Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          Ye8kxPnYo+qTdioAMw/rF4PoqpAX1/9qutH5DbQjtPk=
Subject key identifier:   50:6E:E0:23:CD:E1:F1:8F:21:DE:51:14:6B:4B:FC:DE:03:7F:A2:A5
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019A164E3E7E8F4FAF84756D910EDF6C6856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0759
Signing time:             Fri 24 Oct 2025 13:00:17 +0000
Manifest this update:     Fri 24 Oct 2025 13:00:17 +0000
Manifest next update:     Sat 25 Oct 2025 13:00:17 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: tTC1Hk5wrTOLtTsr5Bjbv8OhKHjmnMUr40qxRUM7mZg=)
                          4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:16:4e:3e:7e:8f:4f:af:84:75:6d:91:0e:df:6c:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Oct 24 13:00:17 2025 GMT
            Not After : Oct 25 13:00:17 2025 GMT
        Subject: CN=506ee023cde1f18f21de51146b4bfcde037fa2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:0f:9e:23:b7:81:69:d5:84:c1:81:6a:32:
                    79:3e:3b:93:c9:23:76:4f:86:33:d3:d4:9e:f0:9e:
                    74:7f:52:9f:d5:e8:93:cf:6c:e7:aa:28:61:5e:10:
                    84:3c:4e:1d:3b:87:93:b0:4b:b3:87:96:e2:bc:6b:
                    d1:ef:45:83:68:e4:bf:1f:37:14:4c:07:22:99:98:
                    ed:3d:56:7e:59:b7:1f:19:ad:a0:9c:e1:84:34:b8:
                    64:c5:b9:09:39:5e:c6:7e:c6:a1:8b:76:b9:a9:a4:
                    e1:15:8f:7d:f0:56:a3:b4:7b:48:90:12:d3:bf:f0:
                    28:d6:2a:c7:b4:fe:ac:0d:6d:4a:d4:32:58:54:5b:
                    59:71:2b:c6:9a:4f:84:60:35:02:80:c7:b4:a0:5d:
                    41:17:83:b8:c0:ad:f7:40:43:58:e8:42:59:b2:35:
                    3d:21:3f:df:20:cf:71:ce:ec:f4:21:31:d3:18:52:
                    b6:63:d6:4f:5c:fe:ad:67:1a:da:b8:9c:1e:03:b4:
                    2a:d2:95:00:58:a2:ab:1b:22:ea:16:0f:98:8a:5d:
                    96:72:32:9e:ca:7d:f6:32:20:76:05:73:7c:73:8a:
                    30:e1:cc:0d:d5:dc:04:5d:6d:41:92:3b:54:e0:cf:
                    51:c3:78:5e:09:8e:e3:78:ac:7f:3f:80:5a:82:3a:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:E0:23:CD:E1:F1:8F:21:DE:51:14:6B:4B:FC:DE:03:7F:A2:A5
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:ff:88:05:4d:a9:24:ce:e1:02:03:75:ab:b5:f5:53:f7:
         37:24:50:6b:52:bc:f8:71:1e:5f:73:1b:87:f0:08:b3:b1:af:
         8c:fd:8d:b0:f0:d7:26:15:3e:4a:5f:b6:c4:e1:ff:c6:e9:ff:
         de:de:38:9f:1f:1e:8d:df:37:d7:a2:56:e8:55:c4:c1:b0:07:
         da:50:64:39:bc:d8:17:d8:57:e8:5f:db:55:25:81:46:2d:f4:
         f6:53:32:5c:c3:28:bb:b4:8e:3b:10:d9:52:c7:54:55:9b:a4:
         9e:7d:6d:6c:0d:78:d3:c5:0e:6f:be:f0:ea:66:5e:d5:4e:22:
         ba:aa:4e:fc:a2:35:70:fa:83:75:c8:38:16:f7:41:06:60:c5:
         c1:88:38:05:cf:0a:5f:d1:eb:8b:b5:f4:e5:7f:24:94:5f:4f:
         8d:86:cc:cf:34:82:fa:4e:be:17:aa:ca:9a:17:5f:d3:1b:d1:
         a8:c4:61:d3:c3:8c:e1:5a:bd:33:7f:12:8a:18:a8:a9:c9:01:
         ea:e2:c0:81:bf:85:80:78:7d:92:61:3a:2c:b6:a0:2b:fc:69:
         de:50:84:53:cd:de:b3:98:75:03:34:8d:02:cf:48:3b:0c:d7:
         96:79:2c:7c:c2:2b:6f:93:0b:74:95:f2:24:04:04:25:51:77:
         a8:ad:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:30:04 2025 by rpki-client