Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          f36Ru81r34Zs4E/Mjk0Z09+8bxvWyT9zfWIMx89tDDA=
Subject key identifier:   BE:32:A0:5B:0F:FB:55:A1:E2:DF:C2:B8:03:F4:A2:33:C8:F8:55:B0
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       01974AB1469319091918FCDFC074F580CD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          0879
Signing time:             Sat 07 Jun 2025 14:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:21 +0000
Files and hashes:         1: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (hash: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=)
                          2: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: WRNwQZdmY8tA/hfYAj7ZvUygvCFhcjrGrRZ+Zb9PCdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:46:93:19:09:19:18:fc:df:c0:74:f5:80:cd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Jun  7 14:00:21 2025 GMT
            Not After : Jun  8 14:00:21 2025 GMT
        Subject: CN=be32a05b0ffb55a1e2dfc2b803f4a233c8f855b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:8d:38:93:a4:cc:74:26:10:da:85:89:37:
                    55:b2:8c:e2:df:71:e5:96:24:bd:97:51:48:e2:63:
                    21:2d:b0:90:df:d4:d1:1b:d1:a3:34:0e:a6:47:c4:
                    99:95:16:c9:21:11:79:8d:3c:85:3c:6c:0b:ad:7c:
                    2f:28:fb:c4:89:8c:6a:ad:63:33:d2:94:bd:c2:5a:
                    e1:f0:3d:59:06:f4:6c:6d:30:a4:6a:6f:dd:68:f2:
                    cb:62:1a:fc:f0:36:3f:f3:c9:50:04:4d:fa:0c:b1:
                    66:28:ac:79:50:7f:bf:75:99:d1:32:3b:19:5e:0c:
                    6a:91:48:72:ef:d5:43:f0:b4:4f:59:82:22:c4:d8:
                    d1:e9:82:cb:a2:d2:af:c1:b2:3d:a0:8c:f4:5f:b1:
                    e2:51:d3:91:22:78:f2:5b:0b:89:9d:82:3c:82:3e:
                    bc:ca:cd:c5:2d:b2:0c:2d:19:5a:b1:4d:16:f9:77:
                    5e:e9:36:4a:a3:32:0d:6c:de:ba:ab:ce:4f:90:b6:
                    6a:fb:14:27:f7:ce:d0:0e:cb:76:b5:65:c1:3d:7c:
                    6a:7d:ec:f6:37:9a:17:5c:17:c4:63:fd:9c:ab:90:
                    d4:4b:51:cd:c2:81:33:3b:22:90:25:0e:fe:0e:20:
                    d5:a3:da:08:a5:dc:f4:c2:f4:6e:9d:7c:06:f5:df:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:A0:5B:0F:FB:55:A1:E2:DF:C2:B8:03:F4:A2:33:C8:F8:55:B0
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:3c:d1:19:d8:7e:dd:20:3a:30:f0:8b:45:50:af:07:ac:
         f7:5d:b8:c8:d7:8c:d4:d9:cb:f3:96:2f:26:ce:d8:0f:0a:05:
         20:ae:20:03:da:e5:f4:5e:25:25:95:ae:d5:18:6d:27:23:e3:
         4a:bf:44:a4:5d:14:85:fe:57:4c:4b:56:04:34:89:bd:d6:ea:
         d9:58:50:67:2e:90:51:f5:db:8e:22:1c:ff:0f:7d:3e:93:aa:
         e6:d6:bf:d7:ce:8d:93:90:79:b6:43:aa:25:16:9d:17:f7:4f:
         77:24:1a:c4:dc:db:e4:41:50:8e:c7:50:83:cc:0a:e2:a7:a0:
         76:a4:e3:f0:60:70:b7:9a:3b:36:52:63:88:98:20:d2:20:28:
         41:b7:6f:74:19:d8:f7:ed:94:d8:4d:c3:e5:6e:83:1d:33:7e:
         82:31:7b:89:a2:6b:f6:a8:24:54:d3:64:42:dc:66:7b:82:3e:
         4a:f7:ab:ba:d6:e6:b2:5f:59:70:fa:a4:5c:21:91:dc:bd:31:
         01:96:e6:b8:82:39:08:45:64:61:d4:f2:85:72:fe:6d:4d:d0:
         4e:64:84:1b:9e:de:e1:5a:26:6b:2b:b6:06:e3:6e:8f:78:ae:
         36:9d:35:ea:51:cc:6c:52:57:fe:07:c0:46:72:20:fd:2a:44:
         9a:af:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:45 2025 by rpki-client