Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          Fz+yHrj8AYbC7DxK10mxO+t0a7fJnZ4IvsOLfK34Ub4=
Subject key identifier:   41:5A:09:B8:07:01:2C:AB:1B:14:02:32:03:21:09:3C:D7:14:4C:13
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019FA07222D9342BE407C8E126B0E444F2D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0470
Signing time:             Sun 26 Jul 2026 22:01:02 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:02 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:02 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: iMUnW7PdcTozNF6xrYoSBQXXaBmXXri4cdLr88HGt34=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:22:d9:34:2b:e4:07:c8:e1:26:b0:e4:44:f2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jul 26 22:01:02 2026 GMT
            Not After : Jul 27 22:01:02 2026 GMT
        Subject: CN=415a09b807012cab1b1402320321093cd7144c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:85:de:6a:fe:d5:f7:4e:6b:99:77:de:e0:
                    ff:ff:40:51:c9:ad:9a:31:32:c7:bb:55:d4:fb:b3:
                    c7:1f:97:6d:6d:3f:e1:55:6d:e8:f9:4c:b0:17:98:
                    ce:7c:08:33:85:f7:af:07:d4:ab:12:dc:32:c7:f4:
                    10:01:57:1f:4a:32:76:02:dd:e9:cf:73:03:9c:ac:
                    46:d8:2c:2a:bb:0e:31:cf:50:28:10:44:3d:c3:85:
                    39:18:7b:0b:3d:45:f9:9f:56:cf:50:4a:1f:c5:3d:
                    1f:39:50:46:3a:dc:23:e8:0e:ce:37:55:7d:e2:9a:
                    f7:df:58:82:e9:f2:82:ee:8f:df:68:65:18:d8:e6:
                    0c:10:1b:34:42:7f:09:d5:41:d1:81:cb:bc:a7:d4:
                    bf:c8:ed:11:cf:7a:de:c9:4a:d8:05:a9:fb:3b:13:
                    52:60:2a:fe:13:a9:63:4e:3a:a5:c9:6c:ec:9f:73:
                    9b:6f:b8:e6:fb:37:21:c2:df:1a:25:be:fc:1c:35:
                    ce:c5:a2:9c:cf:8e:af:dc:cc:56:a3:0e:c9:1d:9f:
                    50:4a:08:0a:44:07:4b:4e:40:70:f1:e6:14:99:38:
                    b8:1f:a3:a3:05:db:3f:07:f0:28:0c:bb:70:a5:b9:
                    36:59:b0:d7:54:b9:07:f4:41:8b:62:2c:4d:27:7b:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:09:B8:07:01:2C:AB:1B:14:02:32:03:21:09:3C:D7:14:4C:13
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:10:d8:59:7e:6b:c3:12:0d:f0:b9:19:fb:62:31:c6:2b:b5:
         f3:64:82:f7:3b:db:38:d6:d1:9e:82:5b:74:2b:61:42:73:9e:
         dc:47:b8:d7:d9:3c:80:68:5a:b8:fc:75:d1:68:8f:03:f6:61:
         f8:2c:e4:dd:ff:2f:72:d9:09:3a:a3:45:f1:1e:00:51:49:18:
         44:d1:14:71:7b:ec:37:7b:b1:c4:8a:8b:af:76:88:51:03:35:
         c3:25:3c:70:56:10:32:16:27:fa:b6:0d:28:07:c5:d1:bd:db:
         4c:67:ce:33:08:b9:79:f8:48:7a:33:b2:71:6b:63:63:e6:c6:
         07:ee:96:f7:a5:df:3d:bd:17:70:94:c2:36:1b:ed:1e:48:e6:
         25:20:ab:12:dd:f3:26:30:ca:82:ff:d8:eb:23:41:6d:2c:94:
         9a:7f:c1:82:9d:fb:43:7b:37:70:ed:ee:69:64:b0:c1:7c:ba:
         a2:4e:76:3f:ab:af:21:58:cc:89:36:03:b5:01:2f:07:45:f3:
         b8:86:4a:1a:6f:58:66:11:1b:15:33:5f:fd:be:41:8c:92:13:
         11:d3:ba:8c:86:46:64:a0:04:3d:45:1a:ad:0c:95:5d:94:4c:
         b6:12:dc:6a:c5:60:98:ac:f2:09:3e:07:32:6d:6b:ab:9a:a1:
         e1:74:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:48:27 2026 by rpki-client