Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File:                     RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier:          FHDvDU5j5eX/PX08BSbL7fSyQIaHo3/mKZC4BiQKSMU=
Subject key identifier:   C3:22:A0:36:F3:55:64:C2:11:6B:1F:27:0C:E2:21:DB:62:BC:8F:17
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer:       /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial:       019643D6E6CA53CB995D4C35C7C9939BE009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number:          0535
Signing time:             Thu 17 Apr 2025 13:01:19 +0000
Manifest this update:     Thu 17 Apr 2025 13:01:19 +0000
Manifest next update:     Fri 18 Apr 2025 13:01:19 +0000
Files and hashes:         1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: 3jt5y20JRa1exm7jxtgevEGb55VWeR0340H8tC61Xl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:e6:ca:53:cb:99:5d:4c:35:c7:c9:93:9b:e0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
        Validity
            Not Before: Apr 17 13:01:19 2025 GMT
            Not After : Apr 18 13:01:19 2025 GMT
        Subject: CN=c322a036f35564c2116b1f270ce221db62bc8f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:47:53:5a:9d:df:ae:3c:32:ab:46:75:0d:
                    56:44:df:8b:1f:97:41:50:84:79:e9:6b:ee:8e:fc:
                    11:b1:10:03:16:81:24:9a:af:30:9f:c0:5c:9f:9c:
                    5e:83:a5:a9:2d:99:6f:14:8c:47:41:84:88:25:66:
                    c3:f8:56:77:c9:92:d2:b4:7c:7a:a3:8f:68:a2:7d:
                    9f:d1:87:a0:aa:8c:7f:82:61:d9:5f:f6:e1:9d:05:
                    55:94:cf:4f:55:bb:2f:a6:b9:b9:b4:4f:b0:98:18:
                    6f:16:e2:e4:40:cb:d2:cb:8b:4c:35:f7:20:85:c9:
                    98:c5:a7:36:f5:4b:3c:b7:8f:82:f2:82:12:87:da:
                    05:62:93:4e:4c:12:74:d7:01:79:26:f7:94:e0:7a:
                    eb:e1:94:00:b5:f0:55:8e:41:1c:31:bc:6e:48:a9:
                    9c:f0:db:05:5c:c9:ba:37:bc:e6:16:a6:c9:e7:56:
                    43:c2:5e:8c:3b:f7:a8:ff:68:93:5e:23:14:5c:4a:
                    e1:d2:13:25:20:5b:7f:66:46:a7:c0:a6:d1:e4:19:
                    d6:2c:b6:fe:3f:3c:19:ea:f8:66:bb:d5:9e:73:19:
                    d0:1a:aa:bf:3e:fb:a8:91:b4:b8:b6:c0:63:ea:af:
                    29:c0:3a:6a:53:b1:24:91:cc:16:8d:c1:a9:64:da:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:A0:36:F3:55:64:C2:11:6B:1F:27:0C:E2:21:DB:62:BC:8F:17
            X509v3 Authority Key Identifier:
                keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7e:c8:a1:c8:5a:01:85:c0:6a:36:8a:0b:29:2a:59:af:1c:
         0d:44:57:6c:10:82:eb:92:8e:a1:73:b7:bd:9f:6e:ee:af:a3:
         3c:12:51:43:25:c5:00:01:94:85:46:a7:4c:a8:ad:1b:3a:15:
         e0:14:b1:e4:da:62:a9:21:8e:75:6e:4c:82:11:a0:52:d8:13:
         99:da:1e:d2:77:2a:b1:f1:e4:1e:1f:20:7a:18:f7:18:2a:bf:
         39:fb:61:bb:a4:4e:fa:4b:c2:96:fa:79:6e:54:cc:f7:60:43:
         10:73:aa:53:b6:c2:9f:73:ac:11:d8:3f:0c:f5:f4:c8:4a:2d:
         82:af:1f:7d:ae:d0:b4:94:f0:f3:31:15:7f:84:48:93:04:8f:
         33:c7:ed:46:e4:70:b9:e6:e6:ab:c5:32:3d:98:35:e2:e4:20:
         67:c2:53:0f:9d:80:0b:56:eb:43:b9:77:1b:f2:fd:39:5d:7c:
         ca:cf:37:38:b6:18:66:10:15:a2:8b:f9:43:c1:e2:1d:92:78:
         a0:f9:f7:93:8e:c8:2c:4e:1b:24:9a:13:83:4b:93:f0:73:47:
         76:5e:8b:1f:c8:c1:e3:af:b5:c8:52:5d:3f:73:f4:93:2f:1a:
         d5:b9:67:3b:33:df:d4:e0:f7:b3:ff:67:79:b9:5a:dd:dd:ac:
         b2:34:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:12 2025 by rpki-client