Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          xyqCKZpvv/LgrhqEkBqfp0iu2FIV7RSy7uh/Tajail0=
Subject key identifier:   1D:4E:7C:11:CB:92:27:63:02:F5:A7:A2:42:75:F3:80:68:90:27:61
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       019749312E855C6044D24387912E43C99ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          1214
Signing time:             Sat 07 Jun 2025 07:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:49 +0000
Files and hashes:         1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: WuKX7XghG6gt7kD2vxT3yeYp2XtdGDVP12J3G2Phuf4=)
                          2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:2e:85:5c:60:44:d2:43:87:91:2e:43:c9:9a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Jun  7 07:00:49 2025 GMT
            Not After : Jun  8 07:00:49 2025 GMT
        Subject: CN=1d4e7c11cb92276302f5a7a24275f38068902761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8d:0b:0e:fa:88:39:b3:19:6f:21:10:fa:8c:
                    40:9e:ae:a7:bb:58:01:ce:b9:c8:91:0f:48:42:9a:
                    db:be:b9:fa:c4:5a:19:b7:2a:b6:d2:d2:2e:25:25:
                    0e:4a:17:76:e6:2d:1c:51:39:32:49:a1:ad:0b:2b:
                    88:68:ea:08:de:c4:79:07:c4:7b:24:7d:6f:e9:70:
                    33:1d:64:20:db:61:5c:5b:a7:82:03:06:a4:c4:50:
                    e4:fe:48:5e:dc:bc:ca:5e:bf:98:b1:c5:59:af:40:
                    e2:26:d7:46:4a:25:51:33:88:0c:7a:f6:57:c3:00:
                    3e:6f:b3:62:fa:5a:42:69:fd:f9:8d:20:6c:65:df:
                    44:16:e2:ea:ac:d3:be:85:e3:22:c5:10:19:97:eb:
                    80:96:ad:2c:8e:7a:d3:ee:51:5e:fe:30:1d:53:fb:
                    29:f9:93:da:46:24:86:ac:ad:ac:53:45:27:3c:80:
                    4f:60:e1:59:2a:7e:91:87:63:cf:ef:38:52:13:97:
                    51:6d:26:ba:c2:12:a6:45:43:38:73:1b:ec:18:4f:
                    9a:fb:61:b2:12:0d:65:12:3d:db:14:44:24:f7:82:
                    2e:57:33:96:13:38:a8:9c:93:55:f4:df:7c:60:22:
                    82:fd:ba:08:db:14:5c:3e:39:49:c0:1c:b2:1e:59:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4E:7C:11:CB:92:27:63:02:F5:A7:A2:42:75:F3:80:68:90:27:61
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:5a:46:ae:bc:d7:95:90:f1:97:f0:10:fa:86:07:c4:82:85:
         e2:58:ec:b3:7a:62:09:76:07:aa:38:91:d0:46:2c:b3:76:01:
         31:cb:a0:ba:5e:5c:cf:41:9c:5b:4f:9d:43:a9:b5:4e:a9:82:
         bd:ad:82:f9:dc:a5:ce:00:33:2f:79:a1:e5:80:c8:78:7d:42:
         94:5f:fc:de:e1:f1:81:ef:66:8b:e2:46:dd:5e:6f:e5:bd:8f:
         73:c3:d2:4f:bf:6b:58:f2:95:51:f5:e1:cf:ce:1a:d5:65:76:
         29:90:80:9c:b2:50:72:3f:39:c9:fe:49:ec:bd:fb:3c:c0:40:
         a4:7e:13:a9:9b:bc:d3:de:f0:39:4c:32:11:86:09:08:34:30:
         36:bf:6e:16:d5:49:69:27:a4:bc:64:e4:04:cd:9d:d0:20:12:
         dc:59:7f:79:45:4e:23:fe:61:d9:40:ae:91:8f:9a:9e:a4:ba:
         54:83:a3:72:6e:44:51:e6:1e:9c:90:f2:ce:f7:0f:e6:61:79:
         02:ae:c8:74:aa:d7:3c:de:39:b8:aa:d4:12:9b:f4:16:7d:f3:
         bb:ef:d0:48:e7:4e:6f:06:f9:e1:4a:b0:e7:a7:f9:17:41:25:
         15:27:bd:54:7b:43:1a:b1:2e:3d:05:9b:2f:a9:e7:37:98:f6:
         56:38:f6:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMS6FXGBE0kOHkS5DyZq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjUwNjA3MDcwMDQ5WhcNMjUwNjA4MDcwMDQ5WjAzMTEwLwYDVQQD
EygxZDRlN2MxMWNiOTIyNzYzMDJmNWE3YTI0Mjc1ZjM4MDY4OTAyNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y0LDvqIObMZbyEQ+oxAnq6nu1gB
zrnIkQ9IQprbvrn6xFoZtyq20tIuJSUOShd25i0cUTkySaGtCyuIaOoI3sR5B8R7
JH1v6XAzHWQg22FcW6eCAwakxFDk/khe3LzKXr+YscVZr0DiJtdGSiVRM4gMevZX
wwA+b7Ni+lpCaf35jSBsZd9EFuLqrNO+heMixRAZl+uAlq0sjnrT7lFe/jAdU/sp
+ZPaRiSGrK2sU0UnPIBPYOFZKn6Rh2PP7zhSE5dRbSa6whKmRUM4cxvsGE+a+2Gy
Eg1lEj3bFEQk94IuVzOWEzionJNV9N98YCKC/boI2xRcPjlJwByyHlkKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1OfBHLkidjAvWnokJ184BokCdhMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA61pGrrzX
lZDxl/AQ+oYHxIKF4ljss3piCXYHqjiR0EYss3YBMcugul5cz0GcW0+dQ6m1TqmC
va2C+dylzgAzL3mh5YDIeH1ClF/83uHxge9mi+JG3V5v5b2Pc8PST79rWPKVUfXh
z84a1WV2KZCAnLJQcj85yf5J7L37PMBApH4TqZu8097wOUwyEYYJCDQwNr9uFtVJ
aSekvGTkBM2d0CAS3Fl/eUVOI/5h2UCukY+anqS6VIOjcm5EUeYenJDyzvcP5mF5
Aq7IdKrXPN45uKrUEpv0Fn3zu+/QSOdObwb54Uqw56f5F0ElFSe9VHtDGrEuPQWb
L6nnN5j2Vjj21Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:43 2025 by rpki-client