Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          lzbB1r4SOb8zJpXLwx0jXJWtDYve1d+WQJ51+CezC8g=
Subject key identifier:   63:E2:3A:24:AB:5B:E6:9F:36:1A:B7:01:14:9A:9D:E1:D9:9F:11:9A
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019750EAC781A4100A8C375BCD75BCACB95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          05E9
Signing time:             Sun 08 Jun 2025 19:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:53 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 20NLCG2yB3P_lJPfZuVuzFu-TU4.roa (hash: m9SiJ2stUV8q1CVCQ7Ha/GjMgmYPtHRZSUs0RL8C5GE=)
                          3: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          4: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 0or3oS8bUv5h9lwVyNzlAksj3O87/sWijkkahdagNqU=)
                          5: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          6: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          7: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:c7:81:a4:10:0a:8c:37:5b:cd:75:bc:ac:b9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Jun  8 19:00:53 2025 GMT
            Not After : Jun  9 19:00:53 2025 GMT
        Subject: CN=63e23a24ab5be69f361ab701149a9de1d99f119a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:38:d4:5c:ea:76:a1:c1:b7:4b:fb:d8:81:
                    7b:1a:c9:89:3f:90:1f:ff:fc:96:4e:17:9e:c7:66:
                    53:53:81:d1:4f:dc:37:cc:64:b2:dd:04:96:d7:38:
                    44:97:a5:60:0d:74:de:2b:fa:72:7f:fb:3a:ee:7b:
                    44:a7:41:02:3e:e8:a4:33:34:79:2f:1f:06:7e:d5:
                    cb:db:97:0a:2e:ca:1d:14:3a:fc:da:3c:88:b6:df:
                    49:0f:33:85:f0:9f:a7:14:b8:a4:cb:26:dc:e4:92:
                    b6:6c:81:5d:1e:11:31:71:22:9c:87:57:e8:9f:00:
                    fc:7c:3c:ae:47:27:14:28:2c:ad:2c:c5:9c:6f:c8:
                    c8:17:f0:d5:35:27:61:83:22:3c:8a:f5:6d:63:dc:
                    14:cd:19:42:9a:98:a2:d5:f3:4a:10:8a:4c:9f:3b:
                    55:d9:38:01:74:8e:46:25:55:07:c4:06:91:5e:c4:
                    fe:b9:2d:94:f8:95:8c:1c:e4:ee:d8:08:34:54:5c:
                    72:1f:1a:7d:da:9f:92:21:13:b4:9a:45:14:f6:a3:
                    5a:f8:de:a8:58:23:94:57:10:79:47:13:24:1d:37:
                    ad:83:78:69:c3:27:2d:a2:52:19:59:d3:69:16:f9:
                    d0:f1:b0:23:fb:38:b6:72:b4:b2:56:70:e9:cf:e4:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E2:3A:24:AB:5B:E6:9F:36:1A:B7:01:14:9A:9D:E1:D9:9F:11:9A
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:ef:1c:26:c4:4d:ae:8c:df:6c:aa:cd:55:cc:2e:31:95:
         0b:87:30:6b:e1:7c:40:60:1b:6b:09:aa:86:0c:90:e9:79:4f:
         a1:33:f4:9b:e5:6b:a8:7b:e0:77:6f:34:1a:19:be:3a:6a:7a:
         fb:6b:95:60:bc:74:4a:74:89:21:88:ec:30:df:58:e5:57:be:
         c8:31:2e:68:03:59:5c:0b:b7:86:b6:5d:89:a6:8b:f3:a2:9c:
         64:e8:ea:37:b0:37:09:4b:7d:a1:5c:6f:bb:e4:d6:87:a6:44:
         f2:12:19:9d:92:4a:b9:d3:bc:1a:0d:bf:44:f9:d4:fe:14:c5:
         98:12:98:f2:e6:f5:96:cd:df:1f:9a:3b:48:b2:12:e3:a0:d1:
         12:7e:07:4c:81:3f:9f:85:e3:de:a0:15:3c:53:63:02:12:c8:
         45:30:ef:d3:ec:2c:22:16:97:a8:43:05:34:c7:bf:c7:34:f2:
         1d:52:8a:a9:d6:af:d7:8a:01:58:f2:5d:34:dc:70:c2:61:0c:
         11:ca:47:b2:08:bf:60:35:0e:64:ad:7b:22:83:92:af:12:cb:
         a9:77:ac:da:38:50:c8:62:aa:ce:64:c1:0f:bd:09:53:82:67:
         91:38:91:2a:d6:db:c4:33:cf:2e:52:f4:6b:f7:c0:e4:c3:30:
         ad:c9:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:54 2025 by rpki-client