Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          +/mQL+3D1V6Rjx/dWNBlmVRJVcT7F25izBB519urRNM=
Subject key identifier:   72:E4:07:F0:43:A4:64:8E:C4:E1:D4:7A:A9:A3:2B:67:FA:7C:6C:C0
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01A0F568DB8A729FD888D8E717FC6158CC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0AEE
Signing time:             Thu 01 Oct 2026 03:01:24 +0000
Manifest this update:     Thu 01 Oct 2026 03:01:24 +0000
Manifest next update:     Fri 02 Oct 2026 03:01:24 +0000
Files and hashes:         1: 6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa (hash: /AXpy1YpXm6wZd3dp3BlNrVWuegkD47mcZNJHab7In8=)
                          2: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          3: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          4: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: FxFCNLAi46ycZwychVxtZZRjCQVCFtVvccEQ65TkLTk=)
                          5: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
                          7: x_nCsWpdrrJNHpZVvmMh68PoT_s.roa (hash: CVJO5MGMIG1Rwabr6xHQEK91/vlrF0uFiGqK02Qapx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:68:db:8a:72:9f:d8:88:d8:e7:17:fc:61:58:cc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Oct  1 03:01:24 2026 GMT
            Not After : Oct  2 03:01:24 2026 GMT
        Subject: CN=72e407f043a4648ec4e1d47aa9a32b67fa7c6cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:20:f4:73:66:1a:8e:5c:32:ff:73:7d:d6:
                    dd:a9:d4:b0:60:b5:1d:64:96:f5:8a:44:05:21:a2:
                    8a:0a:56:33:ea:96:79:60:06:ba:50:4a:df:4d:c4:
                    77:7d:78:ef:6e:a7:eb:33:ce:76:e4:c1:84:7f:9e:
                    88:df:ba:b8:f8:71:00:21:9b:10:da:6a:cb:be:a5:
                    f6:73:aa:4f:60:5f:47:15:d7:05:1d:66:7c:70:c3:
                    d6:88:45:ea:23:a6:67:94:29:0e:d5:ef:22:50:a0:
                    62:36:9d:96:b9:d3:f1:26:33:04:d4:dd:57:92:b9:
                    be:8d:6e:17:6a:4f:50:bb:55:9b:d6:bd:f4:aa:0e:
                    4e:bd:6c:ee:13:da:98:a4:e1:f5:e6:66:28:27:70:
                    c7:53:71:fd:e9:10:52:4d:0f:92:6c:88:91:be:e2:
                    9e:5f:aa:eb:aa:dd:b8:08:55:20:70:90:41:54:31:
                    f7:a0:cc:78:3a:6b:00:7c:72:44:ac:12:6c:7a:7e:
                    c9:eb:ec:81:3a:b0:b7:06:ca:ca:1a:ba:ea:ac:ac:
                    86:cc:c7:c2:6e:d0:be:dd:56:56:24:5b:c1:ca:40:
                    e2:33:b0:b4:60:cb:66:ca:9c:12:a4:a9:9a:8f:7d:
                    68:e8:88:d7:94:37:a5:6e:7d:8d:11:ba:08:5a:2b:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E4:07:F0:43:A4:64:8E:C4:E1:D4:7A:A9:A3:2B:67:FA:7C:6C:C0
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:bf:a0:22:ef:24:c1:ba:13:b3:22:45:c9:33:f7:2c:40:
         c6:c0:9e:91:c0:c0:ba:e4:82:9b:89:dd:f2:b6:a9:7b:af:e5:
         9d:37:2c:81:55:d1:e4:da:0c:7c:d9:35:06:dc:e5:90:53:2f:
         6b:cf:5d:71:6b:f4:94:44:7b:8a:f7:5c:31:15:14:5d:ac:0e:
         6b:34:09:32:26:38:04:a0:da:a2:c5:27:51:e3:11:58:18:3f:
         83:c0:10:35:cd:49:4a:d0:3c:47:5d:fc:1d:01:16:7e:59:d5:
         13:62:01:e9:69:dc:5d:4c:c8:3b:82:a8:3c:97:72:e9:c2:24:
         3e:c0:78:e4:21:0d:f2:20:89:68:3e:e6:51:fe:b8:7f:02:d3:
         c7:bc:f1:a4:82:34:3b:33:dd:f9:ad:9f:6c:09:d9:76:9f:aa:
         47:ab:1c:60:a8:48:4f:81:68:bf:f5:2e:dd:13:0e:86:b2:e1:
         5f:cb:78:e6:2b:bc:4d:e0:f3:03:58:d3:b2:44:7a:5a:a3:1a:
         39:52:b4:2e:99:ac:15:79:60:04:5d:70:db:7c:06:0c:e6:80:
         47:dc:c7:5c:4b:e2:e4:6e:3c:c8:9d:39:19:cb:28:47:3f:98:
         66:cc:16:ab:d3:03:c8:c3:f7:64:3b:64:2d:cb:ef:4c:13:97:
         ca:0a:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:13:59 2026 by rpki-client