Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
File:                     LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json)
Hash identifier:          JKy+w/WWb9HcDxMOSMxxGPEgt+w/ipTCp/8zVgwO4p4=
Subject key identifier:   0D:55:07:2E:35:97:47:F0:DD:96:13:56:58:31:2A:A6:52:D4:D0:07
Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
Certificate issuer:       /CN=2ee353f3503f9bff3381450035628e81a96d908f
Certificate serial:       019749D5FFE38676F19125739548642F2A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 10:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:50 +0000
Files and hashes:         1: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: n2OOFVM7Er5lMtTkk8l2WuDy+rZnJjtses/j0IWZQWI=)
                          2: i4ji4FESABQCgK0_EzuuOFD8dtc.roa (hash: 3BAjWIU8+VYQZdWD5OjHsa/ea0VN5UUvfwPcGQwXG/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ff:e3:86:76:f1:91:25:73:95:48:64:2f:2a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f
        Validity
            Not Before: Jun  7 10:00:50 2025 GMT
            Not After : Jun  8 10:00:50 2025 GMT
        Subject: CN=0d55072e359747f0dd96135658312aa652d4d007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:59:98:68:da:70:25:28:43:22:fa:3c:8b:
                    d4:42:19:65:67:47:c7:99:09:74:c1:f9:7b:58:95:
                    9e:de:6e:ad:71:29:90:6d:68:3a:f3:2a:ec:95:17:
                    d9:ab:a0:9f:2b:61:81:42:cd:88:c3:13:40:fc:d7:
                    63:46:f4:a5:c4:0a:57:ad:e3:7f:51:67:f8:d0:0c:
                    1b:a4:84:fe:91:a4:c8:5d:d9:9f:dc:13:bc:b9:b8:
                    eb:57:a9:24:5a:32:ff:e7:de:6e:48:75:5d:eb:0a:
                    f2:12:66:7b:32:20:74:0c:71:02:ee:02:e3:8f:2c:
                    9c:07:f0:d9:03:49:38:b8:39:7b:bd:30:e7:92:96:
                    09:2d:34:b5:59:a9:50:5d:6a:5d:37:5d:c6:89:16:
                    a9:fb:92:02:cb:8c:74:5b:9e:1c:d5:6d:1c:04:7c:
                    00:8b:e5:20:ef:ac:d6:74:c9:10:c7:cf:8e:97:93:
                    93:f2:5d:80:b3:f7:32:41:e9:d4:d5:ed:9f:67:53:
                    31:48:8a:0c:8e:c3:d6:de:1a:0a:b5:c5:4c:2f:c1:
                    e9:a2:11:7b:3c:6b:04:ae:a1:80:a7:08:36:07:39:
                    0e:5e:af:38:b6:bb:f2:df:ef:07:7a:85:e8:9e:c0:
                    c0:cc:11:68:e9:2f:ab:90:40:0c:0b:88:cc:56:fe:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:07:2E:35:97:47:F0:DD:96:13:56:58:31:2A:A6:52:D4:D0:07
            X509v3 Authority Key Identifier:
                keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:7e:54:67:ad:6c:5c:71:8e:39:f8:9f:9d:74:54:b1:17:c6:
         07:32:a0:57:9c:0a:81:d9:2b:76:1c:c4:8e:10:2f:4c:42:2b:
         b6:80:1c:29:7f:ef:c5:a2:23:d1:c2:a9:ef:fb:30:86:af:5d:
         36:00:6f:8d:7d:7d:22:80:6c:e6:0d:15:69:d4:5e:2e:92:f5:
         dd:9d:75:26:82:58:8d:2a:16:53:55:be:68:cc:73:ab:0c:03:
         1e:14:c8:66:89:68:7f:3a:ac:06:09:95:aa:9d:87:f5:ef:1c:
         d7:a6:11:66:1c:2a:67:e0:71:9b:a0:34:2c:84:9f:e5:e5:a5:
         9a:3c:8e:5b:bd:fd:84:f4:0c:09:7e:83:cb:99:fe:3b:52:b7:
         b7:2e:b2:fd:08:33:a7:a9:4c:4e:78:0e:4c:39:37:93:c2:6d:
         37:df:ba:54:03:ee:30:16:16:c8:4e:2e:53:23:17:8b:30:f3:
         3b:04:b8:0b:10:c1:d7:58:4e:77:57:7b:45:1f:71:bf:05:c8:
         84:d2:62:47:b9:a4:f3:48:ce:eb:73:d4:f0:86:e9:01:f8:ca:
         14:35:d3:8f:c4:5c:16:ef:65:cf:45:c5:36:bd:80:44:14:12:
         b3:3a:7e:78:09:49:f4:70:b8:b1:db:eb:7b:2a:78:3a:ad:fd:
         a5:f3:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:51 2025 by rpki-client