Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File:                     THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier:          FBtIt8vC03MjkdQi5bUCAQ897USDHlPkj1DSnIrQnV4=
Subject key identifier:   FB:5A:F8:F2:1C:F7:C7:6A:07:58:DB:06:64:47:C8:09:BC:C7:7A:B6
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer:       /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial:       01974779B9C7573671710E0F2C9DAA77167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number:          0A15
Signing time:             Fri 06 Jun 2025 23:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:49 +0000
Files and hashes:         1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: dTUdFZbacGtIsKCng3eY6h4ldoOag2yCvNfZ/4qyXvg=)
                          2: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (hash: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:b9:c7:57:36:71:71:0e:0f:2c:9d:aa:77:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
        Validity
            Not Before: Jun  6 23:00:49 2025 GMT
            Not After : Jun  7 23:00:49 2025 GMT
        Subject: CN=fb5af8f21cf7c76a0758db066447c809bcc77ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:82:3a:cd:5e:69:97:d1:6a:c7:ab:91:be:41:
                    56:d7:57:16:05:90:d6:74:78:cd:b0:b2:aa:44:9a:
                    e4:59:0f:b2:d4:b9:f8:52:3d:c9:58:63:38:81:22:
                    6d:a9:3b:cb:1e:53:0b:fc:9a:39:8e:58:3e:13:96:
                    60:38:89:9d:41:14:e8:e6:fe:29:d4:72:20:fb:b0:
                    15:f6:79:ec:fd:26:e3:d4:56:d9:90:af:35:28:22:
                    76:4f:27:f2:15:72:db:7d:4a:ac:04:2c:1f:c3:bd:
                    ec:06:b8:fd:3a:19:fc:ef:da:49:0a:7a:04:2e:05:
                    c3:ff:94:32:4b:8b:2d:05:2f:34:77:c5:58:11:5b:
                    9a:85:df:00:11:79:62:d8:b3:fb:6c:36:be:74:dd:
                    38:54:4b:ae:77:87:d5:47:ea:b0:0f:97:58:41:f5:
                    c5:3c:04:c8:f7:06:cc:4a:6d:f1:ef:e6:8c:50:dd:
                    9d:da:9b:b7:a5:42:1b:9b:35:7e:05:00:04:66:35:
                    64:e9:6f:f9:49:08:29:c7:9c:15:31:76:a3:9f:60:
                    20:c1:5e:d6:b3:de:0f:cf:51:25:e2:85:19:1e:c9:
                    d0:a8:ca:42:ea:f1:a9:4a:08:80:0f:c2:9b:12:6b:
                    09:01:93:9f:2c:33:13:32:c2:5f:f3:a4:01:10:a5:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:F8:F2:1C:F7:C7:6A:07:58:DB:06:64:47:C8:09:BC:C7:7A:B6
            X509v3 Authority Key Identifier:
                keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:43:a9:0e:66:21:b3:a3:b8:a3:61:67:ea:f9:56:6c:a0:fa:
         cc:48:fe:6c:bb:63:ed:a7:2f:d5:27:01:93:19:fb:9a:00:8a:
         8d:66:b0:82:0b:2b:93:25:54:01:d3:db:0b:00:c6:ca:24:da:
         78:b7:9b:c6:a9:d7:a9:93:0c:f2:e2:ee:89:39:53:34:f9:29:
         cc:3d:ee:94:6d:ac:d8:dd:79:85:8e:c2:91:72:a5:a2:6b:a6:
         08:9e:3e:d2:62:be:dc:c0:c6:11:ca:43:9b:26:67:ea:a8:fa:
         79:e7:c1:e3:22:d8:da:ef:97:e2:49:2f:52:48:d4:66:54:20:
         9f:3e:5a:ee:10:28:93:74:59:88:14:fe:86:ae:f8:7b:e8:b7:
         e9:ad:1a:bd:c6:91:4a:e0:71:a3:59:fe:a0:c8:00:01:5f:9d:
         f2:bd:19:94:9d:f8:53:f7:ed:08:39:47:83:ba:3c:26:f3:78:
         2d:88:e0:b4:b2:48:e9:a2:20:cb:a3:f3:bb:83:9f:ee:66:30:
         d9:63:f6:14:20:92:4a:99:e1:2f:7d:a8:3d:43:42:2a:b8:4e:
         8b:46:72:3b:5a:d7:25:a7:ad:9e:76:eb:dc:18:be:43:5d:2a:
         13:f2:39:26:f9:6a:55:07:7c:b8:91:ce:2c:6f:07:3b:ea:7f:
         07:a7:5d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHebnHVzZxcQ4PLJ2qdxZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjUwNjA2MjMwMDQ5WhcNMjUwNjA3MjMwMDQ5WjAzMTEwLwYDVQQD
EyhmYjVhZjhmMjFjZjdjNzZhMDc1OGRiMDY2NDQ3YzgwOWJjYzc3YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4II6zV5pl9Fqx6uRvkFW11cWBZDW
dHjNsLKqRJrkWQ+y1Ln4Uj3JWGM4gSJtqTvLHlML/Jo5jlg+E5ZgOImdQRTo5v4p
1HIg+7AV9nns/Sbj1FbZkK81KCJ2TyfyFXLbfUqsBCwfw73sBrj9Ohn879pJCnoE
LgXD/5QyS4stBS80d8VYEVuahd8AEXli2LP7bDa+dN04VEuud4fVR+qwD5dYQfXF
PATI9wbMSm3x7+aMUN2d2pu3pUIbmzV+BQAEZjVk6W/5SQgpx5wVMXajn2AgwV7W
s94Pz1El4oUZHsnQqMpC6vGpSgiAD8KbEmsJAZOfLDMTMsJf86QBEKX/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPta+PIc98dqB1jbBmRHyAm8x3q2MB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEOpDmYh
s6O4o2Fn6vlWbKD6zEj+bLtj7acv1ScBkxn7mgCKjWawggsrkyVUAdPbCwDGyiTa
eLebxqnXqZMM8uLuiTlTNPkpzD3ulG2s2N15hY7CkXKlomumCJ4+0mK+3MDGEcpD
myZn6qj6eefB4yLY2u+X4kkvUkjUZlQgnz5a7hAok3RZiBT+hq74e+i36a0avcaR
SuBxo1n+oMgAAV+d8r0ZlJ34U/ftCDlHg7o8JvN4LYjgtLJI6aIgy6Pzu4Of7mYw
2WP2FCCSSpnhL32oPUNCKrhOi0ZyO1rXJaetnnbr3Bi+Q10qE/I5JvlqVQd8uJHO
LG8HO+p/B6dduQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:20:30 2025 by rpki-client