Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File:                     LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier:          I3FnLMTE2g0mSOG2Nrtvr2zSIWQfV8QfSB1tQ0coO6s=
Subject key identifier:   7F:BD:B4:A0:96:EC:C6:38:B5:2F:0B:1F:03:9C:AA:B2:42:8E:6F:E0
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer:       /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial:       0199240CD580282A1664DDFC20AA1E11EEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number:          06E5
Signing time:             Sun 07 Sep 2025 12:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:44 +0000
Files and hashes:         1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: UZXX30RrbgN6yMqfS2q6sh7Oy/LjEQorfVlTghsveKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0c:d5:80:28:2a:16:64:dd:fc:20:aa:1e:11:ee:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
        Validity
            Not Before: Sep  7 12:00:44 2025 GMT
            Not After : Sep  8 12:00:44 2025 GMT
        Subject: CN=7fbdb4a096ecc638b52f0b1f039caab2428e6fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:fa:92:33:d1:75:a4:af:d3:4c:cb:ca:69:
                    dd:79:66:0f:95:fb:dc:f5:6b:8a:3c:a7:b5:07:31:
                    d9:89:31:1a:3a:c3:28:5f:08:ff:19:20:b9:24:55:
                    b4:5e:30:a3:b8:66:bc:64:44:b7:0d:95:50:a6:e0:
                    e5:15:d6:76:99:d2:7c:7b:91:aa:f9:a8:29:0b:23:
                    0f:d4:ee:94:ad:72:5a:0e:56:a6:b9:67:75:45:11:
                    14:2e:66:86:ec:a0:57:00:a4:36:78:48:d1:cd:96:
                    bd:25:81:63:64:b4:1c:b6:ae:85:f9:71:6f:5c:20:
                    ff:43:44:e0:bd:66:02:5e:3f:1b:c2:24:b8:98:70:
                    5c:1e:a5:7d:36:ba:cb:f7:12:20:33:8d:e1:70:15:
                    3c:81:76:31:12:ef:78:72:77:0a:46:7b:31:d1:9a:
                    65:68:85:7e:7a:10:a9:11:3a:6c:79:bf:c7:62:57:
                    b5:ac:55:91:12:1f:24:24:f9:9f:4b:3f:98:6e:c2:
                    9c:09:9a:aa:8b:2d:62:de:46:70:38:de:36:0f:3d:
                    f0:4b:2a:19:09:19:5d:ba:5e:4d:11:89:aa:59:2e:
                    ee:d0:7f:8b:03:cc:71:35:88:e5:f0:2f:66:64:65:
                    66:4e:b9:da:c3:ed:dd:36:d3:e6:05:5e:68:85:c5:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BD:B4:A0:96:EC:C6:38:B5:2F:0B:1F:03:9C:AA:B2:42:8E:6F:E0
            X509v3 Authority Key Identifier:
                keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:78:c4:a1:ad:44:ec:5f:d4:6c:f9:23:02:19:f8:8b:50:
         ed:c2:72:69:89:cc:91:d4:f0:7f:eb:98:5a:71:89:f1:0b:c5:
         3e:52:96:2a:40:f6:32:0e:e1:76:cf:f5:aa:98:b9:00:85:2b:
         0c:43:e0:e4:a3:17:12:f9:ab:d8:cd:f5:1b:8c:88:1c:07:32:
         eb:8f:11:a5:3a:89:99:c2:fe:29:27:5f:84:aa:ee:b2:78:3a:
         72:b4:9e:69:e4:ce:b1:f9:f2:1d:73:73:e1:c2:de:cb:d4:77:
         ae:56:dc:3e:c4:35:8b:e9:7c:19:56:3f:20:cf:5f:c1:72:20:
         e9:2e:e2:d5:97:de:67:99:40:0e:af:ae:5f:5b:f3:e0:4b:e2:
         84:cd:f8:52:ab:b1:8b:f7:de:0a:37:72:6b:fa:22:da:18:fc:
         3d:94:5d:d0:38:a7:ff:09:d2:d2:bb:bd:e6:64:f2:31:47:c0:
         9d:7a:b6:fc:2a:da:94:a4:0e:ad:6d:b9:59:2b:72:4e:d6:a7:
         96:09:31:c9:f4:b8:48:28:a9:9a:00:19:2c:9b:71:c8:42:95:
         b2:b9:07:af:40:29:a1:6e:33:48:d8:77:5d:3b:6f:00:31:69:
         59:48:1b:85:26:5f:0b:7e:c4:06:f1:8b:da:72:c2:c6:85:ac:
         58:5c:06:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDNWAKCoWZN38IKoeEe6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0
NzRhNDgwHhcNMjUwOTA3MTIwMDQ0WhcNMjUwOTA4MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZmJkYjRhMDk2ZWNjNjM4YjUyZjBiMWYwMzljYWFiMjQyOGU2ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApID6kjPRdaSv00zLymndeWYPlfvc
9WuKPKe1BzHZiTEaOsMoXwj/GSC5JFW0XjCjuGa8ZES3DZVQpuDlFdZ2mdJ8e5Gq
+agpCyMP1O6UrXJaDlamuWd1RREULmaG7KBXAKQ2eEjRzZa9JYFjZLQctq6F+XFv
XCD/Q0TgvWYCXj8bwiS4mHBcHqV9NrrL9xIgM43hcBU8gXYxEu94cncKRnsx0Zpl
aIV+ehCpETpseb/HYle1rFWREh8kJPmfSz+YbsKcCZqqiy1i3kZwON42Dz3wSyoZ
CRldul5NEYmqWS7u0H+LA8xxNYjl8C9mZGVmTrnaw+3dNtPmBV5ohcW0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+9tKCW7MY4tS8LHwOcqrJCjm/gMB8GA1UdIwQY
MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt
MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx
LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSp4xKGt
ROxf1Gz5IwIZ+ItQ7cJyaYnMkdTwf+uYWnGJ8QvFPlKWKkD2Mg7hds/1qpi5AIUr
DEPg5KMXEvmr2M31G4yIHAcy648RpTqJmcL+KSdfhKrusng6crSeaeTOsfnyHXNz
4cLey9R3rlbcPsQ1i+l8GVY/IM9fwXIg6S7i1ZfeZ5lADq+uX1vz4EvihM34Uqux
i/feCjdya/oi2hj8PZRd0Din/wnS0ru95mTyMUfAnXq2/CralKQOrW25WStyTtan
lgkxyfS4SCipmgAZLJtxyEKVsrkHr0ApoW4zSNh3XTtvADFpWUgbhSZfC37EBvGL
2nLCxoWsWFwG+w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:04:58 2025 by rpki-client