Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
File:                     Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft (raw, json)
Hash identifier:          m4EDpeW7W0c1amEOtbSJYXFOpXPzJFB8E7DhamDPK+s=
Subject key identifier:   05:13:AE:68:BF:2F:86:C3:E4:D2:CA:66:D3:39:0E:3F:4D:E6:B2:37
Authority key identifier: 2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
Certificate issuer:       /CN=2eebf8a5b02016e4394392819738644d6ca25642
Certificate serial:       0198D5157BEDF2D0ED0332E4D3C0B303FD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
Manifest number:          0D5B
Signing time:             Sat 23 Aug 2025 04:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:11 +0000
Files and hashes:         1: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl (hash: dHs86EDEOtRXNuc3BxHCwTLXlPYZLVK5k4S76qNKYyk=)
                          2: VW4qDKZrndV7Z-51YQQt1hWe-7I.roa (hash: e6Hx4gZ7Dz7JbD/M0yY7GRmntMNu0QhLfKCnMedrpm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7b:ed:f2:d0:ed:03:32:e4:d3:c0:b3:03:fd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebf8a5b02016e4394392819738644d6ca25642
        Validity
            Not Before: Aug 23 04:00:11 2025 GMT
            Not After : Aug 24 04:00:11 2025 GMT
        Subject: CN=0513ae68bf2f86c3e4d2ca66d3390e3f4de6b237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:a6:5c:34:05:d5:cc:67:46:d1:72:e1:c3:
                    29:f3:41:08:b3:9d:6b:87:42:8b:0b:26:31:89:7f:
                    4a:33:89:29:7d:b6:da:24:61:b8:68:03:a5:8c:9e:
                    6c:c1:ce:e1:20:49:38:f0:1d:44:26:ac:f6:63:4b:
                    97:f5:f0:0d:7f:3d:1d:49:14:ee:e7:7c:83:47:d7:
                    4d:f7:e0:47:dc:e4:2b:eb:9f:ee:f7:ee:0a:f5:8a:
                    06:87:2b:6a:2f:99:61:f7:ce:12:e4:c9:ff:47:03:
                    c7:b0:e3:b5:21:e6:7b:73:ec:1f:88:b8:e6:a4:6c:
                    1b:97:c4:2a:10:47:9c:c2:02:64:ef:41:f3:60:1f:
                    e2:37:09:c7:2d:f0:35:0a:7d:d9:4f:91:a9:46:c9:
                    78:74:1c:7e:06:22:d3:26:f1:d1:c1:53:52:a5:28:
                    f8:b2:9f:a5:9c:47:06:be:75:91:ea:1c:96:3a:5e:
                    d0:e9:3d:90:dc:95:d0:d7:99:26:ed:5b:6f:0e:5e:
                    d0:94:88:00:3d:0b:39:c1:63:ff:db:0a:1e:7c:d8:
                    c6:66:a3:47:5e:e9:2e:3a:6d:11:bd:9f:9d:08:10:
                    48:34:bb:f3:0e:46:09:52:19:28:61:18:80:37:bc:
                    58:5f:6b:77:e4:20:47:e0:5e:19:76:4d:01:3b:26:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:AE:68:BF:2F:86:C3:E4:D2:CA:66:D3:39:0E:3F:4D:E6:B2:37
            X509v3 Authority Key Identifier:
                keyid:2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:b7:60:cc:96:9f:32:b6:c0:0f:15:7a:33:d0:ce:1b:d1:
         81:35:99:31:20:80:dc:f3:ee:2d:65:68:f8:ee:13:b8:40:9e:
         4d:fc:5a:73:17:ed:42:a7:f8:86:e2:0d:e4:d2:36:5c:42:79:
         65:ef:09:89:8a:b4:b8:32:4e:f0:f9:99:b1:d3:a2:67:b2:b8:
         85:9d:27:17:ee:2b:f1:fc:c4:b4:bf:79:37:db:be:dc:f7:73:
         10:42:0b:14:80:4a:2a:73:ce:ef:60:0b:12:ff:17:94:a3:3d:
         58:57:15:7e:50:2d:70:64:6c:74:c5:f1:d8:3e:c2:43:55:78:
         7c:db:0c:dc:73:9c:ef:22:e5:99:cb:5b:ad:4d:1a:84:7f:dd:
         7b:79:73:e1:83:37:73:10:1b:d9:53:7c:69:e6:2c:89:93:f1:
         69:d5:fd:01:af:9d:aa:74:8e:76:44:8f:e1:ec:6d:82:f4:c5:
         0f:d1:c8:8f:60:64:4c:4e:f9:1e:c5:05:69:05:29:dc:ef:8e:
         0e:0a:30:9f:cf:e2:83:3e:f3:9f:f6:f2:0a:ce:1f:f4:f5:e7:
         aa:72:95:b3:4f:ce:0e:7d:b5:6e:18:d8:61:f2:3b:7a:1c:ae:
         38:9a:9d:37:8e:da:05:3d:52:94:cd:c9:67:32:5b:53:aa:28:
         b7:e5:f6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:27 2025 by rpki-client