Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          nnXtr8kR9LreIXzffyG1CzOrahP4V0EbIK47s5N+P0o=
Subject key identifier:   C2:53:44:10:54:A2:01:A5:2F:43:1F:DA:01:C9:E8:95:28:C9:27:48
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       0198413DE419426BDF2D9AB3C51B660DB940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          9E
Signing time:             Fri 25 Jul 2025 11:00:31 +0000
Manifest this update:     Fri 25 Jul 2025 11:00:31 +0000
Manifest next update:     Sat 26 Jul 2025 11:00:31 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: Z6mwVOu2c2nJJHwjNy5lR/oSD5nungHMxsiZK/QBUw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:3d:e4:19:42:6b:df:2d:9a:b3:c5:1b:66:0d:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jul 25 11:00:31 2025 GMT
            Not After : Jul 26 11:00:31 2025 GMT
        Subject: CN=c253441054a201a52f431fda01c9e89528c92748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:17:a2:4a:4d:90:af:29:1b:6c:bd:60:58:
                    50:c6:91:00:37:80:af:9e:39:fa:40:51:7c:19:0f:
                    08:cb:7b:ff:00:62:ef:93:38:06:44:64:9a:7f:2e:
                    42:9b:ae:86:fb:0d:f4:d9:2a:2d:05:cc:e4:33:c0:
                    80:b9:5a:40:52:33:0b:77:4f:b4:96:4c:42:8d:21:
                    b7:fb:49:76:b6:0c:94:06:54:df:2f:d6:0c:2d:3d:
                    2c:45:4f:70:12:bf:8d:39:b1:b3:48:65:89:65:2d:
                    cf:83:bc:43:82:5d:e4:d1:34:2b:54:86:6f:fa:64:
                    2a:5b:54:fb:93:2a:36:91:7e:ed:63:d3:20:01:62:
                    95:3c:df:6d:d9:8c:7c:82:5e:62:47:5e:cf:f1:be:
                    39:ca:6d:bb:eb:1f:7d:16:86:00:43:58:b6:56:7c:
                    da:4b:e8:72:6e:cc:82:81:4d:85:9c:f1:38:33:3a:
                    9d:26:5a:04:e7:e3:c6:98:6a:89:40:46:de:45:51:
                    fb:5e:71:70:02:5b:b6:71:c2:48:dc:8c:bc:ec:72:
                    4d:d5:2a:d4:bd:81:f0:6b:f2:ef:72:24:16:0f:22:
                    da:bd:5c:b7:0a:70:ae:03:6a:f6:77:36:79:96:b5:
                    79:b0:98:19:c3:04:2f:5d:7e:9f:8b:98:be:ba:5c:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:53:44:10:54:A2:01:A5:2F:43:1F:DA:01:C9:E8:95:28:C9:27:48
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:af:96:16:56:57:b6:cc:25:5e:f1:42:76:d9:f3:b5:23:a7:
         35:66:70:6c:fc:8b:d3:ba:90:20:92:fc:51:e4:46:33:94:41:
         bf:3c:6a:92:07:2c:64:bf:78:90:b9:b6:1d:87:00:2f:79:d2:
         48:8e:01:bf:43:83:98:ac:71:27:8b:d5:61:1c:b0:71:3d:b7:
         c5:ff:f4:44:d7:28:28:bf:29:61:79:7b:de:28:ad:4b:ad:90:
         19:f9:27:97:b7:64:28:03:db:16:90:54:5e:03:8e:3e:c5:2b:
         43:ea:8d:64:a1:a9:74:a7:9b:a9:9e:eb:31:36:59:11:e2:5c:
         03:44:bd:8a:34:79:f4:1a:fa:68:0f:fa:4c:43:79:3e:38:8e:
         74:51:8c:74:9d:11:0a:f1:4b:be:85:b9:d8:26:cf:7c:aa:f3:
         5b:89:35:42:70:3e:09:27:ac:1c:81:5c:29:d4:87:fa:2d:00:
         30:13:7d:30:16:dd:6d:94:58:de:d8:25:42:f1:6e:d8:c9:5b:
         ee:7b:0e:77:8a:c3:a3:ed:35:a7:a1:c4:48:29:ec:0e:a0:69:
         fa:cc:7c:da:6a:ad:d8:7d:40:6f:ed:a6:83:d0:00:77:f2:0b:
         28:d9:ac:7a:89:04:d5:4d:73:c3:8f:21:30:18:8d:34:96:aa:
         fa:5b:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:06:30 2025 by rpki-client