Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          9Yco3GsW2A6ndXZiKe4I6kCTJDqZZ0lNj8H6mBPfX48=
Subject key identifier:   30:C1:A5:CE:9C:9D:43:75:55:CE:60:1B:39:8A:64:C6:87:A3:45:B2
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019D9CD11EB6DA2FFE857EAF0ABBFF82EF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0365
Signing time:             Fri 17 Apr 2026 19:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:43 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: kgY1aCRCbOzYU+t24iQbPu/+Tn4eKpEz+Ev7Rww6/No=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:1e:b6:da:2f:fe:85:7e:af:0a:bb:ff:82:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Apr 17 19:00:43 2026 GMT
            Not After : Apr 18 19:00:43 2026 GMT
        Subject: CN=30c1a5ce9c9d437555ce601b398a64c687a345b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:b3:f7:a2:93:c1:f0:3c:45:43:e2:f7:bd:
                    7a:38:1c:61:b5:7f:ec:39:ba:53:23:48:08:65:23:
                    2e:49:7c:ad:eb:79:e2:7d:2a:bb:15:f8:32:bb:be:
                    52:9c:dd:1f:3e:9a:f2:c6:f8:64:d1:70:1d:29:63:
                    fa:a0:4a:32:fd:e7:c9:37:90:81:23:26:8b:ef:b8:
                    d5:c8:b7:20:57:ae:43:e6:f8:44:58:58:e2:4f:4f:
                    bc:87:ea:52:1b:ba:85:fe:2c:fe:d2:b3:e4:5c:51:
                    78:49:1f:21:1e:a2:8f:0e:62:4a:07:e6:16:43:c2:
                    1c:0d:8e:aa:27:48:b6:5d:d4:4a:bd:d8:ee:2c:f7:
                    53:55:72:28:3f:e9:19:7b:78:3f:48:63:f6:48:9a:
                    96:91:dc:ba:d8:d1:63:62:5f:e7:1c:fe:85:ff:8c:
                    f8:1a:1b:fb:12:26:e6:f7:70:b4:c6:07:bd:b0:53:
                    98:43:cc:6b:5f:68:e2:db:b9:e0:de:a4:40:35:06:
                    f4:c2:d0:b2:60:3e:75:8e:fc:2d:6e:ab:26:9f:d4:
                    a4:c7:87:33:3d:ec:dc:d7:64:61:34:41:c2:f5:e3:
                    d7:55:e6:ce:f2:d2:ba:36:7f:77:1d:4c:00:1c:06:
                    c5:35:38:b2:b5:e3:06:10:08:9a:42:08:73:b3:f2:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:A5:CE:9C:9D:43:75:55:CE:60:1B:39:8A:64:C6:87:A3:45:B2
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:ab:e4:d7:0d:8c:62:59:20:99:ee:f2:d3:de:46:d4:b9:
         f4:2e:cf:fb:c4:d7:b8:c9:58:03:15:24:28:14:e3:df:2a:e5:
         1f:88:dd:8b:36:8f:bb:4b:28:a5:61:26:58:c3:9d:50:7c:3d:
         f8:0e:ff:be:f9:fb:9a:e4:cf:48:b7:b7:0a:99:a7:59:cc:b0:
         a6:1e:19:da:99:e8:4f:1e:9d:cb:03:15:22:22:ae:d2:9d:73:
         56:72:b5:5e:b5:81:8a:74:84:9b:41:4f:f0:32:78:bb:fe:f0:
         8b:cc:da:cb:1b:12:66:97:37:e2:e1:ae:a3:c9:02:ae:3d:97:
         00:81:cc:30:d5:7c:4b:58:49:4c:a3:82:be:f5:9c:8d:b3:16:
         e9:63:bb:2e:6d:39:e1:e5:0b:f1:da:df:3c:92:1e:e3:63:cd:
         de:5a:28:ce:01:cf:75:8f:d6:a1:0a:c9:a6:94:a7:0d:1c:03:
         1b:0e:24:f0:88:c9:b2:22:a3:b2:51:4d:dd:ba:d1:40:67:fd:
         d0:74:a3:25:97:00:a3:80:c7:a0:ac:10:42:41:c8:1d:be:e0:
         97:15:50:bc:43:bb:57:17:45:25:02:4a:18:68:43:4d:17:84:
         de:cb:58:01:4a:bc:35:93:29:af:fc:9c:88:87:d3:64:9f:52:
         54:10:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:53 2026 by rpki-client