Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          7fUhKyzPO5pnudxpP/v3kVC5HqPsxn5U+t8hh/e0fOg=
Subject key identifier:   B3:3C:4B:EE:D7:99:33:D6:C7:F4:7F:E3:F4:F3:15:01:E9:E5:80:13
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       0196BA7F9F4E9CEDF84E240FBD2A34538AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          0308
Signing time:             Sat 10 May 2025 14:00:47 +0000
Manifest this update:     Sat 10 May 2025 14:00:47 +0000
Manifest next update:     Sun 11 May 2025 14:00:47 +0000
Files and hashes:         1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: aX2vnM88cwF7qEg72Z/0hJRv/cceomwVN9bvbLwkh2M=)
                          2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:9f:4e:9c:ed:f8:4e:24:0f:bd:2a:34:53:8a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: May 10 14:00:47 2025 GMT
            Not After : May 11 14:00:47 2025 GMT
        Subject: CN=b33c4beed79933d6c7f47fe3f4f31501e9e58013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:d6:2a:e9:01:78:b6:ad:8c:60:8d:f6:aa:
                    67:8a:7a:f3:c5:10:56:2f:e4:0b:38:c8:bb:2e:23:
                    61:b3:db:92:38:5f:b7:55:3e:76:3c:d0:e7:05:a3:
                    66:81:30:40:92:8f:92:4f:c3:d5:fa:97:de:9d:5e:
                    77:35:8b:f6:01:ee:ea:42:62:29:a7:33:2c:a5:00:
                    f1:46:ac:60:ea:96:ca:e9:a1:98:b6:f5:93:55:db:
                    58:33:1c:bf:eb:bf:1d:c2:39:30:16:7a:db:2b:11:
                    b2:c5:8e:5c:a2:6d:13:73:3c:4c:d6:d3:a1:2b:3e:
                    8c:ba:d6:03:84:0c:58:cc:4b:89:37:49:fe:e0:9f:
                    9e:6e:a8:57:00:7d:8e:2f:a6:c3:04:ae:7f:95:57:
                    15:60:fa:a3:c9:ea:be:ca:ce:cf:c2:43:1c:37:66:
                    9d:ba:24:0a:3f:5d:17:ad:9f:ab:d6:4c:ce:eb:c0:
                    de:19:65:30:7d:52:e2:98:e6:6d:43:97:f3:2f:70:
                    09:37:cf:72:f9:f5:92:1e:00:57:a4:ec:48:30:d6:
                    71:99:3e:6d:d9:d4:4f:4d:a7:75:ed:87:5d:47:ba:
                    86:4f:4f:df:90:c1:0d:92:7b:13:cf:1d:a6:f3:56:
                    8e:28:13:2b:21:a1:83:96:80:f6:a1:44:72:a7:76:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:4B:EE:D7:99:33:D6:C7:F4:7F:E3:F4:F3:15:01:E9:E5:80:13
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:1c:f1:07:3d:eb:c9:0b:d6:b3:79:a8:f2:2f:c8:b8:80:
         73:32:e0:6e:2e:75:7a:e4:e9:e0:a1:96:b9:68:4b:3e:7e:f8:
         40:97:4e:c6:d6:e4:d2:ba:e3:14:49:c0:11:40:dc:0b:38:b6:
         1c:fe:3a:39:17:89:96:81:65:1b:ea:ba:62:a5:9d:cb:da:f2:
         7d:44:4b:84:6c:e7:4f:ca:d0:af:09:de:31:28:2e:28:18:80:
         38:d0:df:cd:e8:37:be:37:9d:2b:1b:94:e6:f3:d6:30:f0:9f:
         a8:41:52:e3:d8:c6:ab:4d:4d:e3:ee:9e:9b:c8:0e:44:1e:3c:
         c2:89:b0:ab:23:ba:0c:41:46:34:3d:4f:ba:b7:15:10:45:6a:
         9f:1f:a8:01:7e:3f:ec:56:4b:d2:95:86:c8:31:92:d9:10:52:
         e8:5c:ef:c5:d0:d7:29:96:8a:84:9f:f1:d4:35:11:b0:73:17:
         07:95:69:71:00:16:c0:4a:e7:b5:24:4c:ee:68:f6:e7:4e:b8:
         b7:59:bf:57:f6:7f:61:18:7b:e5:d7:fb:2a:2d:c7:7c:90:5f:
         01:7c:93:05:59:6b:68:f0:74:8d:06:b2:dc:f9:3c:3f:66:a3:
         39:1f:b1:fc:42:12:72:c6:07:b2:48:88:e5:0c:78:af:99:d3:
         fb:07:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f59OnO34TiQPvSo0U4r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy
ZTFhZmQwHhcNMjUwNTEwMTQwMDQ3WhcNMjUwNTExMTQwMDQ3WjAzMTEwLwYDVQQD
EyhiMzNjNGJlZWQ3OTkzM2Q2YzdmNDdmZTNmNGYzMTUwMWU5ZTU4MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOzWKukBeLatjGCN9qpninrzxRBW
L+QLOMi7LiNhs9uSOF+3VT52PNDnBaNmgTBAko+ST8PV+pfenV53NYv2Ae7qQmIp
pzMspQDxRqxg6pbK6aGYtvWTVdtYMxy/678dwjkwFnrbKxGyxY5com0TczxM1tOh
Kz6MutYDhAxYzEuJN0n+4J+ebqhXAH2OL6bDBK5/lVcVYPqjyeq+ys7PwkMcN2ad
uiQKP10XrZ+r1kzO68DeGWUwfVLimOZtQ5fzL3AJN89y+fWSHgBXpOxIMNZxmT5t
2dRPTad17YddR7qGT0/fkMENknsTzx2m81aOKBMrIaGDloD2oURyp3ZcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM8S+7XmTPWx/R/4/TzFQHp5YATMB8GA1UdIwQY
MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt
YzQyOTJmYWM5YmU4LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4
LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6gc8Qc9
68kL1rN5qPIvyLiAczLgbi51euTp4KGWuWhLPn74QJdOxtbk0rrjFEnAEUDcCzi2
HP46OReJloFlG+q6YqWdy9ryfURLhGznT8rQrwneMSguKBiAONDfzeg3vjedKxuU
5vPWMPCfqEFS49jGq01N4+6em8gORB48womwqyO6DEFGND1PurcVEEVqnx+oAX4/
7FZL0pWGyDGS2RBS6FzvxdDXKZaKhJ/x1DURsHMXB5VpcQAWwErntSRM7mj25064
t1m/V/Z/YRh75df7Ki3HfJBfAXyTBVlraPB0jQay3Pk8P2ajOR+x/EIScsYHskiI
5Qx4r5nT+we3ig==
-----END CERTIFICATE-----
Generated at Sat May 10 17:24:12 2025 by rpki-client