Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          NpdXvl6HtRE5t6SWSazFuznUU9JrIVhvGBvtuL4tR30=
Subject key identifier:   DB:C4:16:07:8D:99:25:6F:13:D0:10:2C:DB:84:1D:B4:81:3D:44:48
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       019683230AEB805E348515CFC05258070160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          135C
Signing time:             Tue 29 Apr 2025 20:00:33 +0000
Manifest this update:     Tue 29 Apr 2025 20:00:33 +0000
Manifest next update:     Wed 30 Apr 2025 20:00:33 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: Fvl9gwntc7Qmg0PBL7Zus30aqOFkP0VdndZFss11J5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:23:0a:eb:80:5e:34:85:15:cf:c0:52:58:07:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Apr 29 20:00:33 2025 GMT
            Not After : Apr 30 20:00:33 2025 GMT
        Subject: CN=dbc416078d99256f13d0102cdb841db4813d4448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:84:29:c1:83:2c:6c:50:fe:57:c6:f4:a4:
                    a3:9e:cb:81:27:1a:54:83:fa:12:51:d2:f5:44:1c:
                    8d:ce:c5:35:e6:85:54:c3:2e:28:f1:84:12:b7:8f:
                    6c:00:81:6e:60:ff:1a:6d:13:c3:19:99:fa:9d:1d:
                    24:10:2e:f4:ec:1f:e2:6b:18:aa:ab:90:0f:f8:60:
                    29:e6:c8:03:2f:95:94:7f:3c:83:f5:f8:eb:81:bc:
                    dc:be:c8:86:7e:0c:59:9b:07:9b:fa:6d:cb:32:81:
                    97:db:fd:4e:a7:02:b0:c9:1a:0f:2a:48:08:f1:7f:
                    30:c5:9c:5f:79:65:7a:24:3b:1c:8a:f9:c4:76:35:
                    c0:2b:e7:bd:d5:d2:cf:fb:71:72:cb:c3:df:9f:4d:
                    d1:9c:79:3e:95:9c:ba:a9:11:7c:0c:2b:ab:a1:82:
                    df:7b:40:99:23:8e:21:5f:4b:d7:31:3e:8e:36:da:
                    21:c4:65:4b:73:0a:ba:a6:be:59:c9:16:14:7d:c7:
                    92:a5:6d:6a:ab:07:db:88:df:2f:4a:bd:e4:ea:cc:
                    2f:7b:ca:79:76:54:79:8e:38:f7:9d:6d:2a:90:0e:
                    e4:0e:d3:95:94:7a:39:61:8d:f8:19:a4:d4:f7:95:
                    c2:66:e4:9c:c4:c3:03:fd:e2:bd:26:a0:e5:99:49:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:16:07:8D:99:25:6F:13:D0:10:2C:DB:84:1D:B4:81:3D:44:48
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:07:d4:1d:62:92:bf:73:fe:56:fa:d7:54:fa:64:ad:fb:5d:
         3a:9f:34:14:77:c5:70:bf:10:53:43:b5:22:85:fa:7e:b9:07:
         51:ff:6d:a5:8b:4b:6c:3f:b1:50:6c:98:dd:b1:1c:94:8e:4e:
         e6:03:a2:dc:07:0f:98:dd:62:bc:c6:13:c5:52:b5:19:6c:43:
         36:95:c5:94:34:d1:e4:b2:72:77:ad:d3:bb:63:72:80:37:89:
         a0:0b:6b:f4:cb:56:ce:53:bc:a6:97:92:1b:ae:09:9f:da:c2:
         59:d9:d8:ec:aa:b3:bc:0b:6b:39:34:79:71:0b:54:5c:f0:55:
         78:bf:e8:7a:a8:2f:4d:62:85:b0:0d:54:8b:69:e1:99:7b:9f:
         7c:9f:3b:77:23:00:11:8c:9f:d5:f0:f1:35:44:b5:ba:c4:16:
         fd:5c:90:15:1e:28:d3:45:c4:db:5c:45:47:f3:40:91:0d:9d:
         63:60:e2:f0:66:5b:a2:6a:de:09:77:f9:f4:d8:71:c5:80:f9:
         a7:bc:7a:c0:ad:e6:ac:3f:a3:e6:69:a6:da:df:26:69:4c:20:
         09:a6:12:7b:9e:58:7c:f9:44:2f:de:12:fe:fd:b2:62:56:79:
         c5:df:ed:b1:c7:c7:97:d9:67:a3:4f:7d:36:49:c0:fa:50:fd:
         e4:2d:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:39 2025 by rpki-client