Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          Lc8jBEAffXOMmGBrLc210ep3gX3w2S25ctYihlmzwuE=
Subject key identifier:   3F:AB:D3:B4:64:BE:85:2E:CF:91:BD:32:FC:EC:92:DA:C5:06:B6:6D
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       0196BF01033D7748B1D9BDF9C9C9A5BA4350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          137B
Signing time:             Sun 11 May 2025 11:00:36 +0000
Manifest this update:     Sun 11 May 2025 11:00:36 +0000
Manifest next update:     Mon 12 May 2025 11:00:36 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: HYqmDFcgvWgu3u6AgudDXyec0JE740QVsZqM3EBR6iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:01:03:3d:77:48:b1:d9:bd:f9:c9:c9:a5:ba:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: May 11 11:00:36 2025 GMT
            Not After : May 12 11:00:36 2025 GMT
        Subject: CN=3fabd3b464be852ecf91bd32fcec92dac506b66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:ab:8f:4d:c3:01:6f:c3:e3:23:b0:66:01:
                    28:af:67:4b:e3:db:ee:a6:f0:f2:0e:d4:37:d2:8e:
                    c5:92:6c:b6:d6:57:a3:7c:5e:1a:23:f2:ad:5b:89:
                    5d:23:cf:69:88:e5:57:d2:24:31:32:24:5d:1a:f6:
                    26:63:49:15:7c:df:19:32:ae:ce:26:f6:d5:45:b8:
                    ab:1d:98:f4:86:b0:61:ae:6c:26:98:ad:9a:30:19:
                    5d:8c:e4:cb:1d:62:bc:0c:fe:7a:82:39:74:9e:39:
                    3d:15:b6:23:ba:66:94:97:e1:9a:4a:2b:1e:e4:bf:
                    fd:d0:37:a6:47:25:69:b7:54:11:78:17:f7:1f:1e:
                    82:59:da:cd:8c:49:3e:d4:24:c9:8d:63:5b:51:c4:
                    0d:00:81:6d:ec:01:0c:04:92:b4:fa:f8:96:49:21:
                    54:d8:9b:8b:2a:b2:e7:40:ea:3d:99:93:0c:c9:82:
                    73:fa:f4:00:27:f1:5b:ef:0b:67:de:56:8e:4e:73:
                    bb:c1:d7:aa:1a:0d:47:31:09:61:c8:29:26:77:ae:
                    c9:5c:63:02:ba:2d:0d:c5:af:84:d1:77:d2:28:a8:
                    43:07:c4:49:bd:6f:96:ba:cc:e5:d8:6d:19:09:05:
                    46:9c:ee:1d:5f:b1:39:c5:9a:0a:83:f6:be:59:51:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:D3:B4:64:BE:85:2E:CF:91:BD:32:FC:EC:92:DA:C5:06:B6:6D
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:40:5f:5a:ae:eb:f8:07:ca:c4:af:3d:17:76:ee:f8:72:91:
         8b:e4:0c:1c:73:d2:93:f3:c4:5a:0c:f9:e7:0a:7c:d0:e4:65:
         b9:f3:65:68:f0:18:28:6e:a5:8d:e3:ab:7d:d0:90:67:24:cb:
         5d:f1:b4:ff:13:e0:1d:ac:6f:7c:81:5f:6c:14:bd:bc:f3:86:
         8d:42:e4:43:70:d5:c6:42:5d:b5:08:e7:6d:fa:f6:8a:e5:db:
         c7:ac:88:ee:ef:f0:80:97:18:d7:ea:88:94:9d:e2:36:2f:10:
         12:37:2c:cd:c1:16:c0:31:fc:58:39:c8:71:9a:55:a7:8b:c0:
         43:04:bb:3b:9c:8d:a0:2c:a8:94:1c:95:32:39:60:83:36:b9:
         64:bd:e6:1a:f1:e8:93:9a:04:e2:41:cb:fb:28:22:fc:89:bc:
         57:63:b7:70:5c:91:d6:11:03:d7:e7:f2:fb:f1:02:12:06:10:
         f5:f9:c1:45:a4:43:a8:27:78:63:88:f0:d9:93:a9:32:e3:dd:
         c8:63:f9:2f:2a:d7:aa:1f:48:ee:aa:05:99:8a:a8:98:26:01:
         2c:f0:d9:95:6f:7b:69:7b:cf:d3:36:39:a3:9c:be:9d:69:ce:
         b2:c8:24:1f:d2:65:5d:55:06:1c:ea:ea:c8:bf:67:22:40:db:
         8f:7d:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:14:54 2025 by rpki-client