Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
File:                     Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft (raw, json)
Hash identifier:          H4bHWTLSlwiJNkiw0szLA2GQhpD0/oXaqOi7wWMO42g=
Subject key identifier:   A0:36:4B:01:81:E3:07:3F:B2:E5:30:09:AD:C8:C8:ED:A8:E4:CD:0C
Authority key identifier: 2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
Certificate issuer:       /CN=2eebf8a5b02016e4394392819738644d6ca25642
Certificate serial:       019747428631347A215566C49A1B55607E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
Manifest number:          0C8D
Signing time:             Fri 06 Jun 2025 22:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:31 +0000
Files and hashes:         1: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl (hash: q5E5bOYVzbUsx4AtCUYQPMwd2tkR9pPNBceL6KzXXyU=)
                          2: VW4qDKZrndV7Z-51YQQt1hWe-7I.roa (hash: e6Hx4gZ7Dz7JbD/M0yY7GRmntMNu0QhLfKCnMedrpm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:86:31:34:7a:21:55:66:c4:9a:1b:55:60:7e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebf8a5b02016e4394392819738644d6ca25642
        Validity
            Not Before: Jun  6 22:00:31 2025 GMT
            Not After : Jun  7 22:00:31 2025 GMT
        Subject: CN=a0364b0181e3073fb2e53009adc8c8eda8e4cd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:9e:d1:e2:fd:ec:e0:7c:3e:77:c9:b2:06:
                    83:38:cf:2d:a3:2d:eb:4a:77:d8:83:84:a7:b6:45:
                    ab:1b:bb:a4:7a:c5:75:0c:32:c1:09:0b:ad:d7:92:
                    03:b8:6d:70:10:41:48:ab:3c:40:26:c1:37:6a:a1:
                    4b:7c:17:08:fc:09:c1:6a:c8:2e:87:13:43:4d:ba:
                    a2:e2:dc:45:84:94:bf:f1:90:3e:42:38:9a:95:c8:
                    b6:ed:21:54:a4:6b:1d:e8:5c:07:ef:3e:2c:27:78:
                    f1:ac:89:2b:89:ed:98:b8:d1:d9:5b:43:87:0e:72:
                    d7:97:97:e0:36:9f:90:e2:d1:74:74:45:c9:de:34:
                    cb:a0:ea:1f:a1:00:21:db:80:d8:f4:6d:35:e2:b4:
                    4f:56:a0:55:b6:7e:06:d2:13:d6:64:6e:ff:a0:4c:
                    a6:a9:35:16:fe:6c:cc:67:e0:28:21:00:2f:97:c6:
                    e3:2d:4f:ad:95:92:41:ed:27:da:b7:88:e3:7a:52:
                    73:ef:5f:58:5c:ed:22:71:f8:8c:cd:30:16:93:2d:
                    32:71:03:83:81:df:95:68:7f:a7:16:b7:a7:2f:b5:
                    2a:28:47:08:71:18:25:d4:e9:a7:66:56:38:71:3f:
                    0a:96:89:96:88:8a:1c:49:10:68:89:b4:3d:2a:be:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:36:4B:01:81:E3:07:3F:B2:E5:30:09:AD:C8:C8:ED:A8:E4:CD:0C
            X509v3 Authority Key Identifier:
                keyid:2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:2d:27:30:ad:49:18:ed:da:36:6d:70:4a:19:09:7b:78:
         d4:8d:73:b2:ed:64:f0:c7:67:f7:92:84:54:2e:5f:de:38:85:
         8e:40:af:42:b0:4a:26:36:d9:a8:74:71:31:61:6f:0c:bb:89:
         4b:3e:a4:34:01:5a:f3:b4:2d:01:bd:27:24:7f:46:77:08:93:
         26:b9:bb:71:2d:2a:aa:24:12:3e:7c:74:78:39:e6:b4:1b:e4:
         0e:2c:15:8e:e8:fc:51:a5:1d:2d:ca:3c:06:fa:f4:4e:86:fc:
         08:a2:17:4f:62:22:b9:7a:6b:95:5b:63:79:d8:18:e3:d4:0f:
         ec:b9:df:06:78:a9:1d:8e:ea:d7:90:b8:fb:dc:fa:06:90:ff:
         e8:d8:e9:3e:39:fb:3f:49:82:2b:56:20:0a:c4:72:b2:42:96:
         1c:0b:94:c9:5e:cb:c4:60:9f:92:67:49:69:5c:6b:06:02:33:
         6f:64:a3:4a:4d:d3:b4:77:d7:59:06:99:19:b2:ea:0a:0c:0a:
         bd:c3:44:50:6c:4c:c9:c2:c2:de:34:e5:8f:a6:eb:3a:0b:55:
         56:53:79:95:ae:9c:32:8a:83:b2:34:33:56:71:b9:99:f1:61:
         e5:9d:e6:c1:54:d1:5c:8d:4f:b8:03:af:26:89:de:61:93:38:
         c7:6c:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:04 2025 by rpki-client