Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File:                     HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier:          vAx5+nQtm+wmIKyLOz74uCGymbvO+Jx7taxaKDDtO3w=
Subject key identifier:   6A:3E:0E:36:FA:DA:73:9C:59:DC:52:BD:96:AC:97:43:E3:3E:58:17
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer:       /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial:       01974EC5114FD1B0FDE5D7C0525EF19102A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number:          0187
Signing time:             Sun 08 Jun 2025 09:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:27 +0000
Files and hashes:         1: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: A+PWcQc4NzpnnhHThNcd3/eObyl/a+sgrTthzsXAt4g=)
                          2: hrf8r5UJmIJ-gpcc-QJ3NNPl6Ik.roa (hash: HeO4h7QnVdaGx6xIcy/JRsUb7wgneHjAuNSk52+vub8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:11:4f:d1:b0:fd:e5:d7:c0:52:5e:f1:91:02:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
        Validity
            Not Before: Jun  8 09:00:27 2025 GMT
            Not After : Jun  9 09:00:27 2025 GMT
        Subject: CN=6a3e0e36fada739c59dc52bd96ac9743e33e5817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:7e:78:c2:f0:c5:db:2b:8d:bb:70:f2:e0:
                    cf:2e:02:ec:fc:cf:2c:54:25:09:6a:87:e6:9f:17:
                    3e:77:b7:15:e6:2b:19:ed:82:c9:ba:36:cf:17:1b:
                    25:fa:8f:42:21:1e:cf:5a:37:7a:13:a8:5b:43:57:
                    9e:e4:86:07:a7:68:68:f3:c9:0f:f6:53:5f:60:8b:
                    d3:de:2b:4d:0c:37:e8:1b:42:6c:93:03:21:88:37:
                    e5:a7:15:e8:15:ad:e3:d8:fe:a5:91:f4:6a:2e:fc:
                    34:c3:89:6c:3e:c2:ee:e5:39:f0:aa:f3:af:3e:3d:
                    54:d1:8e:72:3c:0c:b6:11:de:03:ee:33:e6:d6:19:
                    ed:3b:50:2a:89:f5:e8:d6:d6:e3:a1:31:09:2e:01:
                    c2:c1:d1:5f:c4:9b:bf:b0:16:68:d7:d3:21:d9:22:
                    68:0b:cd:31:33:46:9e:e8:77:bc:fd:ca:45:8e:f2:
                    00:4a:54:81:a8:ad:bb:dd:cd:99:23:02:f1:00:85:
                    47:7a:25:5b:fd:ca:e7:98:26:52:cd:58:5a:25:e5:
                    78:c6:53:36:bd:0a:52:4f:41:18:30:e9:a2:88:63:
                    16:e1:06:30:96:06:9c:ef:f2:8f:af:9d:14:d5:ec:
                    81:3a:01:7d:29:1b:b1:57:7f:d6:8f:8b:73:d7:8c:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3E:0E:36:FA:DA:73:9C:59:DC:52:BD:96:AC:97:43:E3:3E:58:17
            X509v3 Authority Key Identifier:
                keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:89:d8:a4:81:23:b9:32:ae:01:53:21:c1:b6:af:e3:40:
         e8:3c:b5:a8:cb:4d:41:3b:87:46:0c:cb:61:db:39:d4:7c:12:
         c9:a6:78:df:09:9d:4c:72:f2:4a:3e:be:0e:02:9c:00:fc:b1:
         f9:1b:aa:f1:14:c2:a2:5d:86:b5:39:9a:6a:21:1f:37:7e:b3:
         15:ba:bb:87:d6:12:20:a9:27:77:f1:47:b7:e6:26:51:dc:a4:
         f9:fb:79:60:16:e9:d9:30:18:7b:8b:85:f2:9c:d0:66:51:3d:
         e4:be:13:31:89:0a:8a:50:de:84:bb:91:18:ac:32:b6:7f:9a:
         bf:06:26:68:b4:8c:30:48:67:f9:0f:91:fb:62:aa:76:82:9f:
         d5:1a:05:ff:f8:c6:4a:cd:e4:e2:ff:ed:de:fc:63:b5:ee:10:
         cf:4d:29:17:ae:17:6b:43:d8:3a:c8:5a:45:c6:4d:63:bf:25:
         53:14:52:ee:1c:48:3b:6b:cc:89:07:18:a6:00:0a:ae:17:30:
         b7:a4:b8:01:a8:fa:92:d8:11:97:13:fc:75:af:11:04:1e:56:
         a7:df:d7:43:5d:cf:be:2f:c2:bf:bc:d2:1d:63:74:23:43:99:
         80:2d:c1:6a:36:46:25:9f:23:28:94:59:1d:0e:e5:8a:55:55:
         a4:58:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:20:39 2025 by rpki-client