Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          stXvHlGttIawKTg8d9OoFw2RHY+GEm2mH4zuvbycKkc=
Subject key identifier:   3D:1D:08:EF:09:8D:ED:E3:26:D1:43:F0:3B:E5:35:3C:B1:FD:7D:E1
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       01964DB523555D9C5FB33C150D0857E1D7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          07F6
Signing time:             Sat 19 Apr 2025 11:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:38 +0000
Files and hashes:         1: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (hash: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=)
                          2: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: HW4e24hyN/mGGr9a79F1t4nL7jUzbT5/eZwCxYBXWQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b5:23:55:5d:9c:5f:b3:3c:15:0d:08:57:e1:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Apr 19 11:00:38 2025 GMT
            Not After : Apr 20 11:00:38 2025 GMT
        Subject: CN=3d1d08ef098dede326d143f03be5353cb1fd7de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:5c:3a:a5:8c:5e:12:9a:7b:f3:fc:40:30:
                    a6:1b:16:ea:5e:59:4f:5a:2c:0b:e1:fa:1c:d4:d8:
                    b9:cd:bb:95:f6:4a:57:da:88:e4:5e:2e:31:69:7b:
                    09:62:4c:f6:74:20:a4:27:0d:34:f8:05:a7:a9:81:
                    8f:c2:35:11:c5:03:c2:98:94:a8:d1:b4:b5:56:52:
                    bd:5b:65:52:60:52:49:a0:82:78:c6:50:ae:7f:31:
                    00:be:35:c1:b2:bd:55:5a:1d:57:df:da:94:d2:d6:
                    8d:15:af:aa:62:85:2b:47:d8:bd:58:67:3e:09:eb:
                    c5:a0:15:e2:e9:eb:54:cc:e7:0e:00:96:33:d7:9b:
                    fe:63:7d:71:6c:f5:25:ee:aa:a9:a7:e7:97:0f:62:
                    10:ac:54:f0:f7:ae:f5:c7:bf:bd:cc:2d:2e:d4:64:
                    eb:b4:9a:29:8c:2f:74:74:47:61:51:40:89:4a:bb:
                    bb:cb:40:3b:49:2f:c4:37:a7:c5:f0:8c:34:59:d0:
                    72:41:e1:cc:41:1d:a7:70:6f:68:ef:f9:0a:93:51:
                    97:64:e6:2e:af:29:c2:86:95:db:52:de:73:d7:a1:
                    0a:58:c4:c5:6b:0c:44:dc:8b:f3:78:ca:60:1b:d2:
                    47:22:ec:ff:62:80:81:01:66:28:e4:27:4a:22:df:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1D:08:EF:09:8D:ED:E3:26:D1:43:F0:3B:E5:35:3C:B1:FD:7D:E1
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:6b:2d:59:42:32:9d:c3:a7:2d:6e:00:3f:16:84:ad:6f:
         97:4a:8d:ef:37:e9:be:a1:f1:d6:9d:42:a2:7e:ab:88:52:04:
         a4:ee:25:ad:96:8c:02:19:27:82:07:8f:a8:bf:cd:72:0f:1f:
         61:19:24:49:50:65:65:0f:d2:aa:58:83:0c:49:70:2f:ef:c8:
         67:9b:72:d9:5b:34:a9:60:10:c6:8d:87:1e:17:4d:17:53:e4:
         d3:1a:9a:fb:66:37:06:19:06:cb:51:c8:72:9b:26:5d:b5:d1:
         db:ec:a1:72:c9:83:ba:a2:25:a1:52:d3:dc:9f:6f:d2:f8:35:
         fc:00:fc:d6:6f:9c:08:03:59:86:00:0e:38:91:22:26:fe:b7:
         3c:ea:75:0e:0b:01:7b:e5:67:b4:00:7f:3b:5c:19:26:e9:4e:
         44:8d:a4:c8:3e:b9:dd:5b:36:16:2a:b8:1c:63:1b:ed:56:6b:
         3f:46:77:0d:31:17:e2:c9:e2:cb:2b:3f:31:92:dd:15:68:19:
         cc:ae:ba:70:09:9e:81:83:86:96:2e:7e:4d:ca:c4:bf:ef:8d:
         7a:25:70:3b:60:e4:80:6d:8b:cd:65:cf:0d:49:03:85:b6:0a:
         77:d7:1a:ee:39:08:c3:f3:10:f8:61:a9:ae:d5:57:3b:38:47:
         9e:19:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:22 2025 by rpki-client