Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          kv1ja0Mf2gAXyfEri4j2zsFr1HHzE/XZfCo/Df2k2Uw=
Subject key identifier:   FC:AD:30:5B:4C:F4:4C:0C:59:C0:E6:1B:AB:9B:58:C1:B0:DB:E9:CB
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       0198D5BC1C51565799EBFC140085BE6C5046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          06B3
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: X0PsU6ZkNnzS75dyBojpJ1OAJIOuUjAOPRLciefYOQE=)
                          4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1c:51:56:57:99:eb:fc:14:00:85:be:6c:50:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=fcad305b4cf44c0c59c0e61bab9b58c1b0dbe9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:2d:1f:c1:5f:42:25:38:d2:09:d8:93:cc:
                    ee:04:e5:72:7f:07:3d:d5:08:d3:6c:f3:ff:7c:48:
                    dd:33:7d:1b:2e:0d:2f:6a:c5:09:21:7a:91:c9:e9:
                    35:67:bd:ab:4c:36:70:09:99:66:e8:00:09:65:48:
                    b9:5d:0c:da:14:ac:ce:b2:bd:2b:ef:fb:88:32:8b:
                    e8:7e:e4:55:ab:eb:e0:26:33:f9:e0:8b:15:f4:14:
                    64:42:6c:2f:af:64:a5:07:b6:e3:5e:35:f1:e7:69:
                    32:0c:83:2a:42:8b:1c:6c:8e:f9:27:6e:eb:a9:b7:
                    27:35:b2:d9:4b:d2:8a:a6:4a:3b:f6:f0:e0:73:78:
                    cd:34:d6:65:20:06:c5:9f:30:c1:df:34:8c:72:11:
                    af:d0:c0:8b:04:f2:05:ad:97:c9:ad:65:8b:0c:85:
                    1b:ad:78:92:7f:bf:f9:82:ff:05:60:fd:62:f6:f3:
                    ce:25:49:0b:ea:bd:87:b5:7c:23:dd:fa:51:17:b4:
                    33:be:45:fa:c2:01:aa:22:bd:26:e8:f3:13:6e:9b:
                    bd:a9:c5:ee:e0:c7:8b:14:6a:4b:b4:90:4c:76:7f:
                    08:20:81:7e:0f:ab:98:42:19:cd:e6:a5:60:39:9d:
                    ee:92:7e:14:86:61:1a:c6:c9:d7:8c:a2:1b:8d:f0:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:30:5B:4C:F4:4C:0C:59:C0:E6:1B:AB:9B:58:C1:B0:DB:E9:CB
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:34:23:9d:6e:8c:f7:cd:51:25:eb:6c:2f:e1:33:0c:3d:
         01:1c:73:89:e4:94:cc:5f:7c:92:9f:7a:f2:86:c3:b2:9f:cf:
         35:f8:7a:92:ed:bf:4c:52:36:81:fb:eb:23:ca:c4:89:29:a6:
         40:eb:26:8f:c2:a8:6e:f0:c8:13:b5:12:7c:ea:50:6f:23:97:
         b2:60:43:23:2e:74:46:13:d7:98:14:69:65:5d:89:68:00:62:
         01:63:6d:65:41:c3:04:95:d6:11:49:b0:8e:20:76:31:5e:fc:
         be:fc:fc:74:a4:ed:13:fc:2e:64:09:60:ff:fe:ff:7a:06:f7:
         c7:3c:14:e0:b8:34:2e:80:6a:df:f0:b3:0f:b4:7d:46:7a:cd:
         2f:19:53:9e:13:84:c4:d3:a9:90:7e:ca:95:a3:aa:43:64:f1:
         e5:a7:53:41:8f:d0:f6:1e:74:2f:d8:46:08:da:b7:7b:8f:09:
         d4:96:0f:e5:89:5e:d6:97:26:c9:35:0e:33:c0:cc:0c:97:a7:
         bf:b1:19:b0:0c:73:00:82:bc:91:ce:fe:bf:ed:44:50:1d:dc:
         ba:e9:5e:1b:ec:59:45:5d:57:80:6f:f0:5f:19:35:d9:92:00:
         1c:9b:1c:2a:19:61:30:09:e8:b9:d6:95:e2:10:92:37:f1:e0:
         70:52:cd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBxRVleZ6/wUAIW+bFBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjUwODIzMDcwMjExWhcNMjUwODI0MDcwMjExWjAzMTEwLwYDVQQD
EyhmY2FkMzA1YjRjZjQ0YzBjNTljMGU2MWJhYjliNThjMWIwZGJlOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wtH8FfQiU40gnYk8zuBOVyfwc9
1QjTbPP/fEjdM30bLg0vasUJIXqRyek1Z72rTDZwCZlm6AAJZUi5XQzaFKzOsr0r
7/uIMovofuRVq+vgJjP54IsV9BRkQmwvr2SlB7bjXjXx52kyDIMqQoscbI75J27r
qbcnNbLZS9KKpko79vDgc3jNNNZlIAbFnzDB3zSMchGv0MCLBPIFrZfJrWWLDIUb
rXiSf7/5gv8FYP1i9vPOJUkL6r2HtXwj3fpRF7QzvkX6wgGqIr0m6PMTbpu9qcXu
4MeLFGpLtJBMdn8IIIF+D6uYQhnN5qVgOZ3ukn4UhmEaxsnXjKIbjfC/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPytMFtM9EwMWcDmG6ubWMGw2+nLMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2U0I51u
jPfNUSXrbC/hMww9ARxzieSUzF98kp968obDsp/PNfh6ku2/TFI2gfvrI8rEiSmm
QOsmj8KobvDIE7USfOpQbyOXsmBDIy50RhPXmBRpZV2JaABiAWNtZUHDBJXWEUmw
jiB2MV78vvz8dKTtE/wuZAlg//7/egb3xzwU4Lg0LoBq3/CzD7R9RnrNLxlTnhOE
xNOpkH7KlaOqQ2Tx5adTQY/Q9h50L9hGCNq3e48J1JYP5Yle1pcmyTUOM8DMDJen
v7EZsAxzAIK8kc7+v+1EUB3cuuleG+xZRV1XgG/wXxk12ZIAHJscKhlhMAnoudaV
4hCSN/HgcFLNzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:38 2025 by rpki-client