Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          xpTv9ln45AX+XGn/97ji5jSSv08WuhFXobnvcYQMzEU=
Subject key identifier:   6F:99:65:46:3D:B9:0A:D2:7A:AE:7D:88:5D:08:E1:51:8F:88:9B:5F
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       0197B9D89E82EE389F6BB2009200E8F47079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          08B3
Signing time:             Sun 29 Jun 2025 04:01:10 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:10 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:10 +0000
Files and hashes:         1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: iLvsZjWVubnjJzCwTACmBR/FBIM7eJzoSeAvLTigfA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:9e:82:ee:38:9f:6b:b2:00:92:00:e8:f4:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Jun 29 04:01:10 2025 GMT
            Not After : Jun 30 04:01:10 2025 GMT
        Subject: CN=6f9965463db90ad27aae7d885d08e1518f889b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:ac:09:d3:41:5b:c8:d0:6a:8f:49:81:e1:
                    ea:d2:1b:0f:c6:6e:0b:72:fb:ca:cb:3c:14:bb:48:
                    82:1d:1c:30:ac:2c:bb:7a:84:e9:b2:73:9e:cc:66:
                    42:84:96:84:39:3d:2a:87:09:39:15:9d:89:f4:3b:
                    3f:16:2a:28:0c:6b:e0:33:59:78:b9:ac:fb:1e:0d:
                    77:dc:aa:5a:f7:53:5d:e9:36:b0:34:c6:03:a7:f5:
                    10:3b:a0:7e:e2:37:cb:4a:6b:bd:ea:91:1c:b5:55:
                    75:93:b3:f7:b6:4d:07:fd:9c:90:56:8a:04:18:e3:
                    ac:d2:76:b5:42:76:f3:39:41:8c:07:49:71:0a:06:
                    99:8e:78:c0:62:97:c0:7b:c3:9d:b9:e6:3e:78:88:
                    7d:04:21:bc:dc:b4:6a:8f:35:9c:95:6c:2c:9e:47:
                    40:17:f5:c6:9d:0f:68:e9:f5:c6:b0:e7:b7:e2:43:
                    03:14:10:30:96:3c:aa:82:5e:f4:0b:eb:2c:c8:61:
                    d9:31:1d:33:67:3c:09:72:e8:5e:6a:fd:6e:7b:03:
                    03:c7:15:42:8b:fc:65:ec:cb:b9:a7:52:fc:9d:0c:
                    8e:21:6d:c2:f7:19:f8:92:2a:39:34:0f:57:56:d5:
                    39:8c:00:8f:c3:e4:49:95:5a:28:ec:c3:82:dd:c2:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:99:65:46:3D:B9:0A:D2:7A:AE:7D:88:5D:08:E1:51:8F:88:9B:5F
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:53:84:85:dd:82:50:23:57:84:4a:a8:5c:12:c5:41:1a:
         17:81:29:28:7c:82:2f:09:8f:31:a6:1e:c5:1e:40:a6:de:9b:
         38:77:5a:cf:d6:2b:76:c5:74:83:fa:4b:c4:88:75:3e:87:fe:
         e0:9e:08:2d:a7:00:ad:c8:82:0e:f5:71:3b:56:64:1f:9a:46:
         06:a8:18:26:1b:27:31:11:78:93:60:fe:0a:22:19:2c:89:cb:
         8f:19:e6:6b:5a:4a:cf:a5:3c:84:fb:f9:f6:74:fa:fc:e5:a1:
         ba:e0:0c:b4:bd:b2:68:32:5d:b1:b9:61:ac:66:ca:09:39:b2:
         83:16:7d:ca:0c:fb:37:54:1e:f2:6a:d0:49:8a:c1:83:6e:28:
         eb:ea:7b:0e:96:41:fb:d2:76:60:de:b7:b5:74:b6:63:bc:7e:
         32:a1:f2:c3:bf:7a:6d:26:33:b6:44:0c:bf:26:b4:2a:3b:1a:
         39:e9:53:e0:87:fb:6d:f2:b7:65:3a:6b:83:4e:05:f9:4f:62:
         90:5a:38:37:a0:89:83:c7:1e:f6:e1:26:3c:15:e7:bf:dd:c6:
         da:cb:21:ce:6e:c0:04:72:11:9d:67:89:fa:42:21:75:34:6a:
         37:3d:a5:aa:74:ee:14:6f:a7:5e:e5:11:f6:7d:a6:47:0b:8a:
         eb:88:4c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52J6C7jifa7IAkgDo9HB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjUwNjI5MDQwMTEwWhcNMjUwNjMwMDQwMTEwWjAzMTEwLwYDVQQD
Eyg2Zjk5NjU0NjNkYjkwYWQyN2FhZTdkODg1ZDA4ZTE1MThmODg5YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGsCdNBW8jQao9JgeHq0hsPxm4L
cvvKyzwUu0iCHRwwrCy7eoTpsnOezGZChJaEOT0qhwk5FZ2J9Ds/FiooDGvgM1l4
uaz7Hg133Kpa91Nd6TawNMYDp/UQO6B+4jfLSmu96pEctVV1k7P3tk0H/ZyQVooE
GOOs0na1QnbzOUGMB0lxCgaZjnjAYpfAe8OdueY+eIh9BCG83LRqjzWclWwsnkdA
F/XGnQ9o6fXGsOe34kMDFBAwljyqgl70C+ssyGHZMR0zZzwJcuheav1uewMDxxVC
i/xl7Mu5p1L8nQyOIW3C9xn4kio5NA9XVtU5jACPw+RJlVoo7MOC3cLE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+ZZUY9uQrSeq59iF0I4VGPiJtfMB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhJThIXd
glAjV4RKqFwSxUEaF4EpKHyCLwmPMaYexR5Apt6bOHdaz9YrdsV0g/pLxIh1Pof+
4J4ILacArciCDvVxO1ZkH5pGBqgYJhsnMRF4k2D+CiIZLInLjxnma1pKz6U8hPv5
9nT6/OWhuuAMtL2yaDJdsblhrGbKCTmygxZ9ygz7N1Qe8mrQSYrBg24o6+p7DpZB
+9J2YN63tXS2Y7x+MqHyw796bSYztkQMvya0KjsaOelT4If7bfK3ZTprg04F+U9i
kFo4N6CJg8ce9uEmPBXnv93G2sshzm7ABHIRnWeJ+kIhdTRqNz2lqnTuFG+nXuUR
9n2mRwuK64hMUg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:25:03 2025 by rpki-client