Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          jMXocCuFmM9J2waSRjInact5tSVRI5HnASPkfqmEUeA=
Subject key identifier:   B6:AB:6C:A2:5F:43:03:1C:B9:B6:CB:CF:D9:80:39:CF:28:06:73:F9
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019F09CFEF0CA14616B523EFECC09408EC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          09ED
Signing time:             Sat 27 Jun 2026 16:00:49 +0000
Manifest this update:     Sat 27 Jun 2026 16:00:49 +0000
Manifest next update:     Sun 28 Jun 2026 16:00:49 +0000
Files and hashes:         1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: o0j+PWlvk6lGt54U9UOoGFbceio4nakTBDxO7JQIwHo=)
                          4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          5: YALm6m5SWbzZ8AfsEzj-ygddQPE.roa (hash: VOv+iOuB0dLMvQoN1guUP5/ShM+RSeq3EMRboWH8Yzo=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:09:cf:ef:0c:a1:46:16:b5:23:ef:ec:c0:94:08:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Jun 27 16:00:49 2026 GMT
            Not After : Jun 28 16:00:49 2026 GMT
        Subject: CN=b6ab6ca25f43031cb9b6cbcfd98039cf280673f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:fe:dc:b9:24:a3:2c:dd:28:f1:dc:69:66:
                    34:33:4a:5e:b0:f7:ac:1f:de:43:b4:c8:a1:7f:5a:
                    96:5e:7b:50:42:40:83:03:16:cd:ee:b9:e2:24:f3:
                    62:4c:69:66:d7:5c:52:90:70:82:ac:29:67:b6:1d:
                    0d:9d:c6:32:0b:75:ba:c8:85:51:e6:88:00:4c:6b:
                    07:d9:e5:c4:18:7f:30:28:cf:99:1a:b0:b5:16:8a:
                    19:b7:21:66:35:cb:05:32:d2:17:9f:4d:4f:83:de:
                    9a:e0:0d:2c:c8:ea:a2:20:d0:9d:29:ac:e8:65:3a:
                    c1:0d:33:ac:09:64:06:b1:12:79:54:4a:cf:72:0d:
                    e4:f6:ea:a8:28:1d:36:c7:1c:67:91:22:f0:75:64:
                    95:5c:98:9f:c5:ae:4a:82:d9:33:bb:ea:02:f5:88:
                    f6:bb:26:44:f1:94:e7:5d:70:fb:ac:41:a2:c9:6c:
                    a5:27:dd:2d:de:8a:b4:4a:aa:19:b0:06:14:bf:5c:
                    94:e5:c0:8d:28:6f:20:aa:4a:58:48:2e:66:9f:9f:
                    8f:29:0a:4b:37:65:35:1d:24:32:6b:0d:18:88:6b:
                    93:c5:cf:f3:c6:f9:5b:6c:86:c1:91:19:ee:4b:86:
                    1c:34:1f:b2:ed:b9:ef:b3:4c:df:a0:69:b9:a9:74:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:6C:A2:5F:43:03:1C:B9:B6:CB:CF:D9:80:39:CF:28:06:73:F9
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:99:58:a0:fa:32:1d:30:6a:de:62:07:7d:0e:c2:e8:51:
         17:63:8b:7c:d5:a4:32:2f:d6:19:ba:1f:cb:b1:df:b6:00:3d:
         8d:7b:bd:a0:2d:41:b3:7b:ef:a9:f4:55:aa:a3:0f:89:eb:04:
         c1:08:f7:21:e3:33:e3:1e:05:11:01:2b:ba:e9:38:36:92:fb:
         48:b7:cc:bf:b5:5c:80:c8:76:81:cc:35:76:65:61:ad:0c:78:
         3d:ec:ea:1e:cf:51:b7:cf:f9:2a:b3:ea:6b:6c:8b:ee:1f:2a:
         c0:83:06:ac:45:bc:31:4e:50:9f:98:a7:6f:85:f4:bb:43:ba:
         38:4c:80:bf:39:2c:fe:8c:48:9d:d4:f8:86:65:6a:c5:b3:a8:
         bf:e4:a0:08:db:fe:ee:45:be:9c:f2:bd:3c:a5:7e:51:c7:82:
         f6:00:26:9e:e9:20:08:df:b0:07:cb:05:46:10:97:ab:19:cf:
         7f:a1:c6:80:12:dd:dc:08:30:68:fc:a3:69:9e:2f:c2:de:b6:
         7f:fa:a8:9a:60:c8:fd:d3:d1:ab:6a:12:28:78:90:9a:9c:6e:
         63:ac:93:70:1d:59:8e:cc:b1:c2:1b:c4:02:97:86:b4:f3:7e:
         4f:65:8e:c4:64:81:08:59:0b:5f:25:9f:d2:4b:ab:0d:45:3d:
         7c:43:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:52:23 2026 by rpki-client