Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File:                     HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier:          xWF59Y2gv9cE41LRSDShgveUVyjoR4AIYEPn1I/iL5k=
Subject key identifier:   94:DF:34:D8:99:EC:BA:D3:52:75:E5:71:09:9F:BA:2C:E3:19:14:3E
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer:       /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial:       0197470BC293388162FAD73A0D3309FCAAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number:          0610
Signing time:             Fri 06 Jun 2025 21:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:42 +0000
Files and hashes:         1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: d9gpxjXUEHE4ddjiN9gmK3mNDFiKfT+bCkUPf/635M4=)
                          2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:c2:93:38:81:62:fa:d7:3a:0d:33:09:fc:aa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
        Validity
            Not Before: Jun  6 21:00:42 2025 GMT
            Not After : Jun  7 21:00:42 2025 GMT
        Subject: CN=94df34d899ecbad35275e571099fba2ce319143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:8a:20:a9:9a:66:30:9a:ff:07:ef:d5:bc:
                    54:50:2b:1d:06:1e:50:1a:e1:5e:e6:c3:db:1d:59:
                    61:04:5d:be:51:1e:d4:15:be:81:c9:f3:05:58:51:
                    df:ec:c7:c9:fd:49:52:67:b6:34:46:d4:b6:0e:ea:
                    69:4d:a3:96:23:f2:ec:77:52:c6:6e:ab:4c:88:63:
                    57:31:e1:82:bc:cf:d7:fc:88:59:a0:a7:38:45:e5:
                    f5:c8:f0:c6:f1:0c:9b:2d:19:19:e7:c9:ed:df:5a:
                    fd:73:44:f6:50:64:ac:3e:6c:b0:b7:18:bd:ef:49:
                    f0:ab:55:72:a9:57:90:94:5e:26:91:b5:cb:8e:5e:
                    1a:a4:69:77:0a:16:40:a3:7c:b5:6d:75:5b:4d:bb:
                    04:4c:f4:77:af:41:b3:08:a8:da:ff:c3:71:1e:81:
                    70:36:c1:6d:d8:1f:e1:1b:23:ad:65:71:c5:fe:c6:
                    5d:86:7e:86:47:9a:cd:46:a4:cf:e5:6b:04:63:fe:
                    73:22:42:47:e0:dd:48:b3:d6:37:73:06:a8:8e:93:
                    68:88:f1:50:94:d8:52:7d:14:18:1c:b0:f4:56:06:
                    12:d0:97:7a:0d:a4:0a:79:1f:0d:97:27:4a:13:2a:
                    97:9a:73:46:56:77:80:79:2a:04:bf:06:c1:3e:f5:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:34:D8:99:EC:BA:D3:52:75:E5:71:09:9F:BA:2C:E3:19:14:3E
            X509v3 Authority Key Identifier:
                keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:d5:ff:c5:b4:8b:e7:c1:a4:9c:8d:a0:c8:f3:f3:e8:7d:
         55:a9:94:1d:d7:a6:77:02:a4:38:bc:a5:39:ae:76:17:f4:f2:
         93:87:99:9a:83:68:96:2b:bd:55:8d:6c:92:b0:6b:cc:a7:88:
         af:d9:d6:2a:16:18:ad:91:11:2f:95:ba:df:ab:e7:c2:89:e1:
         73:d8:0c:7f:39:b6:bc:90:71:7a:48:d1:6a:09:ab:12:f3:19:
         dc:9f:e9:69:68:9a:78:ce:c9:43:ce:c3:76:ab:ba:8b:70:49:
         23:ef:4d:8d:e9:d3:20:e5:d6:a5:45:94:04:5a:9c:7d:de:8d:
         67:75:ad:5b:da:15:71:78:e1:0d:6d:61:99:99:96:38:ef:cd:
         8f:09:93:3c:4f:7d:ff:7e:86:4c:8b:89:ff:44:d3:ed:96:20:
         76:50:49:12:f4:88:61:ad:cb:e1:d7:7e:69:e4:be:cf:13:a4:
         0a:84:a4:80:21:91:cd:81:db:a4:19:e1:17:3d:66:07:86:3b:
         0f:8a:e7:7c:36:00:dd:4c:e9:c1:8e:55:77:1d:91:75:ca:30:
         f5:00:63:05:54:d9:6d:53:16:42:60:7c:15:8d:fc:4e:07:06:
         e2:07:ed:8a:d9:c9:3f:44:07:a9:40:ca:db:e4:73:89:83:f4:
         3b:da:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:43 2025 by rpki-client