Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File:                     LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier:          1Ryc4yLnll2qyjnppwVBD6sGH+U29AjHaFBcjbnm1Dg=
Subject key identifier:   29:92:5C:58:B5:D9:DB:89:BD:AF:CD:49:FE:0A:09:2B:EB:AC:BC:B7
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer:       /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial:       0199FC5853A704F6DE21E39B3B48E5D56D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number:          0755
Signing time:             Sun 19 Oct 2025 12:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:10 +0000
Files and hashes:         1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: yyCegWk7bNmUIvSoyeMtnP5rVxU9F+yUbO/DZhCTopU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:53:a7:04:f6:de:21:e3:9b:3b:48:e5:d5:6d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
        Validity
            Not Before: Oct 19 12:01:10 2025 GMT
            Not After : Oct 20 12:01:10 2025 GMT
        Subject: CN=29925c58b5d9db89bdafcd49fe0a092bebacbcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:a1:21:da:76:be:61:38:38:c6:4a:12:a6:
                    e2:8a:00:1f:f3:55:e7:32:aa:ce:2d:8f:f8:f8:56:
                    b2:6a:e7:85:c5:98:6a:e9:0b:bd:06:ad:13:ad:96:
                    91:fc:51:db:fb:2a:79:5b:4e:33:ff:a5:0f:c0:ef:
                    f5:d8:f1:52:0a:bd:62:28:c9:96:36:63:44:81:5d:
                    a2:07:19:72:2b:e0:c9:ff:6a:dc:50:80:92:52:8b:
                    c0:59:e0:3b:ba:14:82:cd:33:1f:07:63:c3:8b:e8:
                    20:c2:cf:9a:9d:cf:79:05:d6:6c:70:7b:2e:ad:d2:
                    51:bb:62:3c:4b:de:05:e3:1e:0a:53:fb:09:47:0a:
                    b7:81:a9:04:a4:de:a1:5b:ae:37:f1:81:ad:81:2a:
                    91:8e:3d:55:a9:d7:d1:5e:4f:ef:35:eb:25:44:9d:
                    a7:83:36:7d:43:77:75:0c:56:f3:71:bc:64:fc:dd:
                    23:69:fe:17:10:4f:b4:e9:b7:30:31:f8:ee:fb:7a:
                    0f:4d:59:f6:00:32:b8:34:35:4b:23:8f:ec:25:b0:
                    8a:66:88:0a:f7:99:fa:3b:9f:ce:e1:da:a7:d8:62:
                    9c:2f:c4:55:b0:80:de:5c:4d:42:71:0d:0c:c1:cb:
                    40:33:60:be:5f:4a:d1:a4:5e:7b:72:10:9b:f9:55:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:5C:58:B5:D9:DB:89:BD:AF:CD:49:FE:0A:09:2B:EB:AC:BC:B7
            X509v3 Authority Key Identifier:
                keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:7a:1c:e1:5d:d1:70:99:ec:9f:c0:ee:e3:16:63:ab:18:
         dc:23:97:eb:3f:4a:ea:e4:6a:65:31:6d:cd:5e:d4:31:af:17:
         f8:90:69:bf:55:b8:04:1f:32:30:1d:5c:95:47:e3:90:11:9a:
         b4:46:b1:c3:2d:50:7f:6f:85:3c:e6:49:e3:c1:9d:04:d1:6c:
         54:c0:81:8f:6b:bc:9c:76:ed:ae:23:12:7b:bf:22:41:36:fa:
         73:58:b4:58:b1:e9:ad:53:20:d7:8d:aa:95:16:2e:f0:1e:eb:
         f7:b9:e3:62:9d:3e:fd:e1:55:f2:47:18:2a:fb:d3:bc:f3:47:
         b3:25:88:34:8c:81:13:bb:6a:47:05:1d:e6:be:c9:47:fb:e1:
         b9:80:31:65:1a:43:a8:86:15:7f:42:53:21:46:b0:1b:ec:db:
         33:0b:8f:b2:5f:f7:a8:ee:4d:c0:51:82:96:3b:3f:44:0e:31:
         34:3b:80:b3:cb:82:cd:99:dc:14:d9:f5:9e:62:ad:ac:6a:a0:
         f4:ef:c1:90:58:55:5d:2c:1e:83:b1:44:59:ab:ad:23:67:12:
         35:30:8d:83:c1:cc:5b:1f:e1:4a:90:0d:40:52:f5:28:6e:4d:
         25:1f:63:68:a4:0e:1b:f9:a0:0d:56:2d:00:1b:02:aa:35:34:
         86:b6:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:15 2025 by rpki-client