Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          0/h0QQeyuppPbiQIwenOozQsRHrDbo1lXbN5rlsxwW0=
Subject key identifier:   BB:7A:90:30:28:15:A1:AE:FD:16:7F:38:A4:C6:F6:C9:B3:AB:8E:C1
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       019A1A2B205AB00049154DE131B34293097F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          09EE
Signing time:             Sat 25 Oct 2025 07:00:25 +0000
Manifest this update:     Sat 25 Oct 2025 07:00:25 +0000
Manifest next update:     Sun 26 Oct 2025 07:00:25 +0000
Files and hashes:         1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: sY4TUeDSa5x9hkcRHiQNi8cJ/AIjEcFG6ra7Br9Klag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:2b:20:5a:b0:00:49:15:4d:e1:31:b3:42:93:09:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Oct 25 07:00:25 2025 GMT
            Not After : Oct 26 07:00:25 2025 GMT
        Subject: CN=bb7a90302815a1aefd167f38a4c6f6c9b3ab8ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:c3:b0:1e:ab:1e:7d:d0:cd:7f:b3:01:0a:
                    b4:97:32:c0:a5:18:1a:51:1c:be:fc:9f:05:df:87:
                    f1:c8:a3:50:c0:ac:51:70:77:ed:97:36:08:8a:72:
                    a4:e5:df:45:8b:e7:90:8e:af:f3:ef:2b:be:aa:cb:
                    52:4b:e1:72:9c:72:50:f7:f9:cf:7c:24:70:2b:86:
                    c6:d0:ba:14:47:7e:79:fe:e3:e9:8d:a6:2d:74:8e:
                    c9:59:7e:39:fa:a0:08:cb:48:38:12:66:20:f2:a7:
                    69:e9:e5:62:b8:5c:04:86:18:5b:49:49:20:49:bc:
                    61:fd:17:71:b4:2b:6d:c1:fc:23:22:2f:a1:5b:7c:
                    0c:4b:fd:57:37:46:e3:f8:12:29:87:fb:30:79:f2:
                    1d:76:d4:cd:ae:c8:4c:e4:11:64:fd:da:f6:c2:08:
                    dc:9c:b1:9e:9d:a3:80:bd:20:1a:7c:6e:e7:8e:d7:
                    88:66:86:53:32:f4:9b:e4:52:9c:a9:cb:12:10:18:
                    fa:e8:4c:5d:33:c7:7a:e7:60:21:3e:2e:8b:02:4f:
                    2b:c4:5f:17:9d:ce:b5:26:e3:b0:c2:6d:c4:3d:8f:
                    cf:fc:ce:06:33:36:b3:8e:a1:3b:45:83:33:ba:8e:
                    8e:0f:8d:d9:78:53:b4:2c:58:b7:f5:50:8c:45:46:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:90:30:28:15:A1:AE:FD:16:7F:38:A4:C6:F6:C9:B3:AB:8E:C1
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:c7:82:9f:ff:88:62:91:33:09:82:89:57:92:72:c4:40:
         b0:41:aa:88:2e:29:e8:76:fa:3c:7e:da:9c:f1:02:b7:19:02:
         ff:e3:ef:a6:78:57:86:2c:78:14:f0:01:c8:50:74:e3:ea:c2:
         e1:7c:7d:e4:5c:62:c0:e3:d7:d4:e4:a4:36:9e:85:c7:73:d7:
         f5:04:7c:a8:7c:8b:70:f2:c3:5b:70:99:93:1c:37:eb:e4:c3:
         db:4d:01:c4:73:c2:e3:fd:96:e0:4f:d1:e6:c5:05:af:a7:0a:
         a2:0c:18:0a:47:c8:c3:ca:01:bc:1d:4d:9c:5d:45:0a:47:3f:
         70:d0:31:8b:bc:84:8b:d2:d6:28:e9:6b:a6:93:83:b3:58:00:
         e8:55:d1:d4:80:ec:bd:d1:41:1b:b6:86:23:95:c3:9c:81:61:
         9e:dd:9e:55:6b:7b:39:da:2a:bd:5e:15:37:e6:fd:63:8a:b0:
         ff:16:53:16:c0:76:bf:26:be:df:3e:f0:7d:67:b3:66:e1:2a:
         b9:9e:15:85:33:49:12:22:72:4f:ef:90:19:52:0d:fc:d7:13:
         f6:d8:ce:95:30:7b:b6:98:a6:21:b9:23:bb:3c:15:27:4b:0e:
         59:a4:49:2e:c7:89:0c:21:e6:9c:2c:52:f5:0b:ef:75:5e:6b:
         01:12:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:49:25 2025 by rpki-client