Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File:                     RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier:          HZ00OEOQ0nGo7RQyw8Jle23beDNluEHiN+4EQFTeI0Y=
Subject key identifier:   5D:15:1C:EB:7B:49:2A:9F:11:EC:A5:3D:5E:16:40:56:77:EA:E5:BF
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer:       /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial:       019682102DFA2BE4FD671BD7706F5FE61B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 15:00:20 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:20 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:20 +0000
Files and hashes:         1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: BpX+JQezVpZOfVMxZJaK+u2b5WQjuzsAfkyYwEeaW9E=)
                          2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:2d:fa:2b:e4:fd:67:1b:d7:70:6f:5f:e6:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
        Validity
            Not Before: Apr 29 15:00:20 2025 GMT
            Not After : Apr 30 15:00:20 2025 GMT
        Subject: CN=5d151ceb7b492a9f11eca53d5e16405677eae5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:1a:0c:bd:5b:54:b4:a1:9d:2c:06:c6:c5:
                    e7:44:d5:20:a8:00:c3:7f:5e:16:da:3f:20:cb:99:
                    38:3d:fc:af:9e:b3:c9:01:50:0f:93:ed:92:b3:5a:
                    18:66:9b:b2:82:5f:57:89:7e:04:fb:a7:ea:32:b1:
                    65:3d:0a:d4:62:09:4e:3a:c6:d2:35:cb:fb:e1:d7:
                    23:e7:76:e8:45:ec:d2:2c:99:eb:a1:8c:18:e0:20:
                    c5:7c:b9:2d:92:a5:d1:90:27:0f:15:1a:1d:93:21:
                    dd:26:b0:b3:97:0d:3f:4a:b1:87:33:04:20:ec:29:
                    c3:d8:9b:83:68:9e:ec:d1:98:2d:26:4f:6b:66:c6:
                    d8:05:43:e3:ce:7b:f6:99:ad:c3:47:3c:56:99:30:
                    ef:5a:f2:14:b5:5f:8f:72:07:c4:f6:a3:29:1f:78:
                    0a:19:15:de:88:ca:67:a9:eb:90:53:58:1b:ac:60:
                    34:f1:d8:2e:bd:d9:5b:c6:72:11:cf:ac:71:b4:a8:
                    f8:2d:5b:99:70:b9:fd:4f:b7:68:4c:97:8e:a3:27:
                    c0:81:1e:92:34:81:c1:52:b4:73:cc:80:2e:c0:f2:
                    67:d9:40:e3:63:e2:d8:cf:15:96:f6:7c:e6:8e:a3:
                    5e:02:d2:d5:66:ee:45:95:32:7b:8b:14:ae:8d:c0:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:1C:EB:7B:49:2A:9F:11:EC:A5:3D:5E:16:40:56:77:EA:E5:BF
            X509v3 Authority Key Identifier:
                keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:b1:69:c4:e4:fc:25:d2:17:17:e0:b4:b4:4b:b7:e4:3d:
         eb:1d:60:92:41:e5:ec:8a:98:0a:02:5a:58:7d:31:94:65:24:
         8d:7d:fa:94:a4:ce:ee:a3:b7:0c:59:f6:e3:44:4c:a0:73:3c:
         8e:34:da:fb:11:85:7d:99:91:53:eb:ea:53:a7:a8:b7:15:09:
         e1:be:1e:0a:22:f2:41:f0:bb:c6:85:e7:94:c5:8d:84:92:6f:
         f6:4d:62:fc:ec:aa:f8:45:a6:cc:07:35:92:fd:64:b4:da:58:
         36:ee:2e:f9:42:d1:12:ab:c7:c9:91:33:d0:c2:64:d7:5f:4b:
         36:5e:62:a9:93:cc:f4:c5:c7:46:04:43:36:d8:a3:b7:29:02:
         ec:00:e5:09:03:62:e3:d0:5b:89:7a:04:ce:54:d5:1f:2d:55:
         af:c2:b7:d6:64:89:2f:36:7c:8e:0b:e6:f4:aa:ac:57:cf:a3:
         77:97:f9:12:0e:c8:02:c2:50:f0:64:db:83:11:02:98:61:21:
         4d:1f:45:34:9d:e8:9b:cb:d5:e4:a0:ea:76:69:d6:72:38:e7:
         8d:9e:51:9c:49:09:d5:cb:92:77:6b:5e:46:1b:a8:03:4b:c1:
         0b:45:c6:9c:2c:25:16:f7:d9:50:83:d1:2e:cb:dd:45:ca:0d:
         5e:87:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:44:38 2025 by rpki-client