Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          ZC66iu30KdHD63WRoy6fKTHsqkS2Gg1t+xMJv81d7Gw=
Subject key identifier:   F6:1A:1A:93:35:72:0A:47:81:33:88:D7:EB:E2:BC:EE:97:E5:84:C9
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01A0C3D738DF03B10255035AC2387EFDCC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0AD4
Signing time:             Mon 21 Sep 2026 12:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:56 +0000
Files and hashes:         1: 6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa (hash: /AXpy1YpXm6wZd3dp3BlNrVWuegkD47mcZNJHab7In8=)
                          2: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          3: CsbFJodnTTBOteGZYTM_kxh6h4A.roa (hash: 1youDpmPpKqapYaqaUtX7DWp3NhFDZTB5nkz5cNz1/A=)
                          4: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          5: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: S2IMXuM0sd1OAiQUqTLyl4TVbmxs8Yey8FcBkQ9CE1U=)
                          6: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          7: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:38:df:03:b1:02:55:03:5a:c2:38:7e:fd:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Sep 21 12:00:56 2026 GMT
            Not After : Sep 22 12:00:56 2026 GMT
        Subject: CN=f61a1a9335720a47813388d7ebe2bcee97e584c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:5e:30:1b:18:9c:8d:6f:d2:64:af:ad:2f:
                    1e:e4:e5:5a:9f:b8:c5:c9:0d:dc:da:dd:cf:4e:63:
                    e3:7a:64:b8:f2:0e:53:36:89:b7:31:d1:1d:f6:eb:
                    e2:ed:ac:ae:1e:3e:b7:b2:60:54:58:c0:8a:9d:12:
                    05:ee:d0:b1:f4:8c:d5:9d:81:28:d8:04:28:fa:64:
                    d1:b3:06:9e:db:33:af:80:f5:a8:7f:1f:af:da:1f:
                    c3:89:11:7c:e1:b2:b3:7f:41:68:df:43:48:d9:af:
                    63:22:1a:91:4b:3b:11:c0:47:3f:48:49:9c:b7:f1:
                    e5:ff:3d:9f:ad:09:6b:d5:8d:0e:9d:4f:e6:84:9c:
                    b1:f5:30:60:96:72:e8:13:23:12:79:a2:c1:21:20:
                    aa:08:c2:e9:03:8c:f9:be:4d:85:69:3a:35:b8:5b:
                    e4:aa:d7:fa:a2:f7:b8:cf:77:f2:82:d1:63:ac:ae:
                    ae:41:06:c4:bf:89:9b:3a:6e:2e:dd:3a:52:5d:9d:
                    a2:cb:54:1b:b3:02:8a:8b:22:7c:2a:46:ca:61:82:
                    b7:40:33:4f:ca:49:23:10:bf:50:de:71:6d:ac:7f:
                    2f:d7:91:4f:17:c6:00:f6:87:e8:f9:ac:61:cd:a1:
                    81:6b:6a:51:a8:e9:6c:50:b8:f5:46:8e:59:73:e0:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1A:1A:93:35:72:0A:47:81:33:88:D7:EB:E2:BC:EE:97:E5:84:C9
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:98:64:24:0c:c0:da:50:a9:81:e6:fd:0a:dd:1a:cc:29:0c:
         98:f7:4e:1f:b5:30:53:1c:8c:47:45:40:3a:11:64:e0:48:1e:
         ca:22:79:b6:79:0a:ad:63:8a:6a:11:55:2e:9b:c4:dc:d9:61:
         73:38:39:9b:de:8a:6a:68:41:32:c6:c6:97:62:00:e5:35:59:
         9f:fc:26:a2:06:2e:05:39:e7:a4:e6:da:5f:c2:a8:0e:9c:0a:
         7d:b0:e7:a3:48:4c:5c:81:62:dd:ed:3b:20:14:be:ff:68:2f:
         4d:b5:fd:f4:ed:5d:9f:46:de:08:51:8f:7a:29:0d:67:bf:81:
         4f:10:90:74:30:91:b2:05:a8:88:0b:b1:07:de:a8:23:42:d1:
         e9:52:90:b7:c7:15:2e:55:db:0b:6d:6d:5a:e5:ec:d8:93:51:
         f1:ed:51:17:fd:87:3f:95:b6:3d:2b:3b:aa:ad:ac:e6:7e:1e:
         e6:19:af:f2:e9:66:4d:01:d0:04:8b:15:35:a4:e2:fd:67:02:
         33:47:c0:a6:e4:c9:c7:f1:dc:43:d3:11:90:87:15:c6:8c:6d:
         29:24:a0:6c:2d:a4:a5:b6:0f:60:af:7c:39:8c:be:70:b8:13:
         e5:84:32:0b:91:e3:50:fe:b6:6b:c2:f9:bd:9c:b3:aa:19:75:
         bd:85:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:54 2026 by rpki-client