Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          9ka3/7pPNZd0vlp7yUT1JIuZWghkagtGICBWo8qepSk=
Subject key identifier:   AF:1C:81:2D:11:5C:B4:02:9C:A1:2A:E0:DD:26:94:6B:6A:3A:22:D8
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       019CAB6B06C5599E032F7D32BA824E4A6589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          08B3
Signing time:             Sun 01 Mar 2026 22:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:43 +0000
Files and hashes:         1: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
                          2: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
                          3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 3BQKa5EI5RAE3FX+2HuKLd/UCs/ewl4y73wfZji03D0=)
                          4: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
                          5: YALm6m5SWbzZ8AfsEzj-ygddQPE.roa (hash: VOv+iOuB0dLMvQoN1guUP5/ShM+RSeq3EMRboWH8Yzo=)
                          6: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:06:c5:59:9e:03:2f:7d:32:ba:82:4e:4a:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Mar  1 22:00:43 2026 GMT
            Not After : Mar  2 22:00:43 2026 GMT
        Subject: CN=af1c812d115cb4029ca12ae0dd26946b6a3a22d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:da:8f:17:ba:88:a9:04:66:4d:c2:f2:80:
                    cf:48:c7:05:74:04:b6:d8:1d:69:63:3c:5b:fe:ff:
                    32:16:e2:fd:08:93:65:ac:ff:9f:4f:2b:32:9c:04:
                    b7:4e:8c:c3:58:1d:b1:c4:7d:1a:0d:c3:f4:9e:dc:
                    17:f0:11:98:ee:b3:24:ab:b9:b9:aa:b7:b1:1d:23:
                    61:a1:fd:47:0e:17:dc:1b:19:6e:6b:ea:d3:4c:6b:
                    82:e4:da:ce:56:8f:71:cf:de:54:48:eb:2b:4a:28:
                    d0:cf:35:be:90:1a:56:35:6c:0e:4b:79:a3:df:dd:
                    0f:37:e9:6f:d9:b9:ee:4c:df:fd:25:0e:29:48:d8:
                    99:35:36:c6:fe:50:31:d5:50:b6:7c:36:55:9d:4b:
                    ef:1a:16:e6:bf:c4:a7:d9:56:d4:97:22:32:fb:56:
                    74:7d:12:82:69:9a:57:0b:3b:91:86:83:0a:c9:4c:
                    ce:c9:d8:7e:7f:bb:14:fd:d8:08:65:f4:79:3f:a4:
                    84:01:11:11:8f:15:08:c7:cb:b9:b8:1c:ba:97:c1:
                    a7:44:3b:37:4c:7d:24:78:a1:b2:d0:4c:ed:b5:57:
                    0f:99:14:8c:36:71:2a:29:52:69:d8:36:ad:d9:4a:
                    43:41:f8:b4:61:9a:9e:7f:d2:ff:55:a8:86:5f:27:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:81:2D:11:5C:B4:02:9C:A1:2A:E0:DD:26:94:6B:6A:3A:22:D8
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:95:80:1d:c0:18:f8:37:23:f4:4b:4c:87:41:bf:24:f6:8c:
         2e:21:43:fb:d3:2a:9d:b0:7f:99:31:0e:84:4d:72:13:d3:cc:
         39:89:75:59:fd:a1:0f:88:22:51:b4:cf:fb:16:36:67:0a:1c:
         eb:d7:ab:3b:b9:90:ee:ea:28:d3:ae:83:07:e9:08:52:1d:81:
         b5:c8:b7:66:80:05:2d:ca:33:1c:cb:e6:b4:c2:72:3d:7a:06:
         e1:6c:ec:b1:87:f0:52:30:f9:8c:db:fc:95:f0:54:69:11:83:
         02:83:f8:d8:d7:75:a0:30:d6:de:74:f4:ad:37:bb:5c:c6:01:
         56:95:f0:0a:e8:a0:1e:f5:b5:28:40:d0:e1:1a:8f:e6:92:74:
         48:96:ff:41:96:c2:d9:14:28:1b:58:84:01:25:ae:dc:68:8d:
         9b:e9:d1:7e:f3:41:29:6c:43:f0:4c:81:ac:a1:cc:1c:af:7d:
         7f:72:76:75:06:59:41:b4:c3:1a:7d:ce:dc:17:75:c1:6e:d5:
         21:d7:aa:f1:74:f9:e6:a7:36:19:45:65:32:32:8c:01:cb:dc:
         b0:dc:ba:47:bf:17:04:28:e1:ed:63:c0:bd:2b:ad:fb:e6:8a:
         09:04:76:03:3e:9b:9e:5a:2e:8f:98:c6:58:04:7c:f8:2f:70:
         ad:db:a0:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrawbFWZ4DL30yuoJOSmWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjYwMzAxMjIwMDQzWhcNMjYwMzAyMjIwMDQzWjAzMTEwLwYDVQQD
EyhhZjFjODEyZDExNWNiNDAyOWNhMTJhZTBkZDI2OTQ2YjZhM2EyMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jajxe6iKkEZk3C8oDPSMcFdAS2
2B1pYzxb/v8yFuL9CJNlrP+fTysynAS3TozDWB2xxH0aDcP0ntwX8BGY7rMkq7m5
qrexHSNhof1HDhfcGxlua+rTTGuC5NrOVo9xz95USOsrSijQzzW+kBpWNWwOS3mj
390PN+lv2bnuTN/9JQ4pSNiZNTbG/lAx1VC2fDZVnUvvGhbmv8Sn2VbUlyIy+1Z0
fRKCaZpXCzuRhoMKyUzOydh+f7sU/dgIZfR5P6SEARERjxUIx8u5uBy6l8GnRDs3
TH0keKGy0EzttVcPmRSMNnEqKVJp2Dat2UpDQfi0YZqef9L/VaiGXycaJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8cgS0RXLQCnKEq4N0mlGtqOiLYMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5WAHcAY
+Dcj9EtMh0G/JPaMLiFD+9MqnbB/mTEOhE1yE9PMOYl1Wf2hD4giUbTP+xY2Zwoc
69erO7mQ7uoo066DB+kIUh2Btci3ZoAFLcozHMvmtMJyPXoG4WzssYfwUjD5jNv8
lfBUaRGDAoP42Nd1oDDW3nT0rTe7XMYBVpXwCuigHvW1KEDQ4RqP5pJ0SJb/QZbC
2RQoG1iEASWu3GiNm+nRfvNBKWxD8EyBrKHMHK99f3J2dQZZQbTDGn3O3Bd1wW7V
Ideq8XT55qc2GUVlMjKMAcvcsNy6R78XBCjh7WPAvSut++aKCQR2Az6bnlouj5jG
WAR8+C9wrdugTQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:25 2026 by rpki-client