Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          0FX3wLcZ5L2PDSoTruX/gxTN5OQJTc98ZBEZjHM/uPU=
Subject key identifier:   9A:29:84:C6:D6:F0:11:6A:EB:93:1F:1A:91:DB:CE:5E:EF:A5:37:D9
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       019848F73588003C2FF9D8043CBBC984150A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          1447
Signing time:             Sat 26 Jul 2025 23:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:17 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: w8UmCeamF4sipGluM81jc29mvgxlcZossMBmSeSpGiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:35:88:00:3c:2f:f9:d8:04:3c:bb:c9:84:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Jul 26 23:00:17 2025 GMT
            Not After : Jul 27 23:00:17 2025 GMT
        Subject: CN=9a2984c6d6f0116aeb931f1a91dbce5eefa537d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:ea:87:b9:3c:90:ad:54:e8:1d:c3:f9:ae:
                    e8:ee:4d:59:37:50:a3:6a:a3:4c:84:d9:19:ca:36:
                    5a:ec:a9:fb:f8:69:39:05:d4:22:63:e9:1e:52:09:
                    ea:76:ac:51:b6:09:74:6a:e6:5a:61:b2:d0:2c:77:
                    ed:b7:ff:63:fa:98:d3:3c:ba:15:af:fa:0d:d6:a5:
                    ae:f7:60:b9:33:7e:17:6d:71:f4:07:ad:2b:bc:e2:
                    77:3a:df:60:50:d4:b9:54:91:77:1f:a6:85:3f:07:
                    ca:43:c6:86:17:32:10:8f:d8:9f:ff:3c:79:98:89:
                    3e:e9:ff:55:24:f5:4f:c2:32:57:58:2d:39:4e:69:
                    77:1a:35:6e:d6:ed:e5:ee:7a:08:68:20:c7:c2:e6:
                    f0:62:2e:71:4d:a8:bb:70:63:00:ae:02:ba:73:f5:
                    8d:af:4b:f7:9f:07:60:c6:4d:18:12:a8:41:a9:2d:
                    07:70:2e:b5:20:49:d6:70:dc:09:c7:32:97:ea:f1:
                    7b:bb:a9:67:e0:37:2f:eb:87:0d:d7:f1:3c:42:8d:
                    90:1b:2b:67:7e:7a:bd:fc:99:39:16:96:9a:93:8c:
                    d8:0a:d8:57:c6:50:b2:57:63:52:5c:68:09:cc:4d:
                    db:d7:8e:4d:1d:77:0f:92:5f:a0:72:c1:f0:a3:b1:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:29:84:C6:D6:F0:11:6A:EB:93:1F:1A:91:DB:CE:5E:EF:A5:37:D9
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:0f:ed:87:4e:b7:7a:7e:51:ee:a3:f1:ff:53:25:bc:9f:
         01:9f:06:d2:de:ef:76:c6:f0:ca:01:05:18:69:7d:2f:c4:f8:
         1c:1d:9c:8d:cd:cc:6c:23:56:6f:51:9d:ed:81:e5:05:ff:4c:
         4b:86:dc:29:5b:0e:50:41:37:f8:fd:f0:85:ed:59:8b:4a:60:
         b3:bd:59:b7:84:00:94:d8:4d:52:56:ed:6c:fb:b6:6d:25:d9:
         60:91:6d:56:22:b3:72:e9:84:eb:02:fb:e3:5a:ac:7b:b3:d1:
         1d:0b:c4:28:e4:d0:d0:42:28:ea:34:52:c9:05:11:ee:12:ab:
         23:57:f9:ef:04:23:a9:78:b4:b4:46:c4:a2:10:02:ce:66:d5:
         1f:60:ab:2b:b4:60:4b:d4:f6:97:31:5c:27:ca:dc:9e:6f:fc:
         da:31:4f:c7:fd:60:a2:8e:09:fc:e2:0d:d9:c3:c6:56:71:dc:
         98:5c:2d:ff:79:f2:fb:79:40:25:3b:cf:e4:bd:a4:64:6f:64:
         b2:47:5a:33:94:32:34:ae:ed:2c:52:77:c7:3b:fd:52:92:8f:
         70:72:5b:34:6d:ad:07:a4:2f:a9:67:a0:f4:89:e7:ee:4a:66:
         0b:78:ba:de:02:1e:f9:75:06:7c:bf:e3:13:07:a6:e1:4c:52:
         7b:48:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:45 2025 by rpki-client