Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          o94mzbDerEauPgBoM9UKIR4J11JSLIdPUxqg/PO+5D0=
Subject key identifier:   EC:9C:93:32:10:79:89:EE:8A:A0:EE:9C:32:AD:5E:46:85:3A:8C:74
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01983C854FE977363BA7B41E42904C80C5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0663
Signing time:             Thu 24 Jul 2025 13:00:26 +0000
Manifest this update:     Thu 24 Jul 2025 13:00:26 +0000
Manifest next update:     Fri 25 Jul 2025 13:00:26 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 20NLCG2yB3P_lJPfZuVuzFu-TU4.roa (hash: m9SiJ2stUV8q1CVCQ7Ha/GjMgmYPtHRZSUs0RL8C5GE=)
                          3: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          4: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: MvGVCRDkaWTqKLx9bW30Mu4nrRPlE0sF1xoUpeg5A14=)
                          5: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          6: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          7: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:85:4f:e9:77:36:3b:a7:b4:1e:42:90:4c:80:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Jul 24 13:00:26 2025 GMT
            Not After : Jul 25 13:00:26 2025 GMT
        Subject: CN=ec9c9332107989ee8aa0ee9c32ad5e46853a8c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:02:f2:98:35:2d:1a:ff:5f:27:98:e3:e8:
                    b9:a7:99:a1:f6:11:58:ad:09:b9:e0:8c:c3:42:54:
                    d1:ba:54:5d:7f:cf:4b:40:db:0f:7d:77:62:5e:d3:
                    ee:74:5a:25:6c:84:b8:ca:8a:4a:7c:79:32:9c:f2:
                    b3:28:e8:d3:e9:03:63:e9:a5:58:49:2c:63:89:7a:
                    29:d2:23:66:e7:23:11:60:0f:63:1b:7a:2c:b8:e1:
                    c2:31:ae:f0:a7:16:dd:e7:b5:75:9b:2f:3b:90:6d:
                    5a:7d:91:43:6a:b6:4a:06:3c:17:e5:f3:d1:48:9e:
                    ff:e9:ff:db:11:b8:a8:b5:65:f0:cc:83:f5:00:fd:
                    6d:c0:b8:40:f9:7f:3b:00:ba:ec:f5:b7:62:6c:e2:
                    4e:bf:ce:0b:bb:dd:e1:36:39:a2:b2:af:6c:ab:a1:
                    0c:2d:58:64:0a:74:29:0b:06:2b:7b:1b:78:1e:a4:
                    6f:a4:e6:d6:18:cf:44:cf:53:49:79:9b:26:6e:ed:
                    d3:ec:c5:3a:4f:d7:0c:a0:50:14:72:71:27:50:3f:
                    c0:4a:6c:44:a9:9b:d6:15:8b:81:aa:1f:fd:30:0b:
                    bc:8d:48:64:18:0c:d5:29:de:96:cd:03:0a:25:14:
                    fe:eb:bd:45:1d:d1:62:cb:a3:c7:8a:2a:77:3a:46:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:93:32:10:79:89:EE:8A:A0:EE:9C:32:AD:5E:46:85:3A:8C:74
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ff:de:fe:47:5c:a5:e6:3f:a5:fe:26:37:23:15:5d:7a:a9:
         16:9a:d0:36:3d:13:7e:8b:3d:6e:0e:8e:3f:37:57:59:6f:80:
         10:33:23:47:cc:f4:b3:a8:9c:d6:7b:e4:07:4b:9a:1c:0c:7d:
         04:b7:f8:03:c4:b7:82:fc:77:09:d7:2e:a0:65:9a:54:8b:ef:
         28:43:3a:79:e5:f6:71:df:cd:8e:57:37:45:76:70:98:ca:e7:
         a8:52:95:61:0f:fc:2d:3a:54:55:c1:6a:64:1a:c3:73:32:f8:
         f5:33:4d:c0:60:fe:6b:72:ac:dc:da:c0:32:e8:55:e0:8b:c8:
         92:6d:37:e5:33:f2:99:41:c3:28:6f:98:a7:ef:12:99:77:0b:
         b6:4e:15:0f:c7:d7:39:bb:3b:5e:3c:b1:06:18:4c:85:c9:16:
         36:8e:1f:3a:f4:c1:26:6e:92:b1:c6:5a:46:ab:6c:41:7e:d6:
         9b:16:53:84:1c:af:bf:8d:d6:d0:38:53:ac:0b:2d:8a:c1:cb:
         3b:1c:8b:c9:72:28:82:e0:39:b4:56:bf:e1:13:bd:6f:7f:67:
         58:d6:0c:67:f5:94:b0:66:02:65:9a:d1:34:e1:89:65:52:4b:
         5d:e4:ba:a2:a4:0e:6c:7d:8e:11:6e:a7:24:95:4f:83:17:33:
         90:e0:67:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8hU/pdzY7p7QeQpBMgMX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjUwNzI0MTMwMDI2WhcNMjUwNzI1MTMwMDI2WjAzMTEwLwYDVQQD
EyhlYzljOTMzMjEwNzk4OWVlOGFhMGVlOWMzMmFkNWU0Njg1M2E4Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtcC8pg1LRr/XyeY4+i5p5mh9hFY
rQm54IzDQlTRulRdf89LQNsPfXdiXtPudFolbIS4yopKfHkynPKzKOjT6QNj6aVY
SSxjiXop0iNm5yMRYA9jG3osuOHCMa7wpxbd57V1my87kG1afZFDarZKBjwX5fPR
SJ7/6f/bEbiotWXwzIP1AP1twLhA+X87ALrs9bdibOJOv84Lu93hNjmisq9sq6EM
LVhkCnQpCwYrext4HqRvpObWGM9Ez1NJeZsmbu3T7MU6T9cMoFAUcnEnUD/ASmxE
qZvWFYuBqh/9MAu8jUhkGAzVKd6WzQMKJRT+671FHdFiy6PHiip3OkbLSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyckzIQeYnuiqDunDKtXkaFOox0MB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP/e/kdc
peY/pf4mNyMVXXqpFprQNj0Tfos9bg6OPzdXWW+AEDMjR8z0s6ic1nvkB0uaHAx9
BLf4A8S3gvx3CdcuoGWaVIvvKEM6eeX2cd/Njlc3RXZwmMrnqFKVYQ/8LTpUVcFq
ZBrDczL49TNNwGD+a3Ks3NrAMuhV4IvIkm035TPymUHDKG+Yp+8SmXcLtk4VD8fX
Obs7XjyxBhhMhckWNo4fOvTBJm6SscZaRqtsQX7WmxZThByvv43W0DhTrAstisHL
OxyLyXIoguA5tFa/4RO9b39nWNYMZ/WUsGYCZZrRNOGJZVJLXeS6oqQObH2OEW6n
JJVPgxczkOBnPQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:07:04 2025 by rpki-client