Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File:                     LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier:          7fsRInlkeRqnMLbF/P02eQdrKoW7xDQPy3udn023Spk=
Subject key identifier:   05:F6:CC:8B:AF:58:BB:2C:B8:EF:78:D6:9C:1A:73:0F:1D:64:A9:A2
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer:       /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial:       0199228D2B79EF86615765041E787FF6EBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 05:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:40 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:40 +0000
Files and hashes:         1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: 8rXecImDaWJhpE5G5FUVYvs99KAh3got8EgmzOtItk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:2b:79:ef:86:61:57:65:04:1e:78:7f:f6:eb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
        Validity
            Not Before: Sep  7 05:01:40 2025 GMT
            Not After : Sep  8 05:01:40 2025 GMT
        Subject: CN=05f6cc8baf58bb2cb8ef78d69c1a730f1d64a9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:fe:20:93:ac:21:b5:fa:80:63:bf:36:04:
                    93:d0:85:da:ea:83:8c:d2:1e:6d:51:d5:95:3b:54:
                    2a:3b:65:35:30:23:98:c5:bf:58:78:bc:bb:47:df:
                    a3:8e:21:fc:37:2c:a3:e9:82:c0:20:67:09:71:0e:
                    ad:a7:e8:e5:df:1c:00:10:4c:2d:72:e0:57:1b:80:
                    00:6e:28:cb:7e:b4:c8:9f:75:3f:13:e8:de:e4:1e:
                    09:16:76:c2:5d:86:63:64:15:ed:3b:57:30:ae:b7:
                    cc:3e:12:cd:b7:a9:e4:c8:a2:da:78:7b:47:c9:2f:
                    5c:42:4f:ca:ee:a4:04:98:ce:12:27:39:3c:7d:c0:
                    c7:fb:98:c8:4a:a4:72:55:e3:c2:a9:37:75:ab:9d:
                    61:24:90:8f:bb:99:1e:bb:ef:70:16:19:66:9d:8c:
                    7c:bb:69:33:77:d3:db:07:5b:fc:ff:2b:7b:f5:8e:
                    e1:7b:71:14:e9:ff:8e:da:b3:57:3f:75:73:f0:b3:
                    70:12:3b:28:0a:e5:5d:20:7a:b6:fd:1f:9e:c3:6e:
                    1e:a1:43:9a:dd:3c:18:ab:78:fb:4b:31:3e:bc:ca:
                    2c:a5:0c:22:9e:2f:f3:2a:8a:76:68:10:50:89:f4:
                    76:d9:f2:97:5a:0f:a2:4c:95:fa:9a:82:1d:3a:97:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:CC:8B:AF:58:BB:2C:B8:EF:78:D6:9C:1A:73:0F:1D:64:A9:A2
            X509v3 Authority Key Identifier:
                keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:59:49:b7:5c:30:9b:93:54:02:e5:5a:09:5d:aa:3b:ce:82:
         ea:3e:3e:b6:8e:83:8f:78:ef:8c:9a:be:98:b7:b5:27:12:84:
         6e:58:05:d2:2e:b6:56:e3:da:e6:64:c6:e9:b9:f9:57:c1:b1:
         72:bb:51:9e:96:b6:65:ab:1e:ff:ce:58:55:d7:22:32:65:26:
         e3:d8:61:27:37:79:8c:23:ee:64:81:21:39:5c:d1:47:f8:10:
         24:1f:41:a0:6c:f1:68:c3:33:c1:b0:89:2a:4e:17:dd:75:01:
         ad:57:42:5b:e9:2d:d4:1b:2a:16:b1:a6:17:2f:a2:d8:da:53:
         e2:2d:73:74:b2:90:5d:39:fd:e7:8d:4d:cb:fc:16:30:b9:93:
         b7:ea:f1:15:bd:39:ef:58:c3:64:0d:c7:22:e8:a9:1b:a1:5d:
         6a:89:4d:b8:cd:49:1f:d2:15:9a:94:fe:cb:c7:af:93:30:d3:
         62:cb:9c:f9:3a:9b:f8:72:c1:8e:99:46:c3:da:b1:9f:1e:d7:
         73:b4:ca:c2:51:a1:be:90:a9:09:b3:1b:40:32:fa:92:2d:da:
         6f:84:88:99:b7:c3:46:4d:b8:83:17:2f:6c:f9:b9:9d:b2:05:
         ad:26:3d:50:eb:49:b0:43:49:86:d1:59:90:d6:70:45:89:a1:
         6e:4f:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:06 2025 by rpki-client