Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          rYTxV8k0GmgZRPj98t8wZ5HDmGoFXQtyFQD8eHm7hrg=
Subject key identifier:   57:1B:7E:D4:FB:7E:52:B7:BD:EA:11:68:3E:C9:D5:4D:14:7D:41:5E
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019768F2C61EC027FF393589397EF15663B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          2E
Signing time:             Fri 13 Jun 2025 11:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:30 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: y8gWQgP0cVjLji8Zbyz5gjav50PF9zOp4MzctQTmGEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:c6:1e:c0:27:ff:39:35:89:39:7e:f1:56:63:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jun 13 11:00:30 2025 GMT
            Not After : Jun 14 11:00:30 2025 GMT
        Subject: CN=571b7ed4fb7e52b7bdea11683ec9d54d147d415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:a3:08:ca:68:a6:1a:a2:ff:b1:2e:66:52:
                    e4:78:75:9c:1b:83:b0:cf:a9:e1:43:75:cf:26:86:
                    85:f5:c7:f4:9f:eb:a1:42:0a:6a:2a:72:f5:74:1f:
                    52:7e:1d:6a:d9:55:97:af:dc:02:63:1d:92:75:9e:
                    c2:fd:46:b7:a7:b5:e9:e1:d4:e5:4e:69:c2:c9:0c:
                    2f:03:1a:16:45:26:e8:a6:17:6d:2e:bd:5b:9d:e0:
                    45:3a:8c:5c:7f:b4:c4:38:dc:d6:ab:41:4a:90:8c:
                    37:9c:d4:d5:08:e4:ec:7d:d4:77:73:e9:b4:28:63:
                    2c:58:e9:d5:9f:6a:c2:29:42:22:ee:1f:ed:47:96:
                    f1:a5:f4:3f:3e:62:72:71:1a:71:8b:fa:8f:b9:4a:
                    87:07:65:f0:00:15:87:cd:8f:e0:2d:dc:d3:1d:a8:
                    8b:e5:c5:5f:e7:0b:3b:f4:3b:1f:1f:a9:a5:ad:75:
                    a7:d7:fc:f1:e2:79:29:40:b2:6d:12:ec:c7:b7:18:
                    8a:ae:8d:e5:bb:33:29:46:a6:d6:3f:37:49:fb:1d:
                    30:ac:55:8a:06:66:90:cb:71:f3:e0:8e:12:e5:b7:
                    8a:d5:9a:fb:c0:38:06:a6:05:68:6a:78:d5:4e:26:
                    0e:cf:64:77:9f:6b:e5:72:13:d6:d7:ac:2e:6b:5b:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:7E:D4:FB:7E:52:B7:BD:EA:11:68:3E:C9:D5:4D:14:7D:41:5E
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:73:8d:63:0a:0e:c6:ec:fa:dd:89:6f:c9:44:33:e6:af:
         9d:55:74:3b:eb:1c:d6:89:6e:ac:4f:a1:97:c9:c9:7a:c7:a2:
         ac:54:4f:31:1f:c7:01:0d:54:99:f6:ff:4c:2c:a3:31:67:2a:
         ed:e4:fa:f7:4d:80:1a:f5:77:ca:bf:58:64:44:06:d2:f9:ee:
         f7:50:ad:33:c5:d2:34:17:9f:18:00:81:52:13:37:7f:2e:43:
         45:8f:3e:b2:de:01:a8:14:c7:c3:de:f0:de:b8:db:f3:5c:57:
         62:ae:bd:08:5d:f9:df:0a:d7:78:1b:2d:2e:32:60:a1:72:23:
         10:60:7d:72:b7:42:ad:48:96:b4:b9:32:4b:6b:41:bf:9c:1e:
         bb:d9:db:e9:63:54:ff:cb:2d:ca:d6:bb:d7:18:57:43:cc:b3:
         c6:ee:8f:4b:b1:23:ef:ab:9d:54:2b:8d:f0:e8:18:8a:73:92:
         0a:63:b4:b8:04:1e:c3:42:44:2c:61:3a:51:c5:6f:5a:d5:51:
         19:56:90:0e:69:1c:4c:92:d9:24:33:b7:e2:ac:0c:c2:16:8c:
         1e:69:7b:a8:aa:00:df:4c:32:e6:5c:2b:c6:a0:3c:ec:c4:a9:
         e1:fd:4e:f1:f7:78:0a:05:43:47:1e:10:7c:4c:c8:a0:c3:1b:
         e6:7c:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:12 2025 by rpki-client