Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          qcspMFjij8UrDfRu/hWND9geGSo1QOmdo6LBizhTUt0=
Subject key identifier:   54:5F:F8:5E:FD:0B:45:92:76:9C:34:EA:97:A8:44:C4:E8:40:65:97
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01988A6A1BBA692C7F63B2049A5FA4646A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          068C
Signing time:             Fri 08 Aug 2025 16:01:06 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:06 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:06 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: RzvNNPNLFXMsBdmtw9MCU71u4oiQ97Kz4aL0d2m5GaQ=)
                          4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
                          6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:1b:ba:69:2c:7f:63:b2:04:9a:5f:a4:64:6a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Aug  8 16:01:06 2025 GMT
            Not After : Aug  9 16:01:06 2025 GMT
        Subject: CN=545ff85efd0b4592769c34ea97a844c4e8406597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:d9:94:64:41:a0:09:9b:d6:98:d2:d8:88:
                    61:b8:65:cf:ae:7a:21:8e:01:19:0c:61:bc:0d:12:
                    fb:42:55:a9:3a:ba:c5:bb:11:a5:4b:4e:b6:09:30:
                    07:b4:92:7b:6f:8f:36:68:16:af:44:24:16:98:69:
                    ca:30:22:28:68:e7:eb:27:0d:3d:27:0b:b2:4d:00:
                    04:0f:2a:b3:d3:49:b2:96:b9:b5:98:b8:0e:84:97:
                    62:5b:ce:84:e4:0b:eb:32:c7:89:9c:88:80:4d:18:
                    6b:0e:04:b6:6e:f9:18:d3:b1:31:33:73:d2:ba:f0:
                    72:4c:75:b8:cf:8b:aa:3a:6b:38:cf:34:7e:bb:48:
                    1e:22:6d:c4:6e:e1:c7:f0:6e:33:6d:ba:46:a3:43:
                    fb:45:4e:6f:0f:30:83:36:33:f6:dc:65:bd:b9:0a:
                    cc:74:4c:16:f2:b0:62:36:50:7d:ca:3d:f9:d1:8b:
                    e1:60:c7:41:a1:f2:f4:f2:5a:a1:88:9c:31:ae:0f:
                    9b:c5:55:a3:13:ed:71:1d:54:f2:2f:e3:df:f6:4f:
                    83:ed:2e:d4:8a:f5:6d:43:cc:50:5f:c6:d2:82:d1:
                    42:9c:f7:05:fa:db:e5:12:ad:fc:d6:b3:7b:45:61:
                    d8:39:93:46:83:0c:9f:2a:44:7e:df:c7:66:7c:9c:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:F8:5E:FD:0B:45:92:76:9C:34:EA:97:A8:44:C4:E8:40:65:97
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:7f:f6:9c:46:19:58:2a:1c:ed:fb:e7:6a:62:c0:fb:f2:
         e7:c3:e9:63:6c:2a:49:76:d2:00:8b:1c:7d:e8:05:63:3b:b7:
         b2:94:3c:48:8e:45:9a:2a:df:27:f0:c6:95:11:c0:ef:cd:aa:
         cf:94:d6:3a:e4:4a:0b:fc:a1:80:a3:bb:c6:ec:8e:84:80:4a:
         da:b8:0e:33:53:b1:e7:23:be:03:0c:5e:31:3c:5a:bc:9e:f3:
         ff:56:76:4c:38:2a:03:96:0d:ba:f3:09:a9:2a:ab:e6:89:4e:
         62:76:76:3e:14:af:5e:de:7c:d8:2c:90:2a:db:f5:e6:86:cc:
         8f:2d:a3:6a:e7:b3:ea:e2:17:6f:12:b9:44:2c:34:60:67:30:
         67:10:8a:cd:ae:07:f6:2c:0e:d5:03:c6:f3:3f:de:4f:24:8b:
         0e:2a:d4:81:8e:38:9e:e0:86:ff:0b:c9:87:6e:68:bb:e5:94:
         06:0e:3e:a9:e1:e8:8c:c7:06:71:dd:b8:a0:2d:7f:91:6a:62:
         47:cd:55:27:30:46:a0:ee:b6:9f:69:a1:2b:b6:01:39:b5:10:
         fb:f4:6b:f0:4a:68:26:65:a3:69:f0:4c:f0:13:3f:84:b8:a3:
         16:b6:97:dc:dc:ee:1d:da:1c:0f:37:47:96:ed:fc:64:b6:de:
         d2:04:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:11 2025 by rpki-client