Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          VmHuOUsXOZ/Vy1rZbLR5ALRGl6EDkr3HFg/4Saa1XpE=
Subject key identifier:   69:02:74:98:D3:7A:16:5F:33:72:20:21:20:D8:A6:17:01:29:21:E9
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       0199FD6AF4F40EB28A3CA8C0294189A8C510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          0184
Signing time:             Sun 19 Oct 2025 17:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:08 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: 6CyMm1qWIxiTxa/9DJ7bLk/U37ugqvbqsq0klc7yNI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:f4:f4:0e:b2:8a:3c:a8:c0:29:41:89:a8:c5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Oct 19 17:01:08 2025 GMT
            Not After : Oct 20 17:01:08 2025 GMT
        Subject: CN=69027498d37a165f3372202120d8a617012921e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:12:24:b8:67:ba:d0:e2:f7:96:81:c7:8e:
                    0f:8c:a4:05:2a:88:d5:11:67:8a:47:7e:74:56:4d:
                    a5:7a:f9:08:9e:57:c6:44:0a:2e:38:ea:66:21:82:
                    e9:4b:f8:49:77:c8:64:aa:38:dd:67:21:02:64:24:
                    27:0b:20:5a:b9:f5:c2:e4:7e:98:b6:35:6c:fa:57:
                    52:ab:9b:12:70:14:d3:64:e8:7d:6d:fd:4f:39:73:
                    4c:fc:8f:15:e0:3b:31:78:86:9c:22:cd:a7:3c:02:
                    53:2a:ac:d7:e8:54:cd:e2:14:47:2a:27:ff:58:04:
                    cc:6d:01:1a:e3:38:97:0c:5c:52:a3:4d:ba:7e:1f:
                    41:b6:b1:41:20:8e:77:3f:f2:a4:e8:d6:88:06:b4:
                    ad:35:20:9c:a0:3c:c9:cf:e7:39:0a:46:df:1f:95:
                    28:be:da:f3:25:07:e2:93:71:e5:87:29:e1:08:86:
                    b6:76:4a:7f:f7:4d:25:8f:8a:47:88:f8:98:d7:38:
                    36:54:dc:36:13:e2:e2:21:dd:30:b5:1d:46:e3:83:
                    43:73:e3:8f:68:78:ab:04:38:73:e1:bf:c5:85:95:
                    0d:02:b7:93:e2:fb:fc:b7:77:4e:db:89:f4:f5:08:
                    48:25:a7:4e:d2:bd:ec:45:32:e3:41:9a:4c:94:0f:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:74:98:D3:7A:16:5F:33:72:20:21:20:D8:A6:17:01:29:21:E9
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:7c:74:84:b1:2a:da:d7:e7:04:cd:7a:42:82:cd:c1:a1:
         84:16:a8:03:f2:c1:d7:f3:18:d2:82:fa:98:48:95:be:e4:de:
         fb:88:ea:5b:89:aa:fe:81:38:00:5d:08:30:58:01:6e:ed:d8:
         d2:bb:e7:5c:32:2b:fd:56:52:85:34:fa:20:8c:97:97:30:6c:
         a7:d9:9f:ed:7c:01:12:05:8c:a5:69:77:09:82:0d:1c:93:ff:
         d3:98:f6:a7:7b:6e:82:40:06:59:ba:95:3a:20:f7:c5:69:c2:
         34:4b:bb:53:dd:96:8a:d5:a5:7b:7e:a4:ad:4a:d9:20:e0:c2:
         3f:04:0c:5e:1b:86:e9:48:24:1d:d3:25:f1:69:20:98:1a:7f:
         15:3d:f2:0e:36:d1:57:9b:a3:56:6f:5a:d1:11:9d:1b:a6:19:
         d0:62:34:b8:16:b3:2d:b5:47:0b:dc:46:c9:83:e4:49:90:d4:
         f1:56:64:f1:1b:af:01:a9:67:df:cb:52:34:3c:4a:96:8f:5e:
         24:36:8e:e9:02:2a:78:aa:b7:e2:42:78:a2:27:80:47:79:02:
         ce:f6:41:15:fe:42:ea:68:b7:74:ef:55:79:68:43:34:50:85:
         d8:cf:32:33:6b:56:70:82:cd:0b:0a:e7:57:40:32:b7:2c:90:
         b2:c1:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:08 2025 by rpki-client