Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          qLonNoD57ZipkvpX8F+mGakm/ESvhRL1jUZ8hixd/3I=
Subject key identifier:   B4:1A:E3:17:3E:37:D7:6C:EC:A6:F9:05:29:59:1F:8F:3C:5F:89:2A
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       0196B9DA4F5CBEE24DAEFA515A079F82C3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          082E
Signing time:             Sat 10 May 2025 11:00:14 +0000
Manifest this update:     Sat 10 May 2025 11:00:14 +0000
Manifest next update:     Sun 11 May 2025 11:00:14 +0000
Files and hashes:         1: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (hash: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=)
                          2: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
                          3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: 2eOdE3Jt4Ywvi+cMgN1S3+eNw/i7JiIeHwGGM++UsLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:4f:5c:be:e2:4d:ae:fa:51:5a:07:9f:82:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: May 10 11:00:14 2025 GMT
            Not After : May 11 11:00:14 2025 GMT
        Subject: CN=b41ae3173e37d76ceca6f90529591f8f3c5f892a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:8c:2a:2c:b0:09:ae:89:05:76:8b:44:f5:
                    82:d3:a8:47:57:52:7f:ef:ad:5f:cc:d9:3e:2e:3e:
                    dd:40:9d:b3:5f:0c:4b:de:0b:4b:85:c1:fb:3c:15:
                    c5:4c:e6:8b:3f:a2:01:a6:c6:25:9e:d5:cc:a4:8c:
                    62:92:9c:71:69:c9:9c:0f:2f:64:bb:c4:af:4d:2e:
                    b6:a8:3f:5a:9d:07:dd:1d:bc:da:c6:a9:c4:9e:1a:
                    fe:69:2a:24:7e:7b:39:5d:94:4e:c1:8e:0d:69:c6:
                    49:c7:a7:30:68:4f:cb:a9:5f:47:ce:07:a9:9e:be:
                    6d:03:fa:e1:e4:9f:c0:ce:ee:f1:93:8c:63:5a:48:
                    bc:fa:27:35:55:b5:b9:13:62:cd:45:82:fb:8f:f4:
                    87:7a:7d:1c:cc:20:85:85:fe:52:af:37:ce:0f:4a:
                    22:26:2b:8b:35:d5:0c:2a:60:bd:5d:68:e1:1b:3c:
                    c8:ce:ce:82:84:59:cc:d8:65:9d:80:07:4b:6f:6b:
                    1f:f8:e5:59:ea:62:d9:cc:b2:a3:2b:6a:ad:84:9d:
                    42:93:97:07:ab:28:bc:2d:f2:2a:3e:64:05:1f:14:
                    c0:ea:a3:3d:d4:9e:3f:9a:f6:79:bb:6d:a8:c7:6e:
                    56:5a:0f:06:db:48:af:55:d6:ad:c1:6f:5b:6e:3e:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1A:E3:17:3E:37:D7:6C:EC:A6:F9:05:29:59:1F:8F:3C:5F:89:2A
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:83:dc:12:66:5f:1a:97:6b:84:9c:ff:1e:76:f4:75:c2:6b:
         2e:b0:35:9f:4b:60:48:17:3a:a1:31:a3:51:af:c1:b4:10:d5:
         3e:e6:59:9d:ea:00:dd:0c:14:65:c4:d5:e6:37:d1:c5:c0:05:
         63:6b:30:9d:c4:2e:cb:65:5d:b7:15:00:c3:54:d0:5a:a2:e6:
         33:95:66:5d:bf:cc:29:b1:ea:6f:0d:99:06:ff:e6:a8:4a:dc:
         0a:93:23:d4:cb:4e:17:7d:82:ee:3a:0a:9b:1f:a6:2a:5b:01:
         8f:61:75:37:7f:fd:bf:e0:5b:99:24:fe:bd:11:c1:36:79:4c:
         f5:9d:c9:2b:e3:c3:61:a6:79:f5:38:dc:f8:62:0b:b4:48:86:
         3a:22:ba:d6:05:6f:c5:50:ac:86:27:27:5a:38:06:f2:70:ca:
         56:97:88:74:dd:9a:01:e6:b2:57:00:0f:51:e9:22:96:ac:a5:
         0f:d2:1b:16:9c:64:cf:d7:dc:42:14:ae:d7:f4:b2:98:50:59:
         56:e8:57:bd:9c:a1:ea:19:2a:ca:2e:6f:83:42:ff:f6:4f:af:
         17:dc:a6:db:56:fb:fd:d7:df:1a:3d:30:e9:8b:66:89:f0:74:
         79:a4:a7:7a:d9:e6:19:50:d8:fd:3c:81:e0:06:08:78:23:d9:
         18:03:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:45:00 2025 by rpki-client