Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File:                     HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier:          rMFdx9JNhXjMRVd2Dx6dgdR5kHZVb5RiSjgW2VjnMsA=
Subject key identifier:   9E:F9:E5:D3:35:9E:E5:5F:B5:C2:0E:CA:FF:E2:71:A4:F0:0D:1A:A8
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer:       /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial:       0196D13E2BEB43FE9BF3C58E46B91E36DC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number:          0146
Signing time:             Thu 15 May 2025 00:00:34 +0000
Manifest this update:     Thu 15 May 2025 00:00:34 +0000
Manifest next update:     Fri 16 May 2025 00:00:34 +0000
Files and hashes:         1: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: 5Uzw9jmtLV/wLd1YqL3cmefAjEcuEq8NxGB9/Unt5pA=)
                          2: hrf8r5UJmIJ-gpcc-QJ3NNPl6Ik.roa (hash: HeO4h7QnVdaGx6xIcy/JRsUb7wgneHjAuNSk52+vub8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:3e:2b:eb:43:fe:9b:f3:c5:8e:46:b9:1e:36:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
        Validity
            Not Before: May 15 00:00:34 2025 GMT
            Not After : May 16 00:00:34 2025 GMT
        Subject: CN=9ef9e5d3359ee55fb5c20ecaffe271a4f00d1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:96:79:56:cb:9b:df:9f:4c:58:be:ce:6b:
                    54:dd:45:b3:bd:08:df:1a:d0:35:50:82:26:3c:6b:
                    ee:7e:b2:a5:71:f0:43:d6:7b:69:c8:d2:37:44:3e:
                    80:5b:f5:91:90:ef:6f:6a:dd:ac:b8:72:ba:14:cc:
                    ec:c9:bd:a6:a3:53:34:e7:05:10:33:54:eb:d8:3d:
                    be:99:18:a1:1c:bb:c7:85:a4:df:3b:a4:01:d0:43:
                    50:eb:8a:96:6c:9b:b7:90:e6:59:5c:4f:a6:90:80:
                    36:5c:ab:b7:9c:e5:d1:91:5e:4d:0c:fe:d7:a0:65:
                    6d:7f:88:76:10:21:04:07:55:b5:55:52:74:a5:9d:
                    ca:f1:d2:9e:e6:f6:3a:75:80:25:94:b2:7a:52:9b:
                    e9:ea:df:67:6f:ff:99:e8:f6:84:e0:da:e9:2f:14:
                    8f:6b:6a:cd:6c:57:37:bc:2a:a0:cd:aa:ea:cc:a0:
                    27:ca:b3:a7:b3:39:f8:b6:72:48:13:37:cf:35:7b:
                    cc:62:95:b0:8f:ae:72:27:b7:03:cf:9e:e2:96:25:
                    31:41:ec:7f:fc:f0:ae:a9:1a:4f:58:99:2a:a9:5f:
                    6e:95:99:b4:91:9e:34:cd:77:ef:6f:95:28:a0:ca:
                    d2:6d:78:e5:c4:6d:83:70:d1:b1:b2:16:e8:b0:f0:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:E5:D3:35:9E:E5:5F:B5:C2:0E:CA:FF:E2:71:A4:F0:0D:1A:A8
            X509v3 Authority Key Identifier:
                keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:af:af:a4:73:f2:ae:b2:fe:34:d6:4b:86:e8:d2:db:47:f3:
         d5:c1:72:49:bb:b3:f1:4e:7c:e6:22:62:28:16:e2:4d:4a:82:
         c8:97:25:ca:15:f5:2c:1a:1f:04:bb:24:a6:5b:10:85:d6:ff:
         73:e1:af:96:d4:b9:1f:24:70:f1:0e:92:82:46:ed:65:85:31:
         6a:60:33:3d:1d:15:49:b1:be:e8:be:38:ff:bf:62:32:94:06:
         02:c0:0e:99:61:ab:c5:32:d8:39:15:0a:05:ad:d9:ed:4f:d6:
         48:8f:6f:5c:54:69:a1:43:56:2d:8c:59:95:ae:3e:c9:5b:96:
         b7:4d:a9:c4:c4:f5:84:3e:ec:e1:b7:0f:c0:38:57:73:03:54:
         14:d9:07:8f:63:20:42:10:48:90:f3:7f:59:26:29:f5:79:6e:
         ae:b6:94:ed:76:e8:a8:34:ae:33:af:7c:c9:08:55:3e:1b:42:
         fc:89:5f:c2:45:88:ae:b7:c2:36:44:86:c4:eb:33:50:7f:7d:
         3d:c9:8e:87:6c:c2:5a:cf:e8:49:50:dc:96:5d:2d:ff:a1:ba:
         f1:3f:f0:02:88:de:7b:35:b0:72:be:fb:f1:b8:f6:15:a7:81:
         ee:0c:eb:d3:a6:e0:df:d0:92:92:53:84:dd:98:16:3b:13:38:
         9f:ab:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:40:15 2025 by rpki-client