Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File:                     RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier:          cfVlD/pBW/HmiXJNmj33GAs46F4GfV+JyvWEexud21k=
Subject key identifier:   9B:11:59:D2:3B:2D:8E:94:0A:20:96:D8:4D:A3:CD:A8:5F:9C:91:19
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer:       /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial:       0196BDEE38ED3D5F2446BFB1F62DC03C80F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 06:00:27 +0000
Manifest this update:     Sun 11 May 2025 06:00:27 +0000
Manifest next update:     Mon 12 May 2025 06:00:27 +0000
Files and hashes:         1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: pYDluF21aybHAP7dWaM1pvqs+v2hJPfaYhcjcTQ4vck=)
                          2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:38:ed:3d:5f:24:46:bf:b1:f6:2d:c0:3c:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
        Validity
            Not Before: May 11 06:00:27 2025 GMT
            Not After : May 12 06:00:27 2025 GMT
        Subject: CN=9b1159d23b2d8e940a2096d84da3cda85f9c9119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:fb:40:81:0b:e7:f9:44:69:ed:83:07:26:
                    ec:2a:ba:ca:28:3f:1e:76:6b:52:3f:a3:3c:8a:3f:
                    fc:90:3b:43:e6:75:7f:b2:43:10:07:f7:7c:08:5c:
                    8e:c1:d8:e1:1a:cf:9d:71:51:05:97:62:8e:4c:45:
                    ce:e1:74:af:d6:80:90:8c:5a:db:c6:c7:73:1c:fa:
                    a4:18:57:3b:d8:44:6e:8a:9e:cc:91:af:5e:51:da:
                    ae:26:af:12:32:3a:e3:82:87:0e:7e:35:6b:4c:70:
                    aa:49:df:b4:4c:c4:14:1c:bf:bc:ce:46:c5:5f:be:
                    4d:50:15:a1:c9:be:ed:f8:67:02:d0:4f:92:61:ed:
                    2b:d8:1c:dc:cf:01:dd:26:99:45:d4:9a:34:89:c4:
                    fc:54:eb:9e:21:dd:20:7f:1a:6a:c6:d6:5c:7b:ec:
                    05:5e:19:30:ab:43:1b:d6:69:64:1c:31:ac:5a:ed:
                    c3:53:75:f3:ee:c4:73:90:ca:26:1b:fa:dd:99:35:
                    93:2c:e9:d6:1d:f4:6d:0e:25:0a:fa:2a:a1:25:71:
                    13:02:2b:5b:a1:50:ec:1d:2d:1b:37:f2:02:22:82:
                    31:98:18:d5:63:4f:18:99:b9:aa:5a:8e:e5:5a:4a:
                    45:5f:b0:ae:d1:16:ce:fa:a9:63:4e:66:ad:6b:c5:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:11:59:D2:3B:2D:8E:94:0A:20:96:D8:4D:A3:CD:A8:5F:9C:91:19
            X509v3 Authority Key Identifier:
                keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:02:0d:b1:d4:a1:8a:c7:94:e3:fa:5f:ae:10:27:4e:2a:9e:
         78:30:b1:4c:e9:bd:33:78:c3:81:7d:53:7e:f5:5c:56:56:6e:
         96:cb:0c:83:6d:36:e1:a6:fb:39:55:90:04:6d:12:b7:b1:ae:
         62:89:3a:3c:2b:c2:93:f1:2c:9f:fe:b3:c0:26:ea:11:c3:9e:
         07:56:83:45:8a:b6:b4:85:c7:d5:8f:3f:17:b0:9a:6c:18:c2:
         ac:37:8a:0b:e2:66:8c:47:91:5c:06:5b:d1:0b:e8:db:00:ad:
         4d:33:f9:ea:6c:02:9b:62:e1:53:03:45:ec:8f:3a:77:18:6e:
         45:00:90:c4:fc:2a:60:d5:76:f7:59:b5:e8:7a:bf:ed:1c:a1:
         8d:ca:36:32:3b:23:ed:54:39:24:bf:f6:99:02:cb:7c:e1:26:
         d8:11:14:95:93:52:3a:21:89:b8:52:83:08:32:96:b0:ca:c2:
         4a:fe:cc:23:6a:cd:61:c8:51:86:46:73:06:7d:9e:bd:6c:a4:
         60:6d:d3:6a:4f:60:67:db:e8:ee:c4:31:d4:e1:5f:a1:5d:41:
         cc:ff:75:ae:b1:13:8b:50:23:bb:43:80:25:17:20:9b:41:53:
         ba:82:28:7d:40:52:ad:f5:02:4c:06:1b:b8:b4:43:2c:d8:4c:
         54:b9:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:57 2025 by rpki-client