Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          DVSjzGVRXtOYUoK0pE3swSDfKTXbBBY7MKzhBSid42o=
Subject key identifier:   CF:BE:46:7C:B7:7F:B1:28:26:48:46:BE:F8:0E:BD:E8:CC:63:9C:21
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       01A1DE029F39CE8129C5393D12ABBC83BB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0599
Signing time:             Sun 15 Nov 2026 07:01:16 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:16 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:16 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: k9gDOYd3YuaIi+u3Z8dK3/0Lj3/CPTkdndnvcRHVRgU=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:9f:39:ce:81:29:c5:39:3d:12:ab:bc:83:bb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Nov 15 07:01:16 2026 GMT
            Not After : Nov 16 07:01:16 2026 GMT
        Subject: CN=cfbe467cb77fb128264846bef80ebde8cc639c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:50:34:a4:b1:90:c2:02:60:46:0b:4c:93:
                    36:1b:13:2e:7a:91:26:98:be:a4:a2:bc:b9:1a:86:
                    d4:53:6b:9e:97:1b:bc:c1:78:fb:64:a8:95:05:73:
                    e5:16:2c:75:69:76:9d:82:63:ac:83:d1:63:64:35:
                    48:4c:73:7c:47:4b:7d:1c:38:05:61:d7:91:51:87:
                    af:b7:8c:b5:db:1c:a2:82:05:58:fe:84:26:3a:9d:
                    7b:90:35:18:c7:79:c1:5e:63:db:e7:44:ae:7e:eb:
                    0d:96:dc:03:d1:19:44:e0:e5:d4:21:3a:6a:93:4e:
                    de:06:bd:50:42:78:2e:27:4e:a8:ca:e4:ea:bb:75:
                    fa:01:28:c7:e1:69:0a:64:4b:08:63:b2:6b:7e:1e:
                    ba:d2:a6:66:c6:ad:9e:8d:47:62:32:10:b0:c2:0c:
                    03:7e:f0:ed:a6:09:cb:ac:85:93:ad:c5:d9:b8:97:
                    f9:2c:f2:5c:11:a2:5b:40:a5:96:be:8d:f3:6b:de:
                    3b:48:53:90:e6:2a:d0:d0:e3:8b:4a:02:98:67:18:
                    02:c6:56:5d:72:8c:ce:61:d1:32:f6:ad:ff:de:78:
                    7c:cf:aa:49:6a:f8:9c:9e:42:7c:18:5a:a8:a4:a8:
                    95:00:6c:2f:c7:20:3a:b4:d8:62:42:c4:41:3c:20:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:46:7C:B7:7F:B1:28:26:48:46:BE:F8:0E:BD:E8:CC:63:9C:21
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:05:c0:d1:c3:61:26:c0:a6:48:3a:66:f2:ed:fe:7b:75:
         3e:e2:90:2e:92:a1:6f:4c:61:da:ca:4c:4b:fc:37:58:7f:63:
         ec:d7:2f:18:aa:63:43:3c:c4:ff:2b:2e:64:7b:cb:d5:e7:66:
         e3:e5:3e:a6:28:f0:1e:eb:64:b7:5f:73:03:0f:53:ac:24:1d:
         dd:b0:ab:96:4a:2b:1c:d2:ff:0a:e9:01:56:82:86:ab:43:0d:
         7c:02:0e:8f:7e:b1:d6:8e:d6:ba:36:e0:c2:07:be:a1:1c:a2:
         5e:0e:38:0c:5c:89:8d:2f:e4:1a:36:3c:d3:17:b7:8e:ff:fd:
         f2:b7:8c:04:53:94:0d:06:3c:22:69:d8:a6:cb:4d:6b:7f:9d:
         e0:8d:4d:50:11:90:16:ea:17:a8:a3:3d:42:32:12:27:68:ae:
         4e:00:5c:46:6c:80:52:6f:d0:44:82:86:06:25:5c:49:61:22:
         00:19:8b:f5:3c:7c:95:f2:64:5c:09:de:17:16:9c:49:54:b3:
         cb:59:fe:d8:16:e5:59:ee:9d:fc:7f:32:f0:c1:1c:48:b1:7c:
         52:b7:e9:e1:1c:23:2e:72:6e:65:22:0d:1c:92:60:8b:a2:c0:
         06:14:d4:a5:ab:e0:bc:1c:52:4d:4a:16:db:1f:2c:87:3e:c0:
         fc:40:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:33:26 2026 by rpki-client