Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          OYaPjeOGRkpbP9rFV2aN3hO+uE20QceccnWZqtZbBXs=
Subject key identifier:   CE:48:81:1A:1F:40:CB:E8:54:9F:AD:51:A0:27:40:6D:7F:72:E0:54
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       01988E7D4D32845B3C0684D02D4E6226A5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          C6
Signing time:             Sat 09 Aug 2025 11:00:33 +0000
Manifest this update:     Sat 09 Aug 2025 11:00:33 +0000
Manifest next update:     Sun 10 Aug 2025 11:00:33 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: f1l/K5kW5grutIYWY095uucY016DMG968HrgFjm2L/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:7d:4d:32:84:5b:3c:06:84:d0:2d:4e:62:26:a5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Aug  9 11:00:33 2025 GMT
            Not After : Aug 10 11:00:33 2025 GMT
        Subject: CN=ce48811a1f40cbe8549fad51a027406d7f72e054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:69:ba:82:a9:b9:1a:02:67:88:6c:b2:97:
                    d4:0d:29:6b:c2:6f:e9:f9:de:69:36:3c:50:9f:5e:
                    3b:27:e8:74:ca:5d:6a:3a:61:0b:cc:9d:91:2a:7e:
                    a2:b2:6d:4d:17:2f:b3:e8:57:4a:c9:01:a7:6f:06:
                    38:14:41:b8:cb:53:39:ee:b7:bf:c8:68:4b:99:84:
                    8f:d3:8a:0b:e9:27:14:5a:c5:7b:77:1c:15:a6:f4:
                    4d:fd:27:e1:de:33:c0:6d:c8:26:fc:f5:dc:ed:5b:
                    1a:b1:ee:39:11:ae:c7:04:af:d0:c3:c5:3d:91:cf:
                    4e:b6:d8:d5:c6:3b:7f:8d:11:fa:b5:7e:64:32:e9:
                    2b:94:7d:34:07:8b:74:c0:fe:f1:95:42:3f:b9:aa:
                    06:47:14:91:67:47:2c:a4:c4:38:36:51:e4:ba:33:
                    b4:b4:41:24:c5:fe:c2:a7:8f:07:bc:c9:af:78:54:
                    c6:00:76:82:09:e3:74:e6:eb:1b:c4:65:15:5f:e3:
                    cd:bb:c4:b1:1c:2a:14:04:d3:d8:09:30:75:66:53:
                    0b:d6:b1:88:4a:75:95:7e:e8:8e:00:72:72:1e:63:
                    19:24:a6:a6:76:34:5c:7b:2c:8e:b6:bc:22:ed:ab:
                    df:3e:41:94:9a:cd:fc:2b:10:71:6c:43:ff:05:b1:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:48:81:1A:1F:40:CB:E8:54:9F:AD:51:A0:27:40:6D:7F:72:E0:54
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:41:4d:35:86:c4:5b:40:71:e5:3b:f8:94:e9:66:eb:75:
         49:5b:39:3b:84:e3:33:29:a1:f6:f1:f5:d2:88:5f:bd:eb:2d:
         61:a9:f3:61:26:7c:fb:93:27:35:cf:55:33:62:b0:37:83:39:
         4d:da:29:d0:e3:f0:8f:e1:49:d7:51:b7:f1:ac:c2:79:a2:2d:
         2d:e4:92:12:97:d2:97:7a:6e:92:42:cf:05:ae:1e:fa:49:99:
         85:a8:5d:c6:22:32:83:4c:cb:cb:57:e2:79:c5:87:17:dc:d5:
         e3:9d:75:71:f1:41:60:6a:3b:4c:fb:1f:35:43:76:73:1c:d0:
         5a:e3:c1:69:82:e2:4c:3c:6b:f8:55:69:1b:9d:20:07:f7:03:
         29:93:2f:da:a1:aa:3e:3d:26:24:b5:05:16:0e:f9:db:78:43:
         15:d4:f1:a5:6a:6b:07:2c:f0:63:de:20:51:62:46:3f:51:72:
         55:a8:c8:20:56:fb:79:a1:5f:aa:4f:78:83:ba:dd:ba:90:b1:
         2a:9b:b8:c1:8f:f0:f5:f3:f8:41:99:85:90:55:2a:82:f6:d7:
         f0:7d:c1:0e:d8:eb:dd:b3:ad:74:3a:cc:4e:04:b2:75:9e:33:
         28:a7:b3:a7:13:71:b7:71:2a:b2:eb:fa:4b:dd:7e:d3:32:c5:
         b4:5c:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:58 2025 by rpki-client