Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File:                     HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier:          Lea/XJAOykNcl7a35EKzAY0Yl8VuGd0/NdPY5PG8uoY=
Subject key identifier:   88:A8:20:D2:A3:8A:A0:63:5B:96:21:79:CB:33:A4:4C:0D:70:72:5C
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer:       /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial:       0198D515FD6C31D6ACD75218DB26B2753A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number:          0763
Signing time:             Sat 23 Aug 2025 04:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:44 +0000
Files and hashes:         1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
                          2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: eRoig+i1tCKVTDDXOeMk+4sgBldOQpM2uqPsNL2DWAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:fd:6c:31:d6:ac:d7:52:18:db:26:b2:75:3a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
        Validity
            Not Before: Aug 23 04:00:44 2025 GMT
            Not After : Aug 24 04:00:44 2025 GMT
        Subject: CN=88a820d2a38aa0635b962179cb33a44c0d70725c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:fb:af:5e:34:83:01:d0:99:ed:32:88:a7:
                    b0:7d:22:6b:3f:62:ed:c1:21:62:7a:39:0d:38:4c:
                    74:13:1b:da:13:fd:f7:ba:15:dd:1e:48:b8:36:b7:
                    76:7e:18:ee:61:01:88:a4:f7:21:47:32:e5:78:18:
                    0f:6b:de:a9:5b:a0:6c:cc:e3:2e:71:0c:ec:f0:47:
                    69:12:0c:97:6a:f3:0f:63:cf:c8:e4:34:00:bf:c0:
                    ce:59:14:ae:2c:80:3c:c1:92:bf:e4:b8:90:44:11:
                    a2:f5:75:33:b6:f0:d2:a6:50:16:9c:96:40:d6:56:
                    30:87:a3:41:ac:e3:96:8f:3f:a9:cd:4d:06:69:46:
                    0b:2c:53:db:4d:84:6e:79:6f:1a:bc:0c:5a:24:32:
                    1a:3a:7d:16:ae:4f:76:77:d0:ba:0d:ae:20:f9:de:
                    bb:ce:76:1c:ef:34:fb:35:1d:24:07:57:30:0a:74:
                    13:c1:f4:2b:87:d8:c3:b1:70:89:d8:64:5a:c8:c0:
                    36:5a:27:8c:32:a8:4f:34:50:72:08:c3:2f:a3:8c:
                    7a:7f:e7:a3:e1:bf:56:66:93:8c:f4:25:14:2a:cb:
                    44:e2:86:43:13:63:16:2b:7b:09:04:2f:a9:a7:33:
                    69:5b:b4:67:2a:fd:73:bf:bd:ea:ee:80:e6:98:b3:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:20:D2:A3:8A:A0:63:5B:96:21:79:CB:33:A4:4C:0D:70:72:5C
            X509v3 Authority Key Identifier:
                keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:82:d6:15:00:88:b6:fd:de:d8:14:3e:88:eb:d1:8f:22:fd:
         13:d6:03:27:82:b1:70:49:4b:d1:83:fc:b3:48:e5:30:8b:10:
         29:04:1d:c8:19:ca:4f:d5:75:65:46:fa:21:48:a0:0a:bb:a9:
         29:36:70:96:93:75:84:03:a7:36:ea:d6:4a:5c:77:e7:5d:5a:
         07:d7:0d:8b:3a:5a:a1:8d:78:d5:00:ae:d6:7f:9e:17:26:cf:
         cf:02:f2:55:ca:50:c9:99:6c:67:47:f6:da:47:e4:29:bc:79:
         96:4e:b3:6d:07:1b:74:98:39:2b:bf:96:3c:95:4c:5e:1d:c0:
         aa:a0:70:92:58:85:a2:d0:24:ef:77:18:a9:b5:4f:cd:0a:b7:
         36:7b:3b:9c:d1:0b:39:d6:bc:40:b4:c2:21:c9:5a:a4:37:a1:
         c2:f9:19:43:6f:5b:b6:53:ef:0f:db:4b:5d:ef:85:81:f4:3c:
         94:d8:65:5a:ea:e3:53:e6:e2:7d:e6:de:e8:21:d8:94:25:75:
         d0:1d:e8:d2:bb:dd:fd:b5:88:58:18:7b:a4:6a:da:f3:cf:b7:
         c2:05:21:f8:29:96:48:76:d2:98:ba:ba:bc:6e:b7:ae:03:5b:
         37:ed:13:3d:87:4b:a8:aa:91:fe:aa:ba:0d:88:45:5e:29:12:
         04:7e:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:37 2025 by rpki-client