Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          AlwguwI97DdHsUMJKLK+/s6lYp3J0mb11z/cHdhMbDs=
Subject key identifier:   30:82:63:51:51:A1:28:54:7F:E0:44:45:2F:3E:D5:68:37:39:BA:31
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       0199FB7CA7598C81788924F6A8A78BB96CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          1528
Signing time:             Sun 19 Oct 2025 08:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:14 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: DAZePUCxntmCN16zXrxIZd/IAi1za5AY0hI8gceTUqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a7:59:8c:81:78:89:24:f6:a8:a7:8b:b9:6c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Oct 19 08:01:14 2025 GMT
            Not After : Oct 20 08:01:14 2025 GMT
        Subject: CN=3082635151a128547fe044452f3ed5683739ba31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:97:3d:34:66:ff:6d:20:8d:04:7d:61:6e:
                    8a:dd:57:64:5a:b9:5c:93:a6:48:ef:d0:c1:e7:0b:
                    09:fb:5d:ed:0f:e6:77:ba:03:7a:a9:5c:7d:cc:79:
                    50:31:35:1c:7e:18:4e:21:5f:45:24:22:27:fb:9c:
                    35:3c:39:a2:12:de:cf:b0:1c:a0:0d:f3:84:2f:6a:
                    ea:cd:b0:09:56:5c:fd:48:55:a6:9e:64:c5:19:b7:
                    d2:c9:2c:e8:39:97:5a:83:15:18:e9:4f:d1:4d:fa:
                    c1:c9:9b:68:69:e9:4c:81:e5:ee:6a:e2:37:b7:78:
                    57:0c:e1:6b:66:85:0d:1a:31:58:44:92:b1:04:04:
                    5e:b2:48:36:2a:43:02:f9:2c:1c:5f:99:e1:6e:52:
                    7b:16:c7:e6:40:f4:33:ae:0c:86:3b:82:47:39:2f:
                    c8:9a:d5:d3:dc:6b:ef:73:fb:de:67:44:fb:8e:01:
                    87:54:12:11:2d:54:d3:ab:59:43:ec:d6:61:24:e6:
                    b3:c2:07:cf:6f:0c:30:20:53:eb:f3:7e:74:57:7d:
                    3c:1b:2f:c3:ed:b2:08:37:5e:82:bc:ee:d5:92:6b:
                    26:bd:eb:3f:d0:cf:58:b4:94:d5:f8:b0:47:92:cb:
                    4e:25:43:ae:2f:e2:c7:fc:36:2f:9d:89:c0:ec:a8:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:63:51:51:A1:28:54:7F:E0:44:45:2F:3E:D5:68:37:39:BA:31
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:1a:ce:13:ed:a4:da:e0:e4:15:fb:cf:09:b5:b7:53:b1:
         ba:87:0d:6b:f4:33:39:ee:2b:7a:99:0d:be:da:3f:b2:78:3f:
         9a:63:39:3f:6c:24:46:e4:71:f5:ff:b9:94:22:09:54:b5:08:
         06:5c:25:8b:86:37:76:42:a3:92:f5:1e:57:0b:23:dc:97:1d:
         0a:5f:1c:ba:46:dc:57:66:23:0c:42:40:12:81:73:a8:37:88:
         ab:69:96:63:4b:f6:8b:19:6f:f7:b2:8e:92:3c:df:a1:38:a5:
         44:1b:af:50:ad:bd:97:77:67:5d:f3:9e:f3:7e:85:87:ec:2c:
         ad:d8:44:80:c8:96:fa:8f:0f:d0:1d:4b:63:12:22:3e:be:12:
         3f:61:4c:79:a2:42:5e:51:2c:1d:05:fb:16:bf:72:69:17:f5:
         67:eb:31:33:cb:ee:b5:7b:e5:a5:e9:36:88:ca:8d:cc:b8:71:
         e2:c7:c5:7c:3b:bc:ac:54:8c:b1:6c:5a:ad:4b:65:71:12:a3:
         4a:ac:27:2f:20:aa:93:18:88:32:34:01:90:b9:63:d6:2f:e8:
         2a:7a:f1:71:a7:6a:82:1d:f6:18:84:27:ee:c0:b5:c7:dc:cb:
         9a:e8:c6:44:4d:ea:66:01:74:b1:e1:7c:3b:df:c9:cd:85:8b:
         96:7e:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client