Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          Ec79iWpCKeUufGedYAgoqahp2HyU7S4YniDpVMnHnko=
Subject key identifier:   4B:BB:88:4D:85:52:94:A7:70:77:65:57:41:B9:30:84:1B:31:3D:CD
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019D2703A9DBFB0BDC10B610BC8E48281FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          08F3
Signing time:             Wed 25 Mar 2026 22:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:44 +0000
Files and hashes:         1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: wTtZofO3olksMDsfLqH2TVoEFX9FDeYNY3pqo0ZTjfQ=)
                          4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          5: YALm6m5SWbzZ8AfsEzj-ygddQPE.roa (hash: VOv+iOuB0dLMvQoN1guUP5/ShM+RSeq3EMRboWH8Yzo=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:a9:db:fb:0b:dc:10:b6:10:bc:8e:48:28:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Mar 25 22:00:44 2026 GMT
            Not After : Mar 26 22:00:44 2026 GMT
        Subject: CN=4bbb884d855294a77077655741b930841b313dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:7b:ae:d4:ac:7f:ca:75:f8:ae:2f:8d:ce:
                    be:ee:96:ab:f8:f7:11:3c:98:d8:6a:66:d0:47:d1:
                    61:50:e0:ae:f7:34:dc:d2:4c:f6:85:90:b2:d0:00:
                    8a:5c:51:39:b7:ca:4a:3d:8b:08:84:45:4d:2a:eb:
                    b1:c6:23:21:a5:98:0d:9a:9f:c0:c5:42:ce:00:e2:
                    81:1d:56:67:08:e4:56:f4:54:99:02:7f:2f:86:fa:
                    6b:36:65:01:a6:76:c5:46:e5:80:a4:98:00:54:6d:
                    01:1f:57:66:4c:c1:c1:7f:bf:8f:e7:35:bf:aa:d2:
                    2c:e2:11:65:ce:d5:c2:a3:7e:8c:70:39:e6:b3:2c:
                    19:8f:00:80:2b:bc:b4:3b:68:66:62:43:c0:ec:79:
                    5c:09:89:c6:c3:ce:2b:21:67:76:d2:16:d3:19:68:
                    cd:7a:78:d8:2c:d7:aa:f4:a4:09:48:2a:42:f6:b9:
                    34:65:92:5e:ce:f8:3f:2f:25:b1:a7:ec:e8:76:29:
                    34:e1:9b:29:4a:e0:e9:f1:52:1e:f1:00:67:bd:42:
                    f9:ec:bb:67:0b:99:1e:7e:af:f8:ed:fd:ce:da:81:
                    59:4c:99:9c:f2:73:34:b5:56:e1:43:8a:13:93:29:
                    c0:3c:2f:0a:c8:e0:c5:22:32:5f:fc:2a:7c:b6:ff:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:88:4D:85:52:94:A7:70:77:65:57:41:B9:30:84:1B:31:3D:CD
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:af:8a:c6:69:59:90:8e:6e:22:3d:e0:34:5b:2e:65:29:
         df:05:e2:58:81:0c:fc:2c:c1:69:d0:9b:67:f8:b3:4e:e6:9f:
         00:dd:62:9a:7f:f9:80:41:fe:2e:48:a0:bd:9a:2a:34:88:9d:
         c0:9d:03:2f:6f:65:6f:fa:91:29:7c:a3:45:65:70:b4:3c:96:
         5f:3b:cd:e5:4c:56:90:f1:b7:59:54:dc:b3:9d:23:60:04:fb:
         20:e3:e9:36:47:98:df:c1:49:fb:3c:86:45:f8:60:47:79:c5:
         4e:0f:1d:ea:9b:1b:a2:e2:1c:41:e6:3d:94:85:15:f2:40:5e:
         4e:1a:6c:4a:ab:f0:b1:71:50:69:3c:ff:b1:b2:98:1b:84:39:
         af:43:2f:b0:12:73:17:e6:73:58:55:56:30:3f:21:1d:a4:23:
         bc:ad:b8:58:6b:01:dd:78:29:1d:1f:02:0d:9f:91:19:d6:46:
         d0:fa:ec:e0:08:30:a3:50:5c:1d:e1:01:89:4d:aa:ef:94:89:
         7a:e6:87:62:29:7b:fc:91:dd:c2:14:2a:6f:cd:88:02:01:a2:
         8f:44:bc:c2:12:70:97:ce:bf:5a:ad:dc:9a:03:97:42:4f:5c:
         74:f3:d7:51:6e:be:db:45:cd:2f:12:95:e4:bd:a0:8d:9d:da:
         0d:43:44:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6nb+wvcELYQvI5IKB+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjYwMzI1MjIwMDQ0WhcNMjYwMzI2MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg0YmJiODg0ZDg1NTI5NGE3NzA3NzY1NTc0MWI5MzA4NDFiMzEzZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHd7rtSsf8p1+K4vjc6+7par+PcR
PJjYambQR9FhUOCu9zTc0kz2hZCy0ACKXFE5t8pKPYsIhEVNKuuxxiMhpZgNmp/A
xULOAOKBHVZnCORW9FSZAn8vhvprNmUBpnbFRuWApJgAVG0BH1dmTMHBf7+P5zW/
qtIs4hFlztXCo36McDnmsywZjwCAK7y0O2hmYkPA7HlcCYnGw84rIWd20hbTGWjN
enjYLNeq9KQJSCpC9rk0ZZJezvg/LyWxp+zodik04ZspSuDp8VIe8QBnvUL57Ltn
C5kefq/47f3O2oFZTJmc8nM0tVbhQ4oTkynAPC8KyODFIjJf/Cp8tv9+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu7iE2FUpSncHdlV0G5MIQbMT3NMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOGvisZp
WZCObiI94DRbLmUp3wXiWIEM/CzBadCbZ/izTuafAN1imn/5gEH+LkigvZoqNIid
wJ0DL29lb/qRKXyjRWVwtDyWXzvN5UxWkPG3WVTcs50jYAT7IOPpNkeY38FJ+zyG
RfhgR3nFTg8d6psbouIcQeY9lIUV8kBeThpsSqvwsXFQaTz/sbKYG4Q5r0MvsBJz
F+ZzWFVWMD8hHaQjvK24WGsB3XgpHR8CDZ+RGdZG0Prs4Agwo1BcHeEBiU2q75SJ
euaHYil7/JHdwhQqb82IAgGij0S8whJwl86/Wq3cmgOXQk9cdPPXUW6+20XNLxKV
5L2gjZ3aDUNEPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:54 2026 by rpki-client