Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File:                     RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier:          InX7lOOp3jfU+asWl0m7MNFK9UA93HPHjt4acWXflYA=
Subject key identifier:   16:89:1B:DD:EF:89:B6:EA:32:B4:D9:35:39:2A:95:98:CE:5A:AF:57
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer:       /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial:       019655A560A84B089C060538C9B5FC652E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number:          1501
Signing time:             Mon 21 Apr 2025 00:00:23 +0000
Manifest this update:     Mon 21 Apr 2025 00:00:23 +0000
Manifest next update:     Tue 22 Apr 2025 00:00:23 +0000
Files and hashes:         1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: MAaUZ1j6AmAhSagv+oTc8eeCIBKCm4PByaSga1XT/K0=)
                          2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a5:60:a8:4b:08:9c:06:05:38:c9:b5:fc:65:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
        Validity
            Not Before: Apr 21 00:00:23 2025 GMT
            Not After : Apr 22 00:00:23 2025 GMT
        Subject: CN=16891bddef89b6ea32b4d935392a9598ce5aaf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:3c:57:c5:8a:fe:7c:34:45:37:48:3b:30:
                    9a:21:37:40:10:2a:37:1a:b6:74:88:4d:7f:99:03:
                    b8:c3:41:9d:a7:90:ca:cd:5e:51:b9:e2:62:b3:58:
                    ef:40:c7:93:8b:87:be:02:5e:d5:5b:38:0b:a1:8f:
                    0e:c2:6d:91:ae:6b:95:a4:b3:47:0e:95:c9:4d:16:
                    0d:61:cb:68:23:10:02:51:41:fc:0c:7c:f0:fb:9b:
                    1a:3b:ec:2d:a5:1c:0e:df:62:0f:7b:d7:fd:ed:f2:
                    df:1d:89:19:3d:2f:f6:c4:bc:63:3b:60:bc:2b:1d:
                    b3:85:62:4b:30:24:a4:07:1f:89:44:eb:b5:85:cb:
                    f0:a6:92:ae:02:13:84:74:b7:42:e5:2e:98:c1:0e:
                    e3:9a:90:f1:18:6f:ad:14:0f:69:2f:5f:76:cb:2d:
                    8d:90:1d:bf:68:fd:f2:a0:27:d3:49:44:fd:a1:f4:
                    ec:80:77:a8:e0:3f:4f:20:f2:39:fa:89:8c:54:b3:
                    55:ac:f1:40:7d:0f:91:3a:ed:82:98:6e:f6:0d:d3:
                    bf:76:bb:b6:79:60:46:a0:8c:ea:8d:dc:7d:3f:49:
                    ec:f9:c7:c2:1d:05:a6:83:2e:b2:70:c0:65:15:5a:
                    e0:bf:89:f7:e5:f1:ce:61:4f:05:95:2d:4b:38:99:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:89:1B:DD:EF:89:B6:EA:32:B4:D9:35:39:2A:95:98:CE:5A:AF:57
            X509v3 Authority Key Identifier:
                keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:45:2f:01:7f:2a:79:05:bb:ac:24:24:9f:f3:a6:7e:8d:
         3a:82:dd:f8:28:08:ff:af:9b:59:0b:1c:63:93:f1:dc:65:03:
         f6:08:9e:8a:7d:8e:ad:d9:5d:fc:01:1d:7a:d9:03:4e:73:53:
         00:ba:3d:61:75:ce:27:e2:37:f2:c8:29:d4:1f:3d:aa:75:b7:
         6b:62:87:e0:10:b9:31:36:77:25:cc:5d:24:18:c5:d6:3e:68:
         3d:bc:46:d9:7b:99:33:71:8e:4a:8f:f2:f4:40:a2:0f:39:4d:
         a1:bf:bc:e5:92:a1:28:c3:b7:03:7f:94:8b:37:e0:4d:6d:a4:
         e3:75:35:78:04:cc:14:84:3c:43:ee:42:29:db:1d:e8:70:d5:
         60:28:8a:19:37:af:f7:57:12:66:ee:6f:5d:cc:d6:b5:fa:7f:
         99:87:64:03:df:6f:1c:85:52:e7:89:60:75:a9:36:52:02:be:
         bd:26:2a:d3:d0:cc:33:4e:a0:c2:4c:30:f1:de:20:75:06:6d:
         47:31:c7:d5:86:0c:e0:e8:6c:43:e8:62:58:95:ab:ac:cf:af:
         3a:70:c2:a2:80:31:74:82:0c:80:6e:22:39:8b:88:f4:14:1b:
         f4:33:44:a8:c6:ba:a5:de:2e:80:f2:e4:26:f9:93:c4:d0:ac:
         c5:91:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:11 2025 by rpki-client