Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
File:                     LUuu4_cib9zqPiKIu-eZlm11_rM.mft (raw, json)
Hash identifier:          XTzASU/Y2wL3UFMCBZIAd98pG3Ycnyrfo1CHfyQRjog=
Subject key identifier:   9B:2A:87:5D:4B:0C:04:A1:5F:87:7B:87:6D:63:9D:A9:0F:5B:AA:8F
Authority key identifier: 2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3
Certificate issuer:       /CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
Certificate serial:       019D37F761C86E1923E012140E6BF29D873A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
Manifest number:          8B
Signing time:             Sun 29 Mar 2026 05:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:52 +0000
Files and hashes:         1: LUuu4_cib9zqPiKIu-eZlm11_rM.crl (hash: xFSGXJEit+I1G9LSEJoGMz/i4vsUI6hr+qCUPy0ECX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:61:c8:6e:19:23:e0:12:14:0e:6b:f2:9d:87:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
        Validity
            Not Before: Mar 29 05:00:52 2026 GMT
            Not After : Mar 30 05:00:52 2026 GMT
        Subject: CN=9b2a875d4b0c04a15f877b876d639da90f5baa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:10:48:7d:d8:e8:4d:d0:5e:90:57:c1:19:
                    29:0c:d1:41:d0:f7:a8:7b:f0:82:b2:66:d7:41:fc:
                    a7:68:02:66:f3:27:5b:0b:14:32:a8:3f:ce:6d:42:
                    f7:d2:63:e9:df:55:2a:bc:4d:17:bd:2c:c8:8e:98:
                    35:d9:36:af:40:b5:0d:d2:05:e5:ba:b3:6d:9b:d5:
                    38:9f:31:af:27:40:be:88:28:02:d7:b8:47:c6:0d:
                    e2:bb:47:f6:1a:38:47:06:ef:76:86:20:9d:ea:14:
                    55:11:19:39:d9:59:65:72:62:72:37:56:e3:4f:54:
                    30:76:13:d0:bd:47:ba:77:a6:d6:81:09:18:7d:1f:
                    67:06:a4:05:e8:e6:a4:65:49:0d:cb:c0:4a:70:df:
                    7b:58:98:88:d4:4a:ca:4f:64:8c:a4:0c:1a:f6:d2:
                    33:69:13:f1:6f:5a:d4:8a:54:c9:45:99:60:4a:15:
                    04:e6:ad:92:83:71:e1:3b:d4:ae:cf:b1:cb:75:52:
                    3f:88:f1:c5:14:aa:78:47:ca:82:92:34:c3:62:e0:
                    79:0e:6d:22:67:86:80:ad:bc:92:18:cc:20:bb:4c:
                    30:ea:6e:9e:a2:04:c8:c5:cb:42:06:f6:ad:c4:66:
                    ef:ca:a0:25:bd:0e:e3:7a:1b:22:17:6b:f1:5c:88:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2A:87:5D:4B:0C:04:A1:5F:87:7B:87:6D:63:9D:A9:0F:5B:AA:8F
            X509v3 Authority Key Identifier:
                keyid:2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:f1:ab:0b:99:f4:43:05:f1:be:de:4e:0d:aa:50:4f:c4:
         e7:3b:a9:4f:c5:a0:d8:44:37:ac:5c:26:ba:29:f2:a2:e0:03:
         b3:9c:ce:22:a7:46:7e:d0:31:a5:91:f1:8e:1c:32:4f:c8:9a:
         20:c8:ec:e0:29:04:2e:ed:d2:c6:94:dc:5d:e6:38:ed:9c:80:
         e4:73:8c:7e:0b:79:a7:04:9f:a6:70:ac:fb:3f:7f:f2:ea:67:
         24:f7:6f:69:4e:f5:56:d4:18:f7:f8:f2:85:47:17:6d:a4:b1:
         de:72:77:34:7b:24:53:99:b6:7d:de:51:5a:61:3c:d0:c3:ad:
         c4:db:e6:31:48:66:7e:fe:23:87:9f:df:b4:86:50:cb:b6:94:
         e3:a4:ce:50:40:b5:88:5a:a5:97:33:5c:2f:2e:d0:75:93:81:
         c7:b1:44:bd:fd:62:7f:e8:9c:00:c3:e6:81:47:65:cc:d7:c4:
         87:4c:96:4f:3d:a0:48:6e:3d:2a:9e:16:f6:25:36:b2:fc:0d:
         91:01:d0:fe:a4:e3:ee:9d:b2:30:9d:1b:36:f5:f4:94:17:0f:
         19:68:c8:04:53:e9:6d:c8:46:ac:1f:db:0c:68:04:45:64:35:
         a2:2b:14:01:df:0c:dc:6c:b6:49:5c:be:e9:53:7b:48:11:f4:
         52:0a:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client