Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File:                     HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier:          HmSvBgx/O5eLzHsS2UVMrE0c9JKSi1wIBsbaPuON4NE=
Subject key identifier:   F4:74:17:BD:B4:01:16:E4:16:D6:85:ED:E5:2A:77:47:63:BD:A7:83
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer:       /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial:       019775D28F999306CD05E5415654099FF9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number:          11E2
Signing time:             Sun 15 Jun 2025 23:00:23 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:23 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:23 +0000
Files and hashes:         1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
                          2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: h95SUTcL4l3dFnBOPyWdrj/h2+4Md+JRWHb2hEzTo7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:8f:99:93:06:cd:05:e5:41:56:54:09:9f:f9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
        Validity
            Not Before: Jun 15 23:00:23 2025 GMT
            Not After : Jun 16 23:00:23 2025 GMT
        Subject: CN=f47417bdb40116e416d685ede52a774763bda783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:eb:61:06:e2:38:7a:07:a9:55:cd:47:28:
                    08:fa:b0:33:7c:80:e0:ab:54:f3:58:c0:ae:ab:df:
                    b9:a9:5c:1d:c3:7d:af:fc:84:a0:ad:3a:18:e3:b0:
                    e7:24:f1:c1:bd:d7:2c:d5:cc:33:c1:eb:ad:a2:f1:
                    18:44:a1:21:96:82:d3:90:e2:35:41:20:44:73:ea:
                    e7:27:c4:fd:3d:b8:fd:05:dc:c5:16:d7:36:4a:71:
                    01:dd:47:65:41:79:d6:8d:29:0e:80:54:a1:0f:c4:
                    fa:66:1f:1d:f1:48:3b:6c:f6:33:c3:a2:f8:91:99:
                    f1:f3:0c:32:39:4f:5f:4b:02:3d:78:75:44:4b:65:
                    37:45:03:37:ed:cf:92:99:19:0d:32:e1:4e:b7:fd:
                    c1:d6:02:9b:4a:59:c8:29:48:48:8c:c0:5d:9b:89:
                    53:2f:83:48:02:58:56:d8:82:30:ba:eb:18:46:8a:
                    e1:6b:f6:b9:c8:b5:3e:8d:6f:ac:68:2b:4e:f6:a8:
                    5f:60:f2:e7:60:9a:26:79:a0:ad:d4:1c:0d:03:73:
                    e2:b3:f1:2c:38:16:1b:7a:bf:83:31:7d:28:48:1a:
                    ed:4b:74:4c:5e:65:d3:41:21:b5:1e:7e:d5:8a:3c:
                    ea:9e:e3:4c:ff:e8:a8:26:ed:db:95:4d:08:d6:5e:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:17:BD:B4:01:16:E4:16:D6:85:ED:E5:2A:77:47:63:BD:A7:83
            X509v3 Authority Key Identifier:
                keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:35:ab:b4:7d:f2:27:08:06:db:b9:a8:12:b5:90:00:43:
         ad:e3:02:81:2e:ed:8c:da:1c:cd:b1:75:c3:b3:9f:5e:aa:bb:
         77:88:d0:d1:be:90:10:eb:dd:92:95:76:f7:7f:2e:9f:26:c5:
         24:de:93:3d:b2:90:17:da:05:da:a0:84:cd:30:bd:70:bd:26:
         3a:f2:b0:eb:b4:58:ea:2b:fa:4c:60:da:47:1c:6b:cd:f3:8a:
         6b:9c:45:e3:12:3b:eb:5d:33:b5:fd:dc:30:c6:34:67:4f:47:
         c3:4d:3b:dd:66:56:83:b4:a9:f2:46:00:a6:b2:df:e4:06:79:
         89:18:68:d0:8d:93:c1:16:d9:45:c0:bc:03:c9:5b:42:7c:05:
         52:b9:78:f7:ce:b6:fe:0e:a1:67:7b:69:31:18:0a:56:63:0a:
         60:a6:37:ba:03:e6:df:29:e1:66:9d:cb:71:71:9c:ec:04:62:
         88:1f:b6:2e:50:29:0c:06:56:03:e6:0d:f4:ef:92:16:dc:e9:
         d0:3f:a3:47:49:7c:b6:b0:f0:6f:a1:21:ad:19:59:1b:74:e6:
         1c:1b:c3:2e:7b:80:2a:58:26:0e:05:87:22:5f:dd:9b:68:03:
         c2:de:d6:a9:63:bd:cb:b2:3a:13:51:0c:d1:1d:a4:ba:c0:69:
         44:b0:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:30:36 2025 by rpki-client