Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          WErXkrD+xjTd037l0nRnN45nE65az0KM055WgHAysd0=
Subject key identifier:   0D:9D:5C:6E:1A:0C:EB:63:5D:D9:E3:03:97:74:45:3B:0F:A9:3C:61
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019EB6C4DCE55055A26729D886F85575BBA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          03F7
Signing time:             Thu 11 Jun 2026 13:00:15 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:15 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:15 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: mbA6JI9s8KP3UCYlJitSukGyT8dfnZRQK1A8WonwQQA=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c4:dc:e5:50:55:a2:67:29:d8:86:f8:55:75:bb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jun 11 13:00:15 2026 GMT
            Not After : Jun 12 13:00:15 2026 GMT
        Subject: CN=0d9d5c6e1a0ceb635dd9e3039774453b0fa93c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:da:c7:bb:4b:e7:ab:b6:c0:d0:7b:c7:b7:
                    59:09:f2:ec:29:1e:9e:3f:7a:ff:78:de:39:3d:17:
                    08:98:2b:16:d7:b0:28:4f:50:94:84:7a:2d:3e:66:
                    67:c9:d6:69:a4:6a:22:b5:b9:7e:38:7b:80:67:48:
                    2e:e0:ae:ae:d3:6f:eb:54:12:41:db:bb:e9:20:5f:
                    08:37:b2:e7:d9:e2:ff:c2:d8:03:ae:e1:53:90:57:
                    a9:62:03:ed:b0:d8:07:12:75:b9:55:d8:d4:b2:2f:
                    49:c8:fb:56:0d:43:7e:52:67:52:17:af:14:55:96:
                    be:94:05:f5:92:0b:e5:92:94:0d:c5:f7:c3:91:7d:
                    6e:47:a0:7b:2a:f8:57:74:0f:62:8b:8c:98:0a:73:
                    94:71:fa:e2:6c:aa:5a:52:bb:16:fd:49:62:b1:4a:
                    ab:7d:f7:a7:2c:5f:87:1f:bf:03:0e:3a:7c:31:74:
                    cf:aa:0e:14:7e:4f:59:79:3d:06:0c:18:64:2f:91:
                    ae:03:e7:de:82:da:4a:82:c7:73:71:54:f2:56:6f:
                    3f:0d:65:b3:17:cc:8e:c9:31:ee:9e:16:4b:df:9b:
                    ea:71:f9:97:4e:93:9f:5e:ac:24:13:2d:df:e4:fb:
                    6a:c1:bf:b8:ba:fc:cf:6d:5b:34:ed:ea:50:b4:6a:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:5C:6E:1A:0C:EB:63:5D:D9:E3:03:97:74:45:3B:0F:A9:3C:61
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:30:53:f7:49:2b:ca:38:8e:72:7d:3a:34:b1:b3:3c:cc:71:
         ba:53:b3:1b:43:5a:a6:dd:c2:ee:68:ce:f0:b7:64:c4:80:4e:
         73:8b:cc:24:9b:6a:62:49:99:91:41:ab:b5:e9:fe:4a:6d:f0:
         a4:39:4a:63:81:0f:8c:d8:a9:bf:d6:59:b8:3f:14:9f:f2:0d:
         9b:e6:5b:7c:11:70:b8:5e:f7:bc:c9:45:66:73:35:e5:e7:03:
         0a:b2:d1:b7:59:25:d2:51:dc:6b:aa:22:b0:2f:b3:9f:2f:58:
         9b:52:12:a4:5e:db:c4:da:01:6d:26:74:52:a4:cb:8d:49:83:
         87:b7:ef:9e:f9:59:83:b4:b5:f1:af:48:3f:82:53:7a:39:bc:
         0b:28:37:75:38:d8:ed:0a:bf:3a:e2:96:50:5b:e6:07:9a:d1:
         41:32:82:09:16:f1:9b:9e:e0:5d:92:18:dd:f7:b9:7b:da:3b:
         57:df:62:02:83:c5:54:59:ed:af:f9:1e:c2:bb:b6:68:29:c1:
         1d:d3:31:3d:d8:02:b9:03:33:1e:fc:38:a8:ec:93:ad:22:a0:
         a6:13:28:ab:83:72:9d:d2:cd:be:92:60:1e:85:12:b4:3c:ba:
         e4:da:9a:1d:22:d2:df:52:4b:9d:fa:80:03:b4:4c:96:86:04:
         5b:0a:d9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xNzlUFWiZynYhvhVdbulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli
ZmIwNmQwHhcNMjYwNjExMTMwMDE1WhcNMjYwNjEyMTMwMDE1WjAzMTEwLwYDVQQD
EygwZDlkNWM2ZTFhMGNlYjYzNWRkOWUzMDM5Nzc0NDUzYjBmYTkzYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv7ax7tL56u2wNB7x7dZCfLsKR6e
P3r/eN45PRcImCsW17AoT1CUhHotPmZnydZppGoitbl+OHuAZ0gu4K6u02/rVBJB
27vpIF8IN7Ln2eL/wtgDruFTkFepYgPtsNgHEnW5VdjUsi9JyPtWDUN+UmdSF68U
VZa+lAX1kgvlkpQNxffDkX1uR6B7KvhXdA9ii4yYCnOUcfribKpaUrsW/UlisUqr
ffenLF+HH78DDjp8MXTPqg4Ufk9ZeT0GDBhkL5GuA+fegtpKgsdzcVTyVm8/DWWz
F8yOyTHunhZL35vqcfmXTpOfXqwkEy3f5Ptqwb+4uvzPbVs07epQtGoMRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2dXG4aDOtjXdnjA5d0RTsPqTxhMB8GA1UdIwQY
MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt
YjExOWMyNThjZmFkLzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk
LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDBT90kr
yjiOcn06NLGzPMxxulOzG0Napt3C7mjO8LdkxIBOc4vMJJtqYkmZkUGrten+Sm3w
pDlKY4EPjNipv9ZZuD8Un/INm+ZbfBFwuF73vMlFZnM15ecDCrLRt1kl0lHca6oi
sC+zny9Ym1ISpF7bxNoBbSZ0UqTLjUmDh7fvnvlZg7S18a9IP4JTejm8Cyg3dTjY
7Qq/OuKWUFvmB5rRQTKCCRbxm57gXZIY3fe5e9o7V99iAoPFVFntr/kewru2aCnB
HdMxPdgCuQMzHvw4qOyTrSKgphMoq4NyndLNvpJgHoUStDy65NqaHSLS31JLnfqA
A7RMloYEWwrZ6g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:09 2026 by rpki-client