Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          gmnz24GCLu9yfbeK8rbUNuI3+Rvwtxg6XEGLXMOYoVU=
Subject key identifier:   83:B6:1D:8D:BE:00:BA:E1:84:2F:DC:7D:1F:8F:A5:12:52:5E:99:57
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       01976D3E641A198BA1820774AEBA43FA0F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 07:01:34 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:34 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:34 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: /7NzittL8RDAkLR5EIT5+qynKPHAsZtI+OJ/6JmR4fU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:64:1a:19:8b:a1:82:07:74:ae:ba:43:fa:0f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Jun 14 07:01:34 2025 GMT
            Not After : Jun 15 07:01:34 2025 GMT
        Subject: CN=83b61d8dbe00bae1842fdc7d1f8fa512525e9957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:52:11:ac:ee:8b:22:6b:8d:2f:ce:c8:15:
                    8e:f9:1f:0b:92:2d:16:e6:5a:ef:0f:07:2a:bb:84:
                    ca:b7:24:c6:28:f2:5e:8a:20:34:e8:c4:2f:5e:1f:
                    1e:3a:d7:dc:e6:fd:17:33:cb:fc:64:ba:66:1e:c7:
                    86:f0:36:59:ec:15:a3:5e:da:fd:a0:11:7a:e8:95:
                    47:df:02:37:ae:5c:c3:98:64:07:6c:cd:a2:a7:3d:
                    3a:c1:96:b9:0b:de:69:bc:4d:a5:ef:8f:17:14:bd:
                    25:a9:91:a0:61:7a:80:3a:62:fa:a6:51:a9:b2:98:
                    fd:f7:c3:67:29:89:4c:7f:d6:c2:88:aa:8e:b4:44:
                    75:d2:1e:71:0f:8a:1f:b1:8f:5a:27:ee:db:ec:ba:
                    29:ea:22:50:42:26:4f:6f:9f:56:09:37:50:c9:47:
                    b3:e0:64:9d:3c:72:d9:4c:b9:1a:88:3a:55:75:d5:
                    ad:d8:d9:e5:94:d8:a5:c7:46:18:8b:b0:69:72:cf:
                    1d:41:39:f6:37:02:5e:00:d0:f9:a1:f1:82:1e:db:
                    83:19:b9:f1:35:30:61:91:b9:6c:47:d3:3f:6b:70:
                    5a:f1:b6:d3:b9:4d:57:12:a1:11:2e:52:ff:e5:f9:
                    fe:2a:c3:9b:ab:fb:bf:53:9f:e1:61:16:9b:5a:cd:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B6:1D:8D:BE:00:BA:E1:84:2F:DC:7D:1F:8F:A5:12:52:5E:99:57
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:7c:33:2e:c2:f4:69:58:db:d5:ea:f6:6d:e3:84:6a:32:
         c9:f0:6d:d0:4f:97:ad:3c:26:35:d3:99:21:a1:ae:24:ca:88:
         aa:c2:e6:70:40:b8:ed:cc:97:ae:cc:d9:f3:c9:ee:ab:5e:73:
         91:29:85:7a:85:f0:e0:84:75:bb:f7:48:17:5e:ce:2c:26:1f:
         01:72:ba:6b:25:42:29:ca:4c:70:e3:ad:9e:6a:1e:a7:f0:d7:
         fe:07:4c:9a:83:5a:9e:3f:48:cd:7d:a5:17:33:8c:3b:d8:a7:
         58:16:60:e0:ae:4d:b1:05:25:93:76:a8:02:e3:f0:60:5d:ab:
         27:12:09:bd:ae:84:f8:83:20:79:8e:c7:d0:d8:5b:28:dc:2f:
         b4:4f:25:1d:a6:4d:14:2f:03:6b:3c:96:99:35:7b:98:e3:47:
         93:39:e8:b8:4f:4b:b7:b0:25:69:a7:53:4d:76:ab:2a:5c:05:
         8f:4f:ef:21:c2:67:47:a3:eb:57:80:2f:5d:b3:1b:9e:e3:56:
         6c:2c:40:7e:03:6d:2b:be:b9:84:e7:d4:d5:af:f6:64:5d:bb:
         f0:74:0b:d3:35:3e:67:f3:4a:ae:1e:0e:f6:be:e6:80:85:6a:
         84:69:94:9c:68:50:82:72:73:97:ce:cd:7e:be:e7:7f:ff:7b:
         4b:03:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----