Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File:                     LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier:          hN1lS4naGiSbL9N//InCApuM16EsKeY5z1tdWm7GfgA=
Subject key identifier:   14:58:C6:E2:55:E9:6D:54:38:B3:E6:47:FD:06:94:B9:C3:10:2C:07
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer:       /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial:       01986BBB108794D58E40797FDF4085350AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number:          1616
Signing time:             Sat 02 Aug 2025 17:01:18 +0000
Manifest this update:     Sat 02 Aug 2025 17:01:18 +0000
Manifest next update:     Sun 03 Aug 2025 17:01:18 +0000
Files and hashes:         1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
                          2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: lkXjqTM+5zo06QR/vco6qC0l+Eal7/0g1P1zJERt1MI=)
                          3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 Aug 2025 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:6b:bb:10:87:94:d5:8e:40:79:7f:df:40:85:35:0a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
        Validity
            Not Before: Aug  2 17:01:18 2025 GMT
            Not After : Aug  3 17:01:18 2025 GMT
        Subject: CN=1458c6e255e96d5438b3e647fd0694b9c3102c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:07:7e:01:8f:d4:f6:5c:a8:06:14:d2:07:
                    67:7a:fc:d9:ba:2f:73:88:68:d3:fb:ee:f4:1a:17:
                    25:54:72:78:44:51:9a:c1:99:a4:12:af:81:cd:23:
                    eb:e1:72:81:59:40:53:6a:8d:57:5c:8f:35:29:dd:
                    a6:35:7d:c8:17:d6:16:9c:a8:4b:22:0a:07:00:35:
                    bd:85:94:85:df:18:2e:7d:f3:c2:a1:a8:df:12:a4:
                    64:49:f5:c1:5e:90:75:bb:84:a3:48:27:5e:c6:5c:
                    bf:ce:97:ad:5e:3d:e8:57:02:6f:23:8e:24:8e:ce:
                    ea:68:42:4e:42:45:05:e6:73:bf:fb:8e:bb:c3:2a:
                    45:b0:67:07:06:77:ae:9c:fb:79:ad:b0:01:2e:a9:
                    8a:ec:48:52:ed:8c:50:7a:00:58:cc:58:ec:f6:99:
                    87:13:2a:ab:eb:64:a7:6f:3a:1a:69:64:1c:fc:dd:
                    18:d6:bb:4d:2a:41:f9:ce:37:9c:e0:cf:65:f9:04:
                    80:b2:8e:da:92:7c:89:29:48:aa:92:cf:8c:ce:a4:
                    36:d9:90:73:09:a5:9a:06:0f:bf:e9:c1:e4:90:36:
                    3c:1f:78:5b:e0:ec:9b:34:ca:a7:3e:4d:13:39:73:
                    5f:e0:1e:be:d6:46:6e:4a:52:90:49:4b:90:2f:93:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:C6:E2:55:E9:6D:54:38:B3:E6:47:FD:06:94:B9:C3:10:2C:07
            X509v3 Authority Key Identifier:
                keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:80:59:5a:d8:0e:a8:47:99:06:91:0a:aa:1d:5e:52:9c:
         03:be:6f:6b:e2:18:81:61:f3:c4:10:52:27:9a:f9:8f:1c:cc:
         9d:9c:c1:ac:6e:13:b6:d9:f4:b5:d0:7b:41:db:20:d4:1f:4c:
         a8:66:50:ea:1d:e2:4f:21:ab:1b:21:b7:8d:3a:71:e2:c6:08:
         e7:36:e1:cb:9d:bf:29:a0:d8:ae:dd:0c:4f:a0:44:90:a2:af:
         94:68:b1:41:77:ee:7d:1e:73:00:1d:f2:7f:88:d6:93:62:1c:
         b4:f5:66:42:ca:62:8a:66:bb:70:7f:9d:8c:9b:d5:cc:4e:af:
         70:4a:e4:e7:83:a7:f0:17:5b:88:41:56:8e:af:be:59:88:12:
         90:4a:71:05:ae:f9:dd:dd:ce:52:1f:a7:e8:16:be:84:21:b1:
         7a:00:0e:24:3a:ac:fb:9f:05:87:03:2c:44:88:84:57:4c:de:
         0d:28:9d:3c:8a:63:f9:b7:96:c6:8b:0c:1c:ab:9b:0c:9a:d4:
         cc:33:0f:87:09:bf:02:98:ec:2c:d6:c8:d2:41:54:4c:23:d2:
         53:fe:f4:69:a6:c1:87:86:e9:1c:98:29:5c:20:db:b7:08:bb:
         eb:94:72:3e:bf:a2:fa:eb:e3:1a:df:16:82:73:5b:89:d2:2b:
         80:96:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:47:07 2025 by rpki-client