Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          dxI1YZMGFyBmO3c5oHLzBUerMnguWAsU1IcAjEpDsRM=
Subject key identifier:   6A:81:82:E1:88:6D:32:37:4D:BD:F0:63:87:01:86:6D:01:B7:C9:40
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       0199FF228429BDA74DA87ECDC866D338FC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          09E0
Signing time:             Mon 20 Oct 2025 01:01:16 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:16 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:16 +0000
Files and hashes:         1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: lMQJzO79rXyCTCLX+7uoEvwn+svS5Q+dq0ay/QnExs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:84:29:bd:a7:4d:a8:7e:cd:c8:66:d3:38:fc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Oct 20 01:01:16 2025 GMT
            Not After : Oct 21 01:01:16 2025 GMT
        Subject: CN=6a8182e1886d32374dbdf0638701866d01b7c940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8b:47:e2:11:59:01:2c:0f:d3:51:b9:dc:69:
                    e1:45:c3:6c:83:c2:e3:7b:1d:bd:b3:a8:b1:63:be:
                    38:75:a2:13:b3:48:bb:08:44:69:06:ab:99:59:89:
                    4e:48:b9:19:16:75:ba:b6:f4:f0:11:ae:75:5a:cc:
                    1b:cc:89:91:a8:7a:b7:8b:1d:43:04:0a:55:20:c7:
                    95:ea:ff:9b:10:5a:84:7c:aa:06:b4:f3:ed:6e:62:
                    29:3b:a8:08:9f:95:4c:cc:88:9f:ee:83:3b:bb:f6:
                    67:e5:cc:d4:0b:d1:ce:1f:f0:d0:01:30:1c:e2:40:
                    7c:3c:ab:e0:73:b1:5a:05:7d:57:96:8c:7b:c7:17:
                    40:42:ba:1e:7a:3d:ed:0a:e6:5e:d7:78:11:e1:28:
                    c4:21:15:e1:b1:f6:b4:39:6b:08:37:1e:a8:97:1b:
                    b2:f4:e4:2e:2d:06:10:dd:e5:b5:d6:8e:11:83:0f:
                    7b:c8:bc:b5:78:5f:31:b1:72:37:ad:98:37:30:98:
                    47:f7:df:ae:e1:16:96:09:b0:59:ab:3f:c1:ec:56:
                    d0:b2:00:f1:57:d0:87:08:ed:04:3f:ee:6d:bc:cf:
                    a1:44:d5:0c:83:42:e5:63:82:31:db:06:f4:27:e2:
                    69:59:5a:17:9f:a9:8f:d0:b7:55:14:1d:32:3c:89:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:82:E1:88:6D:32:37:4D:BD:F0:63:87:01:86:6D:01:B7:C9:40
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:d6:6f:87:48:9e:37:32:fb:3d:63:e4:06:5c:2c:02:92:
         c8:cf:d9:d4:7f:6f:9a:0d:c4:bc:d9:96:b7:11:d6:ad:a7:89:
         33:40:fe:bb:75:aa:bd:b5:1b:19:55:dc:17:3f:d8:1e:80:13:
         95:ce:8b:89:c6:d8:6d:98:a7:41:39:fa:62:3e:7d:21:70:f6:
         eb:ab:14:10:3a:3b:38:e8:33:a0:1d:78:5c:09:b6:b9:00:fc:
         e7:c1:57:8b:47:1e:bc:76:78:a5:d2:b5:d0:c7:d9:35:ec:e1:
         83:22:42:16:a6:59:2a:2f:a1:ad:9e:ac:1f:74:60:05:2c:7b:
         bf:51:94:fd:b9:a6:48:9d:48:6b:2a:de:05:b1:77:43:66:8c:
         13:07:07:67:7b:f6:6c:68:19:36:d6:21:f4:86:01:37:03:19:
         1c:8f:74:07:12:e3:07:3f:12:e4:2c:20:3b:23:2a:56:9c:07:
         76:37:90:f6:66:11:93:e2:37:b8:bf:2f:70:6d:bc:a3:78:68:
         67:08:3b:d2:9f:49:90:90:e0:ee:43:0f:4d:52:a8:6c:56:d8:
         d9:85:74:36:fd:3c:ff:ec:c4:44:3a:6b:e8:74:a1:3e:98:81:
         3f:bc:03:15:5e:74:5c:47:39:70:87:fc:26:ed:52:f1:09:e0:
         40:9b:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:39 2025 by rpki-client