f8:3c:6c:41:4c:5c:cd:c8:46:ab:d5:69:
         bb:38:cb:3f:d5:a7:cd:b9:68:b7:27:53:da:96:38:eb:6c:65:
         fe:18:ac:da:64:f5:26:89:c2:c0:99:c9:80:a9:a4:e3:77:68:
         9e:db:e1:ec:e8:89:94:30:fc:4f:db:3c:14:2d:f1:ca:cd:41:
         d9:c2:8d:e1:d0:51:ff:e7:2c:21:9d:76:78:ea:04:1e:41:d0:
         f6:87:a0:cf:ac:94:2d:43:00:72:d2:08:12:b3:b4:24:a2:bd:
         a9:e6:4c:27:ab:67:97:89:24:d2:b1:4b:24:2d:89:d1:93:01:
         38:eb:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:17:30 2025 by rpki-client