Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          dOOMn6KvWLkUzM6DtGNg9U943qHxBA0K/zfJdcZjza4=
Subject key identifier:   70:50:B7:3D:63:FA:D1:A2:6D:13:48:94:55:2E:B5:C0:20:71:6D:2F
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019A29D5326F0F6AFC5AC3CE7281297C7895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          019B
Signing time:             Tue 28 Oct 2025 08:00:29 +0000
Manifest this update:     Tue 28 Oct 2025 08:00:29 +0000
Manifest next update:     Wed 29 Oct 2025 08:00:29 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: QljYRinI3+8np8KZrhLmFXY2lQiLTvSYiov7uRssTlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:d5:32:6f:0f:6a:fc:5a:c3:ce:72:81:29:7c:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Oct 28 08:00:29 2025 GMT
            Not After : Oct 29 08:00:29 2025 GMT
        Subject: CN=7050b73d63fad1a26d134894552eb5c020716d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:31:ab:4d:a7:03:da:89:6b:59:24:3d:89:
                    0d:07:2c:c8:f8:70:3d:46:48:7d:4f:1b:47:91:57:
                    d8:a1:6d:d7:d6:c7:c9:10:fe:ef:c2:fc:93:5a:eb:
                    40:5b:6c:bc:a6:34:18:91:0e:9d:4f:04:42:09:48:
                    fa:f2:3d:4e:db:6c:d7:5d:48:b1:3d:e7:da:c2:97:
                    d0:9c:85:d6:c4:16:0f:ce:20:f2:32:ea:5e:dd:5b:
                    e3:26:7f:22:39:17:81:f3:c1:b4:a9:07:00:3d:df:
                    11:0c:dd:69:53:08:3b:34:b1:7f:e6:98:81:58:6f:
                    66:99:8a:e9:0b:73:bc:f4:ce:51:39:4b:7d:f7:39:
                    66:98:d0:e0:bf:25:2a:bd:9e:8e:cb:fb:11:1c:6e:
                    a6:e9:51:74:e6:4c:dd:2f:08:76:cb:1c:4c:29:0f:
                    69:e5:a3:e9:ed:ab:e4:08:e6:6c:11:6b:d7:66:10:
                    86:7d:3f:9e:59:df:94:ba:96:9d:eb:96:3e:ba:0c:
                    d2:ae:cc:95:8f:d9:95:90:4f:3a:05:4e:48:50:c4:
                    8a:96:12:a1:97:44:b8:d1:14:a5:1f:7e:de:db:9e:
                    88:52:5d:8a:6c:e4:0e:88:26:e5:ff:d1:f5:2c:70:
                    aa:6c:ca:5d:da:3a:a7:20:26:61:39:05:0b:f1:2b:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:50:B7:3D:63:FA:D1:A2:6D:13:48:94:55:2E:B5:C0:20:71:6D:2F
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:67:9a:d5:2e:72:08:f4:28:62:fa:96:d1:8d:2d:5b:4d:74:
         9a:36:6a:5c:3a:9e:83:e1:dc:48:6a:6b:23:45:b1:51:ee:a5:
         84:f6:c0:ce:6a:0f:e0:e4:79:9b:13:81:8c:06:c1:a6:98:78:
         34:4a:f4:c4:6a:79:d5:70:90:c5:0b:0c:02:ec:b5:be:07:7a:
         c3:a8:7f:b2:34:48:75:d5:d6:91:75:ab:93:bb:0c:ac:da:10:
         e0:a2:ff:4b:9a:b3:64:68:64:c3:ac:21:ec:8a:40:c7:84:12:
         1b:b0:c4:67:ac:86:bb:0f:de:b5:fe:3a:b6:f6:d5:90:67:f0:
         16:f0:ce:b3:35:82:e8:20:aa:bf:fc:28:a3:aa:4b:fe:2a:dd:
         b1:1e:83:53:fe:dd:59:a8:14:f3:db:ce:46:50:de:76:be:9c:
         ec:0e:2d:10:31:19:de:b6:91:8e:17:5a:c8:16:5a:0a:2f:05:
         d6:ab:eb:73:e2:37:a8:7d:9d:89:72:46:f5:04:63:bb:8a:e1:
         fa:b4:c5:da:3b:e2:5e:2a:13:5c:38:b7:bd:2a:bd:92:7c:9d:
         2c:52:2e:b6:72:3b:e7:28:8a:8f:b2:2f:a1:50:5b:e2:0a:ee:
         44:5d:33:5a:81:93:0a:95:20:88:21:d3:ae:ec:c9:45:c4:34:
         77:8f:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:37:01 2025 by rpki-client