Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
File:                     rlLbggkLND-J98Y3z0GpS8_UNGo.mft (raw, json)
Hash identifier:          uIcVUkysnK/GxXxbbbBxOmn1lyLWIx1onScUbTL02eg=
Subject key identifier:   06:A1:6C:7E:CC:EB:BB:57:C3:74:BF:C1:07:DD:2E:43:2C:7E:D1:41
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       0199FB0EF09389CA6F9990D0930476238CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
Manifest number:          0E
Signing time:             Sun 19 Oct 2025 06:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:24 +0000
Files and hashes:         1: C9L0K7yADXrU4jDJkBoJNOO2HpA.roa (hash: IZHkzjvb/corGaUQQ3F7DNaW6MeAZqyNKvnYJHFn6Fc=)
                          2: DE_i3YbUnbC2cLmxhuDjCehEIsc.roa (hash: KQTIz5aMB/Dipb9RY19esIa3DhRhV0i+ChiUWRW8mIs=)
                          3: e_eTwiNNMcQ4o0jzDx1xFsQsG94.roa (hash: seoVMpKmPgqnMRcR+q+n2pzafdcrF6s2SXMZuzyjNMM=)
                          4: k2RsgnNATRdsZby8HZxnGhKnANs.roa (hash: 76bn38GnHIBhsZiOIgIibibZGV42Ok2NhN+2GBLOKFk=)
                          5: rlLbggkLND-J98Y3z0GpS8_UNGo.crl (hash: kOqYcAU3+gQmzFcCwtyGWAXqUIpFH+a1BUHjNhJFf6E=)
                          6: t7SXLRUmFb5t5I9r73TwbTY-5pE.roa (hash: BGWbcx/GvTTCMEoIE5yivXCW8dbDmm7s6miW+i/VEEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f0:93:89:ca:6f:99:90:d0:93:04:76:23:8c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Oct 19 06:01:24 2025 GMT
            Not After : Oct 20 06:01:24 2025 GMT
        Subject: CN=06a16c7eccebbb57c374bfc107dd2e432c7ed141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:20:2d:84:02:cb:db:94:86:73:49:1f:df:
                    87:2e:74:78:bc:b6:ab:35:86:25:1f:67:72:de:a3:
                    66:e4:4a:bf:cf:55:b0:7f:7f:0c:b4:09:2f:c1:d1:
                    7b:da:c6:00:b3:e4:8b:ef:da:f0:35:e8:b0:98:9a:
                    ec:3d:a1:e2:22:fd:1f:11:fa:7a:15:44:cf:fc:23:
                    cf:c4:ab:2d:a1:17:8e:3d:78:b9:c2:46:59:29:31:
                    80:7b:65:0f:03:8b:4c:e5:d6:de:4b:08:91:0f:52:
                    42:c9:c7:1d:e6:9e:29:5c:34:8e:f3:5f:ed:20:11:
                    fd:68:e7:3f:ef:41:f6:f4:ea:1f:4c:19:85:1b:44:
                    e9:4f:4d:57:bd:66:19:28:9f:28:12:ae:bf:71:4f:
                    24:d7:28:dd:47:4d:fe:7a:7d:eb:8c:e5:b6:f6:75:
                    e2:8b:1c:91:23:b2:8f:ee:60:b2:ac:7e:9a:33:95:
                    d9:91:27:59:33:38:65:20:63:26:a5:6e:41:f1:4e:
                    ca:87:f3:ac:54:0e:eb:72:fb:c5:1c:c9:96:b3:88:
                    33:5a:9c:59:94:64:56:20:9c:4d:83:57:45:30:6c:
                    8e:bc:a4:49:48:37:64:d5:e5:44:40:08:8f:18:40:
                    a7:57:f0:84:13:04:82:11:48:2c:3e:5a:e0:0c:ea:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:6C:7E:CC:EB:BB:57:C3:74:BF:C1:07:DD:2E:43:2C:7E:D1:41
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:31:8d:cf:09:06:6c:20:a3:c2:9d:41:ea:f4:35:f7:09:
         a3:88:45:0d:9b:e1:54:2e:b5:f7:cc:db:f6:4f:86:dc:87:76:
         dd:47:2f:17:b4:2f:56:72:88:de:a7:ae:80:51:79:17:63:f5:
         4f:d8:ae:c5:1c:30:03:4d:9c:4c:01:ee:65:99:2f:15:fb:c6:
         76:06:8f:32:d8:1d:cc:e4:60:20:c9:84:44:be:a5:4d:81:f3:
         da:a6:6b:0c:28:a2:5f:44:b5:82:34:b6:ef:ea:41:40:ce:ac:
         0a:7e:48:4d:5d:16:77:ce:04:20:db:cc:e3:cc:26:d9:57:49:
         89:50:2f:17:fa:b7:e2:50:f5:9a:90:d8:a3:3b:6c:3d:81:dd:
         9a:59:00:ce:7f:17:cc:9c:95:a0:66:c4:5c:c4:c2:a7:69:67:
         53:f6:e8:53:6f:cc:06:6e:1c:5e:54:ee:e7:0a:a1:3d:f5:4f:
         f6:47:4f:60:65:40:b2:1a:aa:df:10:4d:96:49:60:73:0c:87:
         1a:81:b0:36:ad:18:2c:66:14:6b:c5:1b:9d:97:45:64:47:3a:
         3a:48:60:1e:0e:d6:c2:dc:26:1e:c6:47:6c:65:91:a5:ee:00:
         ac:25:b8:50:f5:6c:9c:8d:07:be:de:6b:1f:87:7f:e5:44:cb:
         45:e1:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client