Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          gLSTXNNM2euAjgIco6zq4rMyI0seDusmimAl//2DvwE=
Subject key identifier:   F9:86:34:EE:97:DC:14:9A:B1:87:98:27:B5:81:E8:AE:CB:D9:07:07
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       0197B74586E18F79E61609BDC0BECF4388F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          061E
Signing time:             Sat 28 Jun 2025 16:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:16 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 20NLCG2yB3P_lJPfZuVuzFu-TU4.roa (hash: m9SiJ2stUV8q1CVCQ7Ha/GjMgmYPtHRZSUs0RL8C5GE=)
                          3: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          4: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: adC82lTyjd/47llUfjEHJUSRSbFlSdz3AoKKUJjFWh4=)
                          5: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          6: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          7: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:86:e1:8f:79:e6:16:09:bd:c0:be:cf:43:88:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Jun 28 16:01:16 2025 GMT
            Not After : Jun 29 16:01:16 2025 GMT
        Subject: CN=f98634ee97dc149ab1879827b581e8aecbd90707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:98:23:af:70:c8:67:db:1f:7d:5e:ff:8f:
                    86:90:1a:61:26:3a:3a:e6:83:a1:e3:d3:2f:6c:d7:
                    cf:39:00:42:9a:99:b7:c1:1e:21:a5:6d:ed:48:03:
                    a8:7a:c4:d7:c1:70:e5:61:cc:bb:b6:76:26:a8:b1:
                    3d:1c:59:ab:f8:27:a9:86:f1:ed:53:63:08:82:bc:
                    a0:e0:4f:21:87:58:4a:3d:b8:69:3e:b8:36:7e:5c:
                    0f:1c:fd:c2:fe:e9:fa:8b:5b:3c:aa:3c:76:f7:c1:
                    49:06:91:cc:79:14:a0:d7:f9:18:48:fd:86:1a:68:
                    d5:65:13:43:82:1f:56:ec:e5:92:1f:69:31:34:19:
                    c6:52:b7:75:f0:18:67:1a:d7:d4:c1:16:c4:5e:37:
                    93:65:db:f8:ef:3e:a1:f9:86:65:78:7e:cb:04:6d:
                    4d:dd:8c:40:bd:9c:cf:79:ec:15:9f:b6:58:c8:03:
                    a1:d6:8a:97:6b:b9:cc:7e:35:46:35:26:25:7a:26:
                    1d:6d:4c:ca:b9:82:f3:81:ec:d5:57:93:a8:b8:f2:
                    1c:03:a7:a3:c8:e3:f8:a2:c3:ab:a8:0e:3a:3e:45:
                    59:7a:d9:e8:41:de:fb:ab:15:3f:ed:96:49:b6:1c:
                    b3:37:c9:2e:14:c0:2a:fd:cd:37:c1:1d:e7:20:22:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:34:EE:97:DC:14:9A:B1:87:98:27:B5:81:E8:AE:CB:D9:07:07
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:38:b4:08:12:8f:76:23:37:26:67:2f:4d:23:d6:5c:71:
         cf:bf:b9:d8:cd:1c:03:5a:46:8d:40:08:ae:59:85:9d:11:3d:
         e1:24:46:70:0b:bf:08:42:96:c1:a7:e1:79:91:19:74:46:23:
         1b:00:59:66:15:18:57:22:fa:1a:a4:f9:92:4e:8e:e6:67:43:
         26:5b:ac:ce:53:42:d9:d8:60:3f:c5:7f:e2:54:85:38:ac:d0:
         67:44:55:1c:c1:e4:b1:96:76:fd:ea:5b:5a:34:8e:f0:9b:8e:
         19:86:63:e7:28:03:5c:cc:0d:47:02:a3:f9:7e:f6:fd:ce:6a:
         9e:cc:ae:e2:72:b7:1a:81:64:7e:3f:d7:c0:ac:c2:b4:c8:c1:
         44:d2:55:b7:ee:0f:54:a8:3d:27:a0:ff:0d:1a:23:85:76:2c:
         e2:1a:08:e8:86:e1:78:22:70:16:03:a3:07:58:c5:4a:db:17:
         0a:23:85:c9:70:d1:68:d7:df:55:83:f8:9f:e1:2d:36:bc:79:
         b6:5f:c3:cf:c5:93:0e:bb:ad:41:d0:7e:f1:90:3c:3a:d6:af:
         91:90:a8:93:79:f1:e8:0d:24:90:0b:2c:79:ee:1d:1d:8e:a8:
         e9:ae:7b:6c:06:8f:73:c9:09:a5:3e:3f:d1:2f:be:6a:10:5c:
         ea:74:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:07 2025 by rpki-client