Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          bnEpKGIqCkSmtbS+NqyZ2iXzizcEcewstKuM7RZQhgc=
Subject key identifier:   2D:0D:6F:08:31:FA:45:F3:EB:47:2C:31:88:6A:54:FB:05:98:58:CF
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019FAA1A14970C3BF738493DEF74FF37EEC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0475
Signing time:             Tue 28 Jul 2026 19:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:03 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: qOJcJ5Xr1bnfqFCngDlZvkp/oW40rpY/bWQpI4OoK9w=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:14:97:0c:3b:f7:38:49:3d:ef:74:ff:37:ee:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jul 28 19:01:03 2026 GMT
            Not After : Jul 29 19:01:03 2026 GMT
        Subject: CN=2d0d6f0831fa45f3eb472c31886a54fb059858cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:50:54:6d:78:96:cf:7b:47:86:1f:ad:af:
                    d6:26:7d:97:4a:26:26:b9:4c:61:9c:bc:c9:4e:29:
                    05:b2:7a:ca:0c:a0:0f:87:7d:92:fb:6b:45:c6:07:
                    1b:91:ce:fc:15:c3:7d:a9:ff:83:c2:7e:2c:f6:81:
                    ff:20:38:04:4a:24:6e:78:f2:ae:32:7d:c0:09:52:
                    c2:8e:6e:56:54:1f:23:cf:b9:be:8b:ed:96:be:01:
                    0b:7b:5c:13:28:77:22:54:91:53:67:7d:d8:39:7c:
                    c8:b9:62:d9:da:e7:f7:11:44:9a:88:db:77:b4:fb:
                    9d:d9:e4:2b:f6:d0:d1:f5:fb:cb:0b:dd:1c:eb:66:
                    56:33:7c:50:fb:54:91:bf:73:ec:2f:82:66:27:62:
                    6a:14:6b:e6:88:2b:02:e6:4e:6f:35:46:38:77:c4:
                    e0:87:6e:f7:aa:02:b6:97:28:de:f0:d9:3a:38:07:
                    95:3f:a6:3c:f4:88:01:eb:b6:83:b4:ad:fd:da:44:
                    8d:e5:dc:e2:9c:37:2e:65:51:72:89:22:f5:88:4d:
                    7e:97:b3:b0:77:60:fe:e1:04:a6:66:47:4e:e2:c8:
                    54:62:29:79:40:e2:fd:84:bf:ce:f1:0e:5b:45:1a:
                    f6:e8:6a:d0:4b:ac:7c:df:be:78:99:3c:7e:5a:e2:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:6F:08:31:FA:45:F3:EB:47:2C:31:88:6A:54:FB:05:98:58:CF
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:ca:3a:1d:38:f8:36:c2:62:fe:c8:ec:7b:09:e8:77:30:
         ff:7c:ff:2a:3b:f5:02:81:b0:77:f2:6f:d5:34:6b:58:d6:9d:
         b6:9b:5f:ad:dc:ab:eb:92:68:b3:92:29:22:ae:a1:eb:08:76:
         9b:1a:7a:bd:11:0e:df:0f:aa:a7:76:0f:d3:82:3a:17:d3:db:
         39:1e:db:a6:d8:c6:03:ee:d6:f4:e3:24:2e:02:ed:d4:46:53:
         15:18:e1:b9:6d:b2:f2:43:d3:9c:6a:fd:91:13:02:d5:e2:d4:
         0c:e5:af:ed:61:77:39:72:35:5a:ab:97:1f:1b:0d:40:ec:6d:
         61:0c:57:ae:bb:48:35:30:2b:b5:e9:e7:23:57:30:dd:57:7d:
         04:5c:97:39:a6:dc:13:57:8b:36:d0:22:70:a2:c2:aa:29:e8:
         4a:29:14:e3:07:29:22:60:1f:0b:86:aa:e3:9a:2b:5f:7b:df:
         0a:10:2d:45:65:32:42:b4:bb:61:4b:a0:5d:0d:34:d4:1e:c2:
         4f:49:d8:cc:ca:59:86:05:51:50:cd:99:df:11:d6:c4:d6:96:
         9b:7d:c2:b3:56:3d:de:5c:cd:30:9c:70:be:fd:84:eb:a4:8f:
         1d:c8:ee:89:83:32:ce:59:5a:e1:ca:a7:42:73:8e:f2:e2:81:
         ea:51:cf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGhSXDDv3OEk973T/N+7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTJjYzIwZDY5YjMwZGRlMThlYzBkMDAyY2UyZjkxNDli
ZmIwNmQwHhcNMjYwNzI4MTkwMTAzWhcNMjYwNzI5MTkwMTAzWjAzMTEwLwYDVQQD
EygyZDBkNmYwODMxZmE0NWYzZWI0NzJjMzE4ODZhNTRmYjA1OTg1OGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYRQVG14ls97R4Yfra/WJn2XSiYm
uUxhnLzJTikFsnrKDKAPh32S+2tFxgcbkc78FcN9qf+Dwn4s9oH/IDgESiRuePKu
Mn3ACVLCjm5WVB8jz7m+i+2WvgELe1wTKHciVJFTZ33YOXzIuWLZ2uf3EUSaiNt3
tPud2eQr9tDR9fvLC90c62ZWM3xQ+1SRv3PsL4JmJ2JqFGvmiCsC5k5vNUY4d8Tg
h273qgK2lyje8Nk6OAeVP6Y89IgB67aDtK392kSN5dzinDcuZVFyiSL1iE1+l7Ow
d2D+4QSmZkdO4shUYil5QOL9hL/O8Q5bRRr26GrQS6x83754mTx+WuIiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0Nbwgx+kXz60csMYhqVPsFmFjPMB8GA1UdIwQY
MBaAFLvizCDWmzDd4Y7A0ALOL5FJv7BtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDIt
YjExOWMyNThjZmFkLzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjRiMWEtZWE0Zi00MmUxLWI5NDItYjExOWMyNThjZmFk
LzEvdS1MTUlOYWJNTjNoanNEUUFzNHZrVW1fc0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncHKOh04
+DbCYv7I7HsJ6Hcw/3z/Kjv1AoGwd/Jv1TRrWNadtptfrdyr65Jos5IpIq6h6wh2
mxp6vREO3w+qp3YP04I6F9PbOR7bptjGA+7W9OMkLgLt1EZTFRjhuW2y8kPTnGr9
kRMC1eLUDOWv7WF3OXI1WquXHxsNQOxtYQxXrrtINTArtennI1cw3Vd9BFyXOabc
E1eLNtAicKLCqinoSikU4wcpImAfC4aq45orX3vfChAtRWUyQrS7YUugXQ001B7C
T0nYzMpZhgVRUM2Z3xHWxNaWm33Cs1Y93lzNMJxwvv2E66SPHcjuiYMyzlla4cqn
QnOO8uKB6lHPJA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:47 2026 by rpki-client