Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          qVJYDlEh+eyLbHnIMWZeP7Blae6ZOQ6ExRW20vFaJD8=
Subject key identifier:   4F:80:C7:A2:73:EC:C6:72:7C:B3:06:D4:81:53:3B:23:B2:18:C0:B0
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019926D79377AA02F55C8A086E30F3016EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          06DD
Signing time:             Mon 08 Sep 2025 01:01:26 +0000
Manifest this update:     Mon 08 Sep 2025 01:01:26 +0000
Manifest next update:     Tue 09 Sep 2025 01:01:26 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: vgK6JwLXwPe3hQsUUgOgt6BbFnM84e8i6avrAq9FgfM=)
                          4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:d7:93:77:aa:02:f5:5c:8a:08:6e:30:f3:01:6e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Sep  8 01:01:26 2025 GMT
            Not After : Sep  9 01:01:26 2025 GMT
        Subject: CN=4f80c7a273ecc6727cb306d481533b23b218c0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:92:ec:43:22:bf:8b:30:0e:e3:b8:33:07:
                    e9:39:c6:92:79:c5:2e:81:67:b1:ed:3d:ab:07:c3:
                    21:82:98:0a:f7:fd:35:33:ad:71:26:40:ec:b8:f3:
                    39:67:db:64:dc:d8:9d:6c:a6:29:a9:36:16:c7:27:
                    df:92:c2:54:83:d4:1c:06:16:c9:e2:e3:84:4d:2b:
                    ea:85:df:e3:51:40:8b:24:2d:7f:54:76:74:22:c8:
                    be:27:8e:13:17:9b:a8:c7:77:ff:46:d8:de:ea:bd:
                    c8:3a:a7:aa:9d:8b:f5:d4:1d:05:0a:09:03:5f:6b:
                    b9:2b:6e:09:d2:22:55:06:df:66:c9:b1:c3:7b:0d:
                    32:b2:da:d4:f1:56:e5:dd:b1:4f:95:31:24:6b:0d:
                    c3:e7:4f:40:41:43:d3:4d:b3:7f:ed:e8:16:dd:b9:
                    7c:c5:f3:ed:ff:08:91:48:19:2c:2b:b2:8a:eb:a7:
                    57:c6:d0:67:ff:4a:7d:cc:b4:bb:d8:5e:e6:57:b6:
                    26:9a:cb:0e:da:b6:c8:8f:2f:f8:04:ce:ba:b5:94:
                    52:91:27:9b:ab:d2:97:43:4e:95:43:70:02:d7:33:
                    c9:c7:7e:e8:8f:8e:47:7d:2a:64:c5:47:fb:c6:20:
                    ef:66:f6:af:0f:3a:5e:d0:41:83:5d:a8:5f:6e:46:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:C7:A2:73:EC:C6:72:7C:B3:06:D4:81:53:3B:23:B2:18:C0:B0
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:58:fe:2e:31:7d:88:2f:9d:c3:49:3c:2b:af:0b:47:b7:
         b5:71:80:6a:98:44:92:c9:a0:99:0d:60:15:2a:80:74:2e:55:
         d0:34:e1:3b:40:cb:f6:d0:08:24:f7:66:46:2b:79:38:e4:47:
         ea:b2:52:c5:df:90:3d:aa:36:54:b3:21:11:73:60:9f:88:26:
         e1:6d:fa:1b:86:d4:07:65:bc:a2:75:2e:00:03:71:69:30:6c:
         1e:d0:06:8d:05:19:af:08:1e:f9:ad:01:0d:49:c9:a4:2b:79:
         76:10:85:0f:bf:ae:6c:98:7e:2c:8d:72:a1:37:da:7c:7c:ab:
         5f:36:a8:76:1b:9e:1d:a0:f3:14:a6:5d:c4:cf:dd:d5:10:fb:
         6e:ff:c2:36:7d:dd:50:b2:6b:46:37:83:4b:04:80:30:b7:0a:
         04:57:5a:97:fd:d6:6e:03:49:33:92:ea:ed:66:83:f0:f1:20:
         68:8f:b2:fe:b0:28:71:e4:50:f9:c3:0e:d3:6e:85:91:9d:eb:
         d2:02:fe:9d:2b:a5:3a:d4:0e:18:21:77:e4:24:a0:c8:b8:31:
         68:c4:62:99:3f:a5:c6:9c:f5:9e:88:2a:99:d2:5d:d2:29:01:
         30:8f:f0:c6:9b:6d:75:92:84:c8:69:de:15:3d:b8:b2:37:33:
         33:70:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:35 2025 by rpki-client