Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File:                     HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier:          dwhv1/mi75je7GASeN+vKsI3KmGFgUmT136vGVTCrBQ=
Subject key identifier:   D9:6D:3D:A0:DC:67:48:FD:A0:E1:DF:30:D1:73:B7:10:35:F2:C9:08
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer:       /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial:       01976D3DDD356A518AF830FDDB603D1B77FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number:          046E
Signing time:             Sat 14 Jun 2025 07:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:00 +0000
Files and hashes:         1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: fw0WAZwh8Up0TOIr5T2NJKhdeNY81wiKsn4RHbmMs0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:dd:35:6a:51:8a:f8:30:fd:db:60:3d:1b:77:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
        Validity
            Not Before: Jun 14 07:01:00 2025 GMT
            Not After : Jun 15 07:01:00 2025 GMT
        Subject: CN=d96d3da0dc6748fda0e1df30d173b71035f2c908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:1b:82:78:b9:0b:d7:27:58:9d:c6:69:71:
                    4d:c2:63:9f:5d:99:99:18:50:9a:3f:9d:dc:31:40:
                    28:eb:5d:5c:58:4f:b3:d7:36:e5:70:7a:52:5c:a7:
                    2e:61:16:6a:3f:f8:60:1f:93:df:b6:e0:dd:10:be:
                    03:c5:80:b5:c8:34:cc:5a:5a:b7:fc:ee:a3:04:4f:
                    bb:71:c7:c4:1b:ad:d3:ae:08:47:51:78:9c:22:08:
                    77:f3:d1:db:48:59:b9:db:47:bf:26:48:36:21:34:
                    a3:73:a3:d0:d4:dc:de:df:cd:68:ee:75:5e:78:df:
                    e3:2a:f1:79:dc:04:4d:6f:cf:1f:1f:7d:b0:1c:61:
                    1a:19:39:fc:5c:ee:56:bd:03:66:e9:aa:47:fe:ea:
                    fc:d7:6d:e9:f5:b8:c5:1b:52:7d:7f:90:88:af:ad:
                    38:b9:a9:10:49:35:18:49:98:23:58:90:83:4d:f4:
                    4e:01:a8:7c:fc:d6:4c:29:18:1d:5f:3f:25:1a:71:
                    37:f6:ef:c4:65:58:03:09:50:7c:a4:30:c1:3d:95:
                    41:da:12:fa:b7:8e:e5:24:fb:f9:aa:a1:8f:5a:ed:
                    3d:69:3a:f3:97:7e:d8:3f:32:a8:74:32:4f:73:a3:
                    e8:47:a9:98:d2:5a:fb:88:40:db:e5:b6:f4:b3:ed:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:3D:A0:DC:67:48:FD:A0:E1:DF:30:D1:73:B7:10:35:F2:C9:08
            X509v3 Authority Key Identifier:
                keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:35:ac:39:f8:83:be:41:cf:3f:08:3e:37:98:4f:5e:7b:
         37:2d:18:8c:50:30:0d:0e:1f:99:71:1e:96:2c:80:5d:c4:14:
         f8:54:c4:fb:8e:b0:02:fa:76:cd:6e:15:27:05:14:76:2a:47:
         10:92:08:0c:18:a7:65:90:8b:b3:68:ab:5d:25:44:1e:58:78:
         e4:3b:af:e7:ec:93:84:f4:20:eb:5c:57:c6:0a:79:36:73:41:
         39:7f:58:60:97:9c:73:14:6f:6f:35:b2:f5:e1:78:09:3e:23:
         b0:d5:7b:4a:38:38:3c:6c:6f:1b:3b:28:5f:ed:c9:26:48:f0:
         74:37:cc:08:35:49:00:94:1d:11:43:bb:23:95:0c:b7:32:ec:
         4f:4b:66:47:00:94:1d:c3:32:55:a7:1f:bc:d8:6c:e6:20:83:
         33:0f:5e:5b:65:1c:9d:23:e1:b7:ac:86:86:6b:fc:19:b4:59:
         57:8c:4c:f3:c4:99:03:5c:39:28:85:5f:40:e9:6e:b5:6e:a9:
         14:25:a0:92:87:fd:95:65:2e:34:5e:f8:1c:00:79:20:35:06:
         07:99:4f:2a:8b:28:94:d8:9f:75:44:6e:d0:13:f5:ac:a1:fd:
         91:5e:4e:dd:a4:3f:fa:d3:54:b8:5d:e5:ac:73:5e:88:3a:fa:
         cb:b5:61:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPd01alGK+DD922A9G3f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzI1NTVjNjFkM2QyMjllMmM0YTIzMzdkNzVmYTUzZjZm
MmIyYmMwHhcNMjUwNjE0MDcwMTAwWhcNMjUwNjE1MDcwMTAwWjAzMTEwLwYDVQQD
EyhkOTZkM2RhMGRjNjc0OGZkYTBlMWRmMzBkMTczYjcxMDM1ZjJjOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fgbgni5C9cnWJ3GaXFNwmOfXZmZ
GFCaP53cMUAo611cWE+z1zblcHpSXKcuYRZqP/hgH5PftuDdEL4DxYC1yDTMWlq3
/O6jBE+7ccfEG63TrghHUXicIgh389HbSFm520e/Jkg2ITSjc6PQ1Nze381o7nVe
eN/jKvF53ARNb88fH32wHGEaGTn8XO5WvQNm6apH/ur8123p9bjFG1J9f5CIr604
uakQSTUYSZgjWJCDTfROAah8/NZMKRgdXz8lGnE39u/EZVgDCVB8pDDBPZVB2hL6
t47lJPv5qqGPWu09aTrzl37YPzKodDJPc6PoR6mY0lr7iEDb5bb0s+3/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNltPaDcZ0j9oOHfMNFztxA18skIMB8GA1UdIwQY
MBaAFB0yVVxh09Ip4sSiM311+lP28rK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAt
YTc5ZjlmZWVmMDBhLzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAtYTc5ZjlmZWVmMDBh
LzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuA1rDn4
g75Bzz8IPjeYT157Ny0YjFAwDQ4fmXEeliyAXcQU+FTE+46wAvp2zW4VJwUUdipH
EJIIDBinZZCLs2irXSVEHlh45Duv5+yThPQg61xXxgp5NnNBOX9YYJeccxRvbzWy
9eF4CT4jsNV7Sjg4PGxvGzsoX+3JJkjwdDfMCDVJAJQdEUO7I5UMtzLsT0tmRwCU
HcMyVacfvNhs5iCDMw9eW2UcnSPht6yGhmv8GbRZV4xM88SZA1w5KIVfQOlutW6p
FCWgkof9lWUuNF74HAB5IDUGB5lPKosolNifdURu0BP1rKH9kV5O3aQ/+tNUuF3l
rHNeiDr6y7VhNg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:20 2025 by rpki-client