Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          opxrLWbfdhBSUtxsP56iWN2CHlcfrXnzc901Ph+3qao=
Subject key identifier:   5B:64:C8:25:A0:9A:2A:D4:08:87:96:0D:B3:AD:45:BF:60:65:73:E2
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019D38666EC398128AEB74ABB488B2BD21AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0331
Signing time:             Sun 29 Mar 2026 07:02:10 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:10 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:10 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: fZeJXTqMA3gLx9iW8BHpFcjeI/skkVii3BgzNCPzZTo=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:6e:c3:98:12:8a:eb:74:ab:b4:88:b2:bd:21:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Mar 29 07:02:10 2026 GMT
            Not After : Mar 30 07:02:10 2026 GMT
        Subject: CN=5b64c825a09a2ad40887960db3ad45bf606573e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:ba:e1:fc:f7:5e:c7:f7:dd:da:50:9b:36:
                    f9:4f:3c:20:15:fd:9c:74:f6:9d:97:d8:65:86:ee:
                    28:0e:c9:86:cd:ff:8d:6b:fc:84:eb:ef:35:01:2e:
                    90:8a:1a:60:09:d8:d0:34:21:02:84:06:73:d7:01:
                    b8:1c:9e:61:65:00:ce:97:a8:31:61:ad:d1:46:bc:
                    fa:9c:d2:33:0d:ee:0b:7a:4b:03:2a:fb:79:dd:5d:
                    6a:e2:34:b4:7c:21:09:22:83:a0:09:91:19:70:d2:
                    c9:1b:8b:ef:f7:21:27:ca:81:f4:42:ed:e4:4c:1c:
                    c6:24:29:a4:bf:dc:15:68:6f:4b:60:d5:dc:0d:ca:
                    25:47:1b:cc:35:c6:30:5f:45:3c:30:c7:df:84:69:
                    fa:91:c1:74:ae:c9:73:af:73:ef:87:23:a0:1c:52:
                    ef:f3:bc:96:0b:d6:00:ac:99:ef:07:19:57:0d:f2:
                    b5:76:ac:63:04:f6:5c:50:74:f8:c2:1a:3f:b9:80:
                    24:13:bc:8f:0b:fc:18:d7:ed:8b:9c:89:d5:ee:64:
                    8e:39:49:a9:c5:6c:c1:f4:1f:0c:2a:e1:36:4b:7e:
                    b8:9f:c5:36:08:dd:c3:85:ac:cc:ec:09:99:8a:c3:
                    91:3d:05:c0:e1:3c:30:a3:c2:2d:be:cd:d9:7c:92:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:C8:25:A0:9A:2A:D4:08:87:96:0D:B3:AD:45:BF:60:65:73:E2
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:1b:38:15:f5:a1:66:84:a2:7b:52:3d:72:61:7c:87:14:
         ee:c5:56:3b:e9:4e:93:60:67:a5:f9:10:e8:ff:9b:06:28:a2:
         0d:8d:48:07:4d:f9:8a:a1:2d:41:f0:3f:3d:fc:92:a0:62:6c:
         94:cf:4d:2f:61:d3:64:5e:60:95:3f:d8:7e:54:7e:80:a4:40:
         89:f8:a0:09:90:4a:0b:29:a8:39:1f:e4:03:dd:46:4a:bc:6a:
         2c:15:cf:c3:9c:f6:46:6d:01:e0:57:37:6f:52:db:71:29:60:
         64:1c:03:0a:f5:b5:1c:8d:06:21:c8:e2:ae:8e:8e:2e:8e:03:
         1c:2d:5b:4f:1d:f8:47:5f:f7:e2:16:25:b2:6c:aa:70:30:3f:
         b0:c7:fb:b7:55:23:95:86:31:9a:3a:ae:5f:15:f4:52:cd:e4:
         5a:45:f2:7d:23:99:a2:7a:e3:8d:01:c3:88:6d:e7:3b:7e:60:
         f3:aa:0c:75:14:39:0d:c1:03:14:63:bb:62:66:5c:95:d4:1c:
         ce:fe:69:30:2c:e5:09:cb:95:f3:3f:17:cf:b9:ea:93:c3:c3:
         cb:cd:23:5c:11:8c:ee:af:c2:a5:ab:af:06:2a:93:31:e6:e0:
         66:43:1e:ef:4e:35:f4:0a:9d:a2:2d:55:e7:c2:2b:e8:3f:f5:
         21:2f:70:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:46 2026 by rpki-client