Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File:                     LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier:          i/PPuiRSWpc+oPnCszN9ZaIsuNNT62tvdoL/tqM6VBI=
Subject key identifier:   B7:EC:E1:7D:86:7A:DF:D6:F4:B7:9A:D2:F8:C1:B3:B1:E6:5F:FD:8C
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer:       /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial:       0199FB461EA03D5774AB44AE19BA9E46ECEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 07:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:40 +0000
Files and hashes:         1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: Tn4tHL3OuqSklGNrihU7aMKufsfwHObnn1EmVl8jFlc=)
                          2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
                          3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:1e:a0:3d:57:74:ab:44:ae:19:ba:9e:46:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
        Validity
            Not Before: Oct 19 07:01:40 2025 GMT
            Not After : Oct 20 07:01:40 2025 GMT
        Subject: CN=b7ece17d867adfd6f4b79ad2f8c1b3b1e65ffd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:fd:6b:4d:f8:3c:e6:57:c4:91:76:40:04:
                    8c:8d:e2:45:52:1f:b5:f6:b3:8e:82:74:d5:a2:3e:
                    80:14:02:c7:c0:a2:05:cb:ac:87:0b:ab:99:bc:e5:
                    76:8b:e4:14:e2:56:43:42:06:7e:92:4d:20:76:13:
                    dd:c9:a5:34:ef:ea:18:16:72:fd:32:6c:81:6a:14:
                    2f:95:d6:24:03:89:99:2c:08:04:8a:46:79:2f:96:
                    ce:53:0a:68:a6:30:d3:9f:d8:8d:f1:d8:2c:d4:e1:
                    42:ba:70:5c:54:92:9d:89:b3:30:d3:7a:b8:c6:8b:
                    3a:28:f0:10:ba:64:cb:d7:96:1a:fb:b4:34:b9:0f:
                    18:81:64:2f:07:71:1f:97:65:1a:34:c7:dc:83:96:
                    73:1f:6a:bc:a4:d1:5f:92:6e:ca:c8:b9:6b:e0:c1:
                    7c:d4:ee:bf:ac:9f:0e:3a:a9:de:8c:ee:c9:de:b5:
                    0e:b8:4c:af:9f:fb:91:3a:51:d7:d1:6d:82:90:6b:
                    21:ee:97:22:b2:bd:1b:72:6a:c2:ba:ab:35:d6:0f:
                    71:66:23:73:da:27:5c:f9:f3:b8:74:6e:c9:35:20:
                    a8:ad:25:e6:18:22:e1:2b:42:31:db:c8:9c:6f:df:
                    0f:af:49:46:e0:4b:46:b4:62:2b:ee:12:dc:da:30:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:E1:7D:86:7A:DF:D6:F4:B7:9A:D2:F8:C1:B3:B1:E6:5F:FD:8C
            X509v3 Authority Key Identifier:
                keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:83:29:bb:60:ef:f2:2e:f3:73:53:2c:0b:20:f3:36:89:58:
         0d:12:33:d9:ca:4a:e7:ee:0d:1f:c9:d8:39:68:db:f6:55:0d:
         00:05:b4:87:5f:cc:ab:71:d0:cd:71:ab:63:10:fb:bc:72:38:
         6f:74:97:c0:ac:63:fe:07:c3:75:fe:c6:6e:ac:78:cf:66:9e:
         ad:20:c2:1c:a1:19:93:45:a1:09:3b:dd:98:70:d5:0b:f0:30:
         30:19:32:77:44:b8:38:00:4a:ee:c9:94:04:80:b2:22:35:36:
         31:d0:ed:b3:2d:00:69:5c:1d:c7:18:9f:c6:34:a7:6e:7b:57:
         c4:79:32:55:28:53:5b:a5:c9:db:e1:c3:9b:b2:02:87:a2:4b:
         af:c0:85:ff:a4:4a:27:9a:e7:84:33:c6:4a:38:c0:43:22:2e:
         12:bb:60:71:f6:0a:4e:8c:97:2e:1e:b0:46:d7:1d:d7:ad:d3:
         21:17:64:eb:bc:a5:6e:ed:10:75:65:9c:4e:a6:53:93:32:38:
         bf:56:9a:cf:94:78:f6:ac:9b:39:4f:ba:d8:21:74:fc:2f:27:
         7b:cf:d5:53:dd:7e:05:0b:f2:98:61:b5:99:dd:94:7e:33:21:
         39:0b:e0:c0:17:ae:55:2c:96:b6:8f:ad:63:07:48:d5:54:7f:
         2a:38:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:46 2025 by rpki-client