Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File:                     TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier:          4N8xxwg+81BRZl5eKcye1dAGeDpX7VVEaN4UNjwwhHw=
Subject key identifier:   76:E4:50:3A:BB:7F:19:D0:A5:5A:75:74:94:44:0D:98:E9:EE:D5:AD
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer:       /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial:       0197469DC88B6A8EFABFEB949232CF0519F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number:          0F38
Signing time:             Fri 06 Jun 2025 19:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:35 +0000
Files and hashes:         1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: KKb3Pmcpiit8NYjQKyLLxTPnWixYnUtuy4guoJKqkNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c8:8b:6a:8e:fa:bf:eb:94:92:32:cf:05:19:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
        Validity
            Not Before: Jun  6 19:00:35 2025 GMT
            Not After : Jun  7 19:00:35 2025 GMT
        Subject: CN=76e4503abb7f19d0a55a757494440d98e9eed5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:b5:d3:93:08:20:92:de:6c:d0:03:e7:e2:
                    80:33:2c:af:7a:ee:23:a1:23:85:f1:94:8b:99:99:
                    60:80:36:ce:45:23:36:41:ad:1d:8c:d0:db:f2:fc:
                    fb:4c:f0:80:35:2b:d5:56:a9:43:04:b7:d0:ab:3b:
                    78:b6:95:2a:8b:c0:62:ca:50:91:b0:e2:92:bf:5e:
                    d1:cd:64:f3:9c:b6:22:0f:f4:32:d2:8c:aa:61:3b:
                    a1:16:2e:15:a5:d1:ba:f2:ab:ba:e3:87:87:c0:98:
                    63:77:cf:a7:7b:cf:fb:04:d4:36:1d:e4:8c:e4:13:
                    0e:0d:47:df:d1:ec:86:a1:15:a2:aa:ff:c6:7d:00:
                    80:30:10:9c:6f:e5:b9:87:b6:55:b1:41:4b:81:e4:
                    fa:ea:b1:84:1d:44:87:32:58:06:47:87:a5:56:4b:
                    5e:df:59:6e:0a:d0:72:23:31:f6:5b:e5:8f:ba:20:
                    d6:d8:3d:0a:e5:04:aa:39:16:e4:4e:e7:c2:55:1b:
                    f0:83:e4:63:bc:86:40:e4:9e:29:22:bf:d9:56:39:
                    ca:b7:f5:06:8a:9b:64:e5:1a:f0:b2:d2:ae:25:ce:
                    24:e2:44:92:4a:4d:53:55:aa:a6:a9:fc:18:bf:7c:
                    62:27:dc:2e:d0:e0:79:b6:34:2f:3f:d7:cc:6e:04:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:50:3A:BB:7F:19:D0:A5:5A:75:74:94:44:0D:98:E9:EE:D5:AD
            X509v3 Authority Key Identifier:
                keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:f5:fe:91:2e:26:29:7f:d9:a8:9c:a5:c7:9d:c3:cc:cd:09:
         53:ce:71:3f:02:d8:99:f9:2e:6b:57:d1:b9:c6:50:f4:02:95:
         71:3b:98:78:12:7a:79:7b:e2:7c:9e:ec:37:39:80:d3:f0:13:
         f4:b8:90:98:02:87:e6:c8:de:16:68:8d:55:50:45:4d:7b:ad:
         5b:f8:e5:f0:d9:db:52:90:31:71:8e:3b:8c:c9:44:c6:13:34:
         28:77:30:38:b0:97:27:91:e2:bf:1e:30:de:3a:4c:91:cf:61:
         9e:ec:f3:a5:a9:93:92:e0:58:5a:f2:68:62:05:02:4b:b6:bc:
         21:4d:0e:70:48:03:32:01:1a:8f:bc:96:f0:67:e9:3f:83:57:
         fe:09:e8:36:c9:5b:0f:e3:02:d6:87:d7:b8:30:d0:68:d7:d1:
         7f:7c:42:23:b6:65:49:70:fc:85:c1:fd:29:b6:0e:bd:57:a9:
         d1:82:21:a6:d1:c7:03:8c:af:62:5c:5a:00:1b:ba:e6:ad:f5:
         d0:0a:33:57:50:5c:3e:4e:09:ee:ec:59:ad:34:d5:d8:b5:1c:
         21:b4:55:83:6b:e5:fd:cb:62:a9:18:dd:b8:62:4f:4b:37:c1:
         cd:11:8e:c1:50:cc:31:81:3c:e7:2b:f9:de:bb:d0:0b:5a:d5:
         84:1b:9f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnciLao76v+uUkjLPBRn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNWZkMmMzZGUxMDU5MzRjZjBmZjQ5ZDI2ZDlkYzg4NThj
ZTVkZDEwHhcNMjUwNjA2MTkwMDM1WhcNMjUwNjA3MTkwMDM1WjAzMTEwLwYDVQQD
Eyg3NmU0NTAzYWJiN2YxOWQwYTU1YTc1NzQ5NDQ0MGQ5OGU5ZWVkNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC2105MIIJLebNAD5+KAMyyveu4j
oSOF8ZSLmZlggDbORSM2Qa0djNDb8vz7TPCANSvVVqlDBLfQqzt4tpUqi8BiylCR
sOKSv17RzWTznLYiD/Qy0oyqYTuhFi4VpdG68qu644eHwJhjd8+ne8/7BNQ2HeSM
5BMODUff0eyGoRWiqv/GfQCAMBCcb+W5h7ZVsUFLgeT66rGEHUSHMlgGR4elVkte
31luCtByIzH2W+WPuiDW2D0K5QSqORbkTufCVRvwg+RjvIZA5J4pIr/ZVjnKt/UG
iptk5RrwstKuJc4k4kSSSk1TVaqmqfwYv3xiJ9wu0OB5tjQvP9fMbgTUKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbkUDq7fxnQpVp1dJREDZjp7tWtMB8GA1UdIwQY
MBaAFExf0sPeEFk0zw/0nSbZ3IhYzl3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEt
MjA4NTY1YmIyZDYzLzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEtMjA4NTY1YmIyZDYz
LzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PX+kS4m
KX/ZqJylx53DzM0JU85xPwLYmfkua1fRucZQ9AKVcTuYeBJ6eXvifJ7sNzmA0/AT
9LiQmAKH5sjeFmiNVVBFTXutW/jl8NnbUpAxcY47jMlExhM0KHcwOLCXJ5Hivx4w
3jpMkc9hnuzzpamTkuBYWvJoYgUCS7a8IU0OcEgDMgEaj7yW8GfpP4NX/gnoNslb
D+MC1ofXuDDQaNfRf3xCI7ZlSXD8hcH9KbYOvVep0YIhptHHA4yvYlxaABu65q31
0AozV1BcPk4J7uxZrTTV2LUcIbRVg2vl/ctiqRjduGJPSzfBzRGOwVDMMYE85yv5
3rvQC1rVhBufDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:43 2025 by rpki-client