Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          IdRKtYa/IAITXbOCQ2jkYg+rxEJ7pPnP+IOfXJ9pBe4=
Subject key identifier:   B5:0C:E8:D3:45:9F:BA:72:23:0C:9F:41:68:3F:E3:A7:B2:45:36:9C
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019EC06DD256EDF0B7F81D60039CC0881685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          09C7
Signing time:             Sat 13 Jun 2026 10:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:23 +0000
Files and hashes:         1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 9U93J82z0S5m4f7o3nZbLIqusDv+C8xPPiVhmiaU4LA=)
                          4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          5: YALm6m5SWbzZ8AfsEzj-ygddQPE.roa (hash: VOv+iOuB0dLMvQoN1guUP5/ShM+RSeq3EMRboWH8Yzo=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:d2:56:ed:f0:b7:f8:1d:60:03:9c:c0:88:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Jun 13 10:01:23 2026 GMT
            Not After : Jun 14 10:01:23 2026 GMT
        Subject: CN=b50ce8d3459fba72230c9f41683fe3a7b245369c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:ee:eb:52:0b:5d:69:67:de:1e:68:6a:6c:
                    1d:07:12:4c:3e:06:a7:58:1e:ed:de:b5:21:15:dc:
                    f0:b7:b9:9e:fa:e7:68:22:a8:f6:e8:08:ca:14:ac:
                    2a:e5:83:c9:79:bb:7f:6a:15:14:f9:f0:cc:87:98:
                    bf:ec:3c:bc:2c:e0:12:67:f7:49:a9:1d:29:f3:1d:
                    9c:4f:84:7b:50:d7:a6:32:69:b9:53:a2:0d:c1:9e:
                    76:a0:44:cd:c1:5e:b6:43:e8:bc:59:cc:56:79:80:
                    8d:59:77:86:15:55:fb:6d:ec:ee:34:ff:30:25:84:
                    d8:4c:e6:38:91:35:77:28:79:01:25:fd:bb:c4:47:
                    f3:5c:b3:24:a6:f6:09:02:85:69:af:ba:e1:53:70:
                    8b:67:f4:17:d3:84:49:44:e2:42:88:fe:e6:6f:bf:
                    eb:92:ce:d1:64:0c:88:ae:af:ca:9e:43:17:c6:15:
                    e5:dd:68:1b:90:bb:70:36:de:00:f6:17:88:26:df:
                    3d:b5:c6:6d:cf:64:3b:d4:75:8d:35:c9:c1:aa:af:
                    ac:6b:0b:ce:e3:2f:91:ff:e1:63:56:39:c5:f1:3e:
                    98:9c:76:3e:01:9f:10:df:30:1c:e5:87:70:9a:14:
                    54:e6:45:10:50:54:66:53:49:ce:07:b0:1b:6f:0d:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:E8:D3:45:9F:BA:72:23:0C:9F:41:68:3F:E3:A7:B2:45:36:9C
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d7:40:f6:d1:07:02:38:95:fa:bd:23:5c:da:16:b8:c0:da:
         5a:bd:5f:2c:15:3b:3a:9e:da:dc:96:21:1d:7b:28:bf:49:22:
         67:4b:82:7e:66:5e:e1:ac:05:4e:38:b6:c1:11:21:4d:e9:99:
         da:3a:0f:81:1e:fa:5c:bd:4d:7f:5a:64:a0:50:59:d9:40:4b:
         8b:25:a9:68:36:05:77:e0:96:cf:90:6e:fb:99:f1:06:53:c3:
         58:ed:fe:9b:8d:8c:34:50:fd:79:d3:d1:4c:8e:74:db:bb:61:
         4e:c1:aa:26:fc:87:2e:1f:3b:8d:05:bd:e9:05:63:75:d0:23:
         c8:95:00:9d:b3:99:77:cd:cc:3b:42:61:6b:89:6c:c3:06:43:
         f3:e0:2f:44:27:ee:85:97:92:30:3a:6d:54:da:93:85:0e:39:
         e5:b2:b9:fc:da:f5:85:1e:09:c9:38:43:89:ba:7d:82:61:82:
         a5:54:20:64:bf:72:3a:77:cd:7e:e9:c0:5c:ce:9c:9a:0c:d2:
         c2:dd:41:7a:32:23:cd:d9:db:c9:be:77:f8:7e:b8:01:39:23:
         21:44:a4:17:32:ab:6f:6b:52:a4:18:bf:af:73:76:b8:77:ad:
         7b:19:94:c1:34:b6:af:32:b7:3f:54:96:9e:6a:19:d6:87:7b:
         77:f6:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:35 2026 by rpki-client