
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          QqpojCTaKot5VEwhLmBNA21bzP8wRMPuBYgpnmnBBfE=
Subject key identifier:   75:A1:D6:74:CE:80:EA:87:B3:30:04:80:5F:85:D8:E0:15:63:D9:1C
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019A4E4F51B0B42033E4AA9B0566BD7E3027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0776
Signing time:             Tue 04 Nov 2025 10:00:12 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:12 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:12 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: IV7f+xCX/LTMmFblTaAZJvfUHk/05vmryv9g7o8I5r8=)
                          4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:51:b0:b4:20:33:e4:aa:9b:05:66:bd:7e:30:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Nov  4 10:00:12 2025 GMT
            Not After : Nov  5 10:00:12 2025 GMT
        Subject: CN=75a1d674ce80ea87b33004805f85d8e01563d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:25:61:d9:5d:03:19:e9:22:e5:b0:35:99:
                    da:0d:5c:02:d1:81:3b:2b:77:31:07:c9:9e:3c:a5:
                    db:31:05:72:e1:c1:8f:3b:ea:7a:82:e3:78:5d:f6:
                    1f:33:97:69:7c:b9:5f:83:8b:5a:60:a9:b7:10:44:
                    48:fb:f0:13:d0:16:ea:6b:ff:a1:b1:b1:e8:be:b0:
                    f3:1e:73:a0:01:29:d2:13:13:5e:6a:0a:72:cd:1d:
                    b6:e5:0d:4c:fd:c7:51:fe:7c:7c:f2:18:b0:80:83:
                    43:c1:c6:70:1c:02:ba:1f:78:29:69:6c:9e:58:dd:
                    f1:5e:7b:a1:f3:e4:6e:62:df:82:1b:32:b9:9d:7a:
                    bc:37:2b:18:48:dd:24:ce:5a:fa:c4:16:08:29:8b:
                    9e:7b:08:c3:b1:fb:f0:4d:7b:0e:32:de:66:99:90:
                    86:6a:0c:5a:6c:c1:63:9b:79:39:ad:db:66:14:50:
                    99:e1:a4:cc:16:97:1c:08:29:72:52:f4:ef:91:87:
                    93:11:9c:89:49:d9:81:b9:75:e8:79:4d:93:32:89:
                    3f:28:18:85:9e:77:bd:de:7a:57:39:20:0d:54:5b:
                    1e:90:0f:8f:b4:8b:7b:ac:cb:ea:b5:69:ec:20:f0:
                    09:db:de:e4:97:b3:a5:6d:01:d1:c1:f4:46:8b:ef:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:D6:74:CE:80:EA:87:B3:30:04:80:5F:85:D8:E0:15:63:D9:1C
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         76:a0:95:f7:aa:a4:b7:fd:d3:4c:f7:41:3e:73:8d:f3:cf:de:
         a6:59:6b:3a:e2:8b:8e:2e:ad:29:b1:12:18:c0:a5:37:2e:73:
         37:39:66:8c:6f:89:5e:cf:08:1c:62:4c:44:7f:6c:fb:3b:47:
         c6:d2:b4:6c:a1:a4:76:3f:63:e9:db:7b:8f:ca:21:f4:b5:1f:
         a4:8c:41:06:96:88:68:34:82:1d:cd:88:89:fc:e6:a9:1d:70:
         fa:31:47:c1:ee:8e:55:f9:73:24:01:cf:f8:bb:82:69:2d:27:
         94:b1:11:e7:28:0e:56:31:43:95:08:57:8a:50:00:d3:a7:09:
         cb:f8:eb:0c:63:4b:34:4f:06:ba:f8:fb:9b:6f:e3:35:6c:44:
         a2:aa:2b:72:84:2c:ee:f5:ba:50:e9:20:f9:08:10:b0:10:e3:
         1e:fd:57:37:e4:f1:d5:10:ee:05:6a:9b:38:42:0d:e3:9f:fc:
         3b:fa:56:aa:25:24:a3:6a:38:61:a6:d3:38:50:4e:87:c3:34:
         be:40:8a:8d:ad:7b:21:35:dd:38:73:46:c3:7c:80:48:d3:51:
         62:f0:d1:8e:18:8c:47:e0:30:8d:c3:6a:b9:91:d7:8b:56:ef:
         fb:3f:ed:97:d8:61:16:d6:aa:a9:a0:c6:f6:e7:d2:ef:4a:13:
         07:1d:fa:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT1GwtCAz5KqbBWa9fjAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjUxMTA0MTAwMDEyWhcNMjUxMTA1MTAwMDEyWjAzMTEwLwYDVQQD
Eyg3NWExZDY3NGNlODBlYTg3YjMzMDA0ODA1Zjg1ZDhlMDE1NjNkOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G0lYdldAxnpIuWwNZnaDVwC0YE7
K3cxB8mePKXbMQVy4cGPO+p6guN4XfYfM5dpfLlfg4taYKm3EERI+/AT0Bbqa/+h
sbHovrDzHnOgASnSExNeagpyzR225Q1M/cdR/nx88hiwgINDwcZwHAK6H3gpaWye
WN3xXnuh8+RuYt+CGzK5nXq8NysYSN0kzlr6xBYIKYueewjDsfvwTXsOMt5mmZCG
agxabMFjm3k5rdtmFFCZ4aTMFpccCClyUvTvkYeTEZyJSdmBuXXoeU2TMok/KBiF
nne93npXOSANVFsekA+PtIt7rMvqtWnsIPAJ297kl7OlbQHRwfRGi+/O5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWh1nTOgOqHszAEgF+F2OAVY9kcMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqCV96qk
t/3TTPdBPnON88/epllrOuKLji6tKbESGMClNy5zNzlmjG+JXs8IHGJMRH9s+ztH
xtK0bKGkdj9j6dt7j8oh9LUfpIxBBpaIaDSCHc2IifzmqR1w+jFHwe6OVflzJAHP
+LuCaS0nlLER5ygOVjFDlQhXilAA06cJy/jrDGNLNE8Guvj7m2/jNWxEoqorcoQs
7vW6UOkg+QgQsBDjHv1XN+Tx1RDuBWqbOEIN45/8O/pWqiUko2o4YabTOFBOh8M0
vkCKja17ITXdOHNGw3yASNNRYvDRjhiMR+AwjcNquZHXi1bv+z/tl9hhFtaqqaDG
9ufS70oTBx364A==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:54:21 2025 by rpki-client