Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          Xg6ddaJDZNiwOnX/PyrHxA5/jzWahmsEfRs6+0lJrWg=
Subject key identifier:   57:90:E2:2C:4A:C7:F8:7F:77:94:94:25:28:47:67:6C:2D:07:60:B2
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       0198D5F150B9178F448A888E62C8E95A8085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          1490
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: 9V9a2yvqaYBHXmvh1Y9iOqQtNXUq6RIjIyKlmED6DTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:50:b9:17:8f:44:8a:88:8e:62:c8:e9:5a:80:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=5790e22c4ac7f87f779494252847676c2d0760b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:ac:f8:c2:54:f6:ae:bc:30:2b:05:e6:2e:
                    76:ba:5d:0a:b3:f8:c2:71:f3:3e:4b:5d:38:87:e7:
                    09:a9:ea:72:17:67:d7:20:dc:27:cd:34:ed:2e:31:
                    f8:f7:92:f3:63:35:b4:a8:cc:37:68:04:37:df:4c:
                    a9:22:2f:8c:74:1c:4a:b8:38:54:50:a8:f7:de:a4:
                    a3:fe:80:98:76:47:3b:39:1c:c2:93:7b:5f:26:31:
                    46:e1:15:5e:14:e0:69:2f:b3:54:ac:38:d4:1e:61:
                    2d:dc:ff:94:2e:3c:4c:e9:7f:88:75:14:a8:1b:16:
                    7a:ac:72:87:84:a5:8b:81:6e:3a:d7:92:65:a3:f0:
                    28:a8:bc:4a:fd:ab:b7:89:d7:28:c1:a1:ea:a9:72:
                    55:1b:96:eb:54:9b:19:e3:83:88:22:f8:f5:3d:55:
                    23:53:25:99:8b:a6:b1:a3:7e:63:58:f6:64:b3:8f:
                    51:bb:08:af:08:b8:07:2d:89:09:2a:5f:67:a6:e8:
                    23:b4:bd:c5:d8:94:9e:49:2c:61:e6:36:b8:71:cd:
                    9d:5f:35:c7:32:8a:e1:f2:f9:20:99:61:4b:d1:b5:
                    69:74:59:31:94:ad:f2:aa:d0:ad:6f:35:6c:59:14:
                    98:81:de:cd:31:3c:ab:3a:53:02:e6:55:34:43:8d:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:E2:2C:4A:C7:F8:7F:77:94:94:25:28:47:67:6C:2D:07:60:B2
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:98:66:59:d1:2a:b8:50:0b:bd:e5:b3:b5:56:f3:80:54:71:
         2b:62:d0:d3:8c:15:7f:6a:5b:20:cc:17:45:b1:ba:f1:66:7e:
         05:99:03:0e:f0:0c:f6:84:00:2c:62:57:8f:76:d6:9d:88:1c:
         88:20:d9:c8:94:16:a0:57:ea:6f:a2:28:85:ba:e3:e6:72:7c:
         8f:49:94:79:df:a1:57:6d:45:46:d3:ad:f1:9d:34:c1:22:52:
         fe:42:14:f6:db:7f:68:8e:15:38:5d:49:8c:ff:91:80:20:7f:
         a2:a3:83:f6:20:96:26:0f:09:88:6e:82:84:51:3e:21:a2:5c:
         0a:51:da:ec:e0:80:ac:cf:bc:a0:02:4f:f1:a0:12:61:73:c4:
         95:20:32:87:d5:91:63:b5:59:5e:74:1e:59:2a:b3:68:a3:20:
         96:b6:c1:3d:6a:bb:54:86:af:ef:c8:23:ef:53:5a:f7:31:6f:
         16:4b:65:50:6e:e8:bb:4a:d4:88:c4:17:2f:25:40:0c:31:69:
         03:d4:c4:d7:74:98:f7:f5:25:09:5d:31:83:5f:72:28:27:88:
         9f:53:14:26:b4:e6:de:d8:12:18:f1:1b:18:e8:5a:3f:3c:68:
         b9:27:1e:a5:5b:7e:3e:ea:2c:c5:95:fd:f0:ba:90:fe:74:19:
         13:40:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:34 2025 by rpki-client