Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          FWO5UvIegQA80Sk8krUZK3bXzPkAf9U9LxGjQFXJv08=
Subject key identifier:   8A:49:6B:87:DD:B7:1A:E0:D2:4C:BF:77:7C:23:28:93:71:AF:CC:8E
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01A1DA9373E6E7055287171E6DE1F465B3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0B65
Signing time:             Sat 14 Nov 2026 15:00:58 +0000
Manifest this update:     Sat 14 Nov 2026 15:00:58 +0000
Manifest next update:     Sun 15 Nov 2026 15:00:58 +0000
Files and hashes:         1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: G5GUaYWlWtYQKBsnzr7FH4N8HnDoKqFOy6E9XDOo9B0=)
                          4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          5: TS5GYPTuV4tHeLp8_8X66WFVBMs.roa (hash: 9qlG1jS6W6AzppNHk7+Fig+BSZtcHVtNIFN+xOqoK1A=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
                          7: x_nCsWpdrrJNHpZVvmMh68PoT_s.roa (hash: CVJO5MGMIG1Rwabr6xHQEK91/vlrF0uFiGqK02Qapx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:73:e6:e7:05:52:87:17:1e:6d:e1:f4:65:b3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Nov 14 15:00:58 2026 GMT
            Not After : Nov 15 15:00:58 2026 GMT
        Subject: CN=8a496b87ddb71ae0d24cbf777c23289371afcc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:31:dd:5c:73:a0:b3:ac:35:7b:f0:a2:0d:
                    b7:a3:ac:43:85:94:69:5a:a3:54:29:df:66:9f:f6:
                    d2:3b:ae:84:05:a9:f1:61:6f:14:b8:2d:07:35:b6:
                    bd:29:42:5b:63:7d:da:e8:3d:ed:8a:35:0c:b3:df:
                    89:6e:40:4d:ed:7d:d3:5d:b4:de:e0:57:bb:6b:c7:
                    cb:2f:51:34:44:28:5b:bd:6d:f3:4f:3b:92:f6:fd:
                    f9:40:57:36:fa:32:10:b3:c7:6e:52:d9:1f:d0:a1:
                    68:73:88:74:03:68:58:66:0a:cd:f6:79:0f:05:57:
                    1e:6c:5e:dd:d6:24:e7:3d:fe:93:f1:ae:fe:81:0a:
                    9f:60:ba:e6:fa:78:41:e0:f7:34:1f:b8:e7:81:b8:
                    b6:43:f8:4d:60:0b:54:f1:17:76:aa:dd:c9:7c:6e:
                    5f:82:f3:9d:d8:90:38:85:ce:e0:48:86:53:4e:9b:
                    d4:f3:a0:14:21:0c:d0:b1:c2:3e:8a:80:e0:eb:e0:
                    11:79:2b:90:cc:50:0f:13:ed:e3:7d:84:67:61:a3:
                    34:55:56:8d:4e:bc:97:cd:93:e2:72:0f:29:0e:fb:
                    05:8c:3b:27:54:5c:22:38:5c:08:9f:b0:55:a1:88:
                    5a:ba:ac:7d:e5:51:0b:ca:c4:16:b7:59:73:be:ad:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:49:6B:87:DD:B7:1A:E0:D2:4C:BF:77:7C:23:28:93:71:AF:CC:8E
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:b0:e4:53:bb:31:93:23:93:95:3e:e7:e5:90:2e:34:07:
         73:1e:dc:b5:88:a6:31:ca:9b:ba:84:a9:ef:4c:02:5a:49:6f:
         f7:32:82:53:b8:72:51:ff:ac:4a:8f:60:0f:fe:7b:1f:63:37:
         4a:05:fb:3e:77:ce:41:43:5b:a7:c1:85:4e:27:ae:f5:cf:72:
         bc:74:01:80:b7:82:ea:18:68:c0:2e:1c:37:af:eb:32:be:b7:
         f5:bf:71:8e:b8:19:80:02:86:89:b6:e9:0e:20:81:75:34:7c:
         8b:0f:10:db:f4:fb:5a:54:6f:99:06:ff:95:7c:77:05:d3:63:
         77:2e:d9:2c:99:31:6d:3f:f5:15:d6:2b:82:8e:cb:0f:a4:00:
         05:c4:e2:b3:03:2e:f4:16:ec:4e:2d:7e:f7:7b:f8:a6:d3:51:
         97:1d:ed:85:d3:4a:7c:b4:69:b6:7d:ed:da:cc:c5:c5:2a:1d:
         6c:a4:90:dc:35:a0:ae:cc:a2:d2:2a:80:cd:5a:1a:79:31:44:
         bd:fb:21:73:13:eb:38:c0:bf:ed:da:7e:f0:0d:0c:01:2f:99:
         d7:02:dd:9b:80:3b:40:18:0a:75:9a:4e:19:f2:f7:02:73:78:
         7b:18:ee:72:8e:1b:64:93:9a:64:2d:d7:1c:dd:57:42:ea:f3:
         c2:3f:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:51:49 2026 by rpki-client