Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          kx+H7YuMSw9TuI9pHaJDDlPQ3O9r+X4FAVbfdQUTEBE=
Subject key identifier:   B0:46:D9:2E:F2:17:10:6F:BE:9F:5E:77:41:CA:8D:6F:2B:91:C6:D0
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       019655DCC4C32A1B903EC7F4F1BE831449C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          1196
Signing time:             Mon 21 Apr 2025 01:00:53 +0000
Manifest this update:     Mon 21 Apr 2025 01:00:53 +0000
Manifest next update:     Tue 22 Apr 2025 01:00:53 +0000
Files and hashes:         1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: OZepZA0OnpyZLCGhjL3LJY4xTgh6z7RPsYhKaqllYQk=)
                          2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dc:c4:c3:2a:1b:90:3e:c7:f4:f1:be:83:14:49:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Apr 21 01:00:53 2025 GMT
            Not After : Apr 22 01:00:53 2025 GMT
        Subject: CN=b046d92ef217106fbe9f5e7741ca8d6f2b91c6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:58:fa:c4:a3:52:77:f3:0d:dd:6b:17:cd:
                    b6:a7:a2:d8:b9:7d:1a:54:15:37:30:c9:59:63:6c:
                    fa:b4:ed:d4:29:9e:38:6f:c3:d7:2b:02:33:46:7f:
                    8d:79:57:b8:15:ba:15:ec:3b:ae:a1:ce:94:5b:90:
                    9a:4f:1f:80:e3:de:13:25:cd:63:91:bd:dd:ca:97:
                    90:62:46:64:18:ec:7e:9d:66:38:79:54:36:7c:6b:
                    11:49:d7:42:bb:15:b5:08:17:a8:21:7c:7d:5f:72:
                    84:2d:ce:18:8b:80:7c:7c:76:0b:ab:b2:82:4f:46:
                    ee:ef:e9:af:20:64:79:4f:5a:e3:2b:42:eb:d7:e9:
                    3d:95:4a:f6:3a:47:8f:1f:a8:92:14:89:87:11:18:
                    7b:2a:51:91:1c:b9:8c:bb:e3:11:4d:1f:76:fc:88:
                    53:8b:b1:44:6a:54:02:80:05:d3:92:cc:a7:0b:c4:
                    f1:ab:92:21:89:6a:18:30:46:19:bd:fe:89:7d:9e:
                    23:00:27:b4:e1:30:f0:b1:cd:92:29:8b:2f:52:4f:
                    2e:10:60:a8:e9:66:0e:53:77:86:01:cf:7f:d4:5e:
                    4b:32:d6:66:23:dd:27:04:61:0d:7b:2d:a4:be:5f:
                    d7:3e:bb:9d:44:20:f3:48:1c:2b:3e:81:27:d4:2f:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:D9:2E:F2:17:10:6F:BE:9F:5E:77:41:CA:8D:6F:2B:91:C6:D0
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:97:c0:9e:91:04:44:2d:7a:1b:6b:6e:c0:79:2a:d2:ce:98:
         44:e7:71:9c:10:fc:d6:39:23:33:08:7a:61:7e:23:84:13:be:
         f6:be:20:aa:44:5b:c7:f6:72:22:28:76:90:9a:30:a6:73:04:
         13:fb:26:26:03:ef:be:77:4b:60:e6:64:66:5b:26:e1:20:82:
         56:6b:28:f1:b5:13:19:0b:84:61:0b:3a:54:77:40:84:b4:76:
         83:04:9d:81:b7:af:86:11:9c:e1:0d:0b:50:94:6c:4c:c1:50:
         94:46:16:05:2c:3a:d7:d6:d2:5c:2d:e2:8b:6e:99:c8:61:46:
         55:32:16:00:2f:ca:25:98:a1:97:d6:bc:90:d6:fd:e8:de:97:
         75:8c:e2:7a:78:6f:34:79:c4:9a:8a:14:8e:25:1c:c3:68:f6:
         77:f9:29:34:f0:37:4c:99:5c:6c:10:6e:47:1c:de:a6:7f:17:
         78:bf:ab:3f:b1:6d:b8:3f:71:ad:a8:cf:29:fc:41:70:1b:9c:
         e0:68:3a:5d:c4:aa:a2:e7:5e:da:e9:37:a3:db:aa:7d:a8:ad:
         eb:e5:65:22:d5:2d:8f:bd:6a:aa:59:49:68:10:09:26:fd:3c:
         89:06:7d:00:59:83:d2:ef:e9:59:6d:31:a1:62:c2:52:a0:f4:
         a1:75:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:36:12 2025 by rpki-client