Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          xEHy4VqSjVjxzdAnt5SjU5skoB6+ta/UivpLlBT5Mz4=
Subject key identifier:   8E:67:CE:EE:48:C6:97:B3:0A:05:4F:BD:04:1F:72:D0:B2:0A:56:E3
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       0197B7455054F648D5B3BB1879C4B93B8FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          124D
Signing time:             Sat 28 Jun 2025 16:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:02 +0000
Files and hashes:         1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: PSS2UiUoCk5Omgx2pgS1RnuZ/2Ov9EvvgN1/eEz1BGI=)
                          2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:50:54:f6:48:d5:b3:bb:18:79:c4:b9:3b:8f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Jun 28 16:01:02 2025 GMT
            Not After : Jun 29 16:01:02 2025 GMT
        Subject: CN=8e67ceee48c697b30a054fbd041f72d0b20a56e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:74:64:8b:3e:f8:9e:58:4f:ab:bb:f8:3b:
                    36:dd:c4:f6:0f:bb:a9:d2:e2:72:35:8d:89:44:d8:
                    ac:85:aa:cc:5f:09:a5:0e:0a:73:46:7c:34:c7:bc:
                    ee:fe:3d:5e:dd:d8:de:b5:28:c0:92:fb:65:7b:58:
                    b0:8a:75:25:ff:17:41:33:3d:83:6f:38:f8:e9:23:
                    04:27:da:7a:68:79:b0:f8:bc:1b:ce:06:b5:4e:9f:
                    b2:42:da:8c:1a:46:0f:c7:80:31:16:f7:26:72:a4:
                    51:cd:24:72:70:51:09:92:56:05:08:a9:20:6a:fd:
                    c8:b1:fc:28:7c:70:03:f7:ad:b8:3a:58:60:02:ea:
                    2b:aa:72:90:8b:24:a8:e4:8c:18:e2:0c:83:9c:a1:
                    06:7d:bb:70:34:40:aa:7d:98:3f:89:d1:66:2d:06:
                    fc:1e:35:9f:72:c5:06:34:fa:58:44:62:fc:ac:a9:
                    81:c3:db:d3:f5:84:c0:95:26:b4:b9:a3:fc:ca:ee:
                    a8:9a:f1:e2:e9:37:7d:12:ff:c1:f9:17:4c:94:4b:
                    6c:ef:d9:18:41:d0:b0:55:2f:85:70:01:39:e5:5c:
                    f6:db:69:40:58:ad:18:2f:d7:92:90:a1:18:31:ef:
                    1b:11:a1:f5:ca:9d:4d:38:ff:16:cd:99:7b:d5:9b:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:67:CE:EE:48:C6:97:B3:0A:05:4F:BD:04:1F:72:D0:B2:0A:56:E3
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:76:7e:cd:a5:79:03:66:67:a4:e9:5c:d5:84:40:ef:35:
         01:8a:e7:e4:db:20:0f:ea:87:e3:c7:d9:f4:30:8d:5f:af:1a:
         04:fb:ac:c0:cb:9d:af:95:b8:08:81:b6:c9:48:e2:8d:02:41:
         b2:d0:c7:a9:af:27:bb:53:58:19:00:1b:f4:98:aa:a4:34:48:
         81:6f:37:1d:f2:76:e4:34:22:ed:8a:33:54:3f:ea:51:f7:fa:
         f3:28:41:32:30:08:42:7f:45:a9:67:8c:b4:e0:e9:44:d2:9c:
         de:18:cd:16:b8:6b:92:63:78:a8:25:3b:71:4d:b8:59:28:b7:
         9d:21:57:1c:68:eb:1c:e5:85:4a:e5:2e:7b:f6:84:2b:ea:c2:
         70:c4:61:26:07:88:fe:c2:dc:31:99:62:f2:71:18:79:47:42:
         fc:62:3a:36:cd:94:c9:17:03:ca:98:22:41:b2:a2:5b:3f:58:
         07:95:84:0b:14:7b:fa:18:e7:f6:ab:5a:fc:9e:da:fb:56:93:
         b2:67:56:f1:11:10:3c:98:49:d8:91:f7:3f:a6:79:f6:75:1d:
         8f:e4:44:0e:a1:3a:63:8a:cb:4d:04:11:00:ee:11:b7:97:c2:
         bf:d2:22:8e:34:29:c8:3a:8b:8b:73:9b:45:a2:d3:be:89:47:
         8c:fd:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:59 2025 by rpki-client