Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          88y3do7G9OL34fBtzVfQkGRaFy9tgqA12kD0A/9HoS8=
Subject key identifier:   9B:1C:4B:A1:F3:39:61:85:12:02:AE:1E:81:B9:E0:54:14:A1:07:89
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       01A12D69E86B11197571F0DDDFBAF95AFBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          0609
Signing time:             Mon 12 Oct 2026 00:01:17 +0000
Manifest this update:     Mon 12 Oct 2026 00:01:17 +0000
Manifest next update:     Tue 13 Oct 2026 00:01:17 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: RWd7H0tNgUEnhqxIWLJsvzTT4dNM6jhhsm8V+2SBR6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:69:e8:6b:11:19:75:71:f0:dd:df:ba:f9:5a:fb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Oct 12 00:01:17 2026 GMT
            Not After : Oct 13 00:01:17 2026 GMT
        Subject: CN=9b1c4ba1f33961851202ae1e81b9e05414a10789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:51:92:ff:c5:4c:d1:5f:10:0d:8b:aa:1c:
                    be:91:41:3d:dd:d7:1a:bc:56:96:d0:c3:7b:7b:75:
                    0d:c0:d0:06:29:a2:9d:dd:c4:1c:30:f7:77:70:02:
                    af:4a:ea:6d:50:65:b3:0a:8e:87:e4:ef:e4:c4:5f:
                    7c:20:0e:81:90:b6:e9:c3:a2:c2:3d:75:61:3e:0d:
                    ad:f6:a3:2d:c2:7f:47:ca:bf:6a:ac:14:8f:b8:50:
                    c9:a7:55:76:bb:67:57:80:4a:dd:7b:d7:76:e2:b8:
                    35:cb:c1:2e:3d:a4:8e:de:ac:0e:a3:7e:a6:02:80:
                    d7:85:e0:e7:c3:5c:2e:36:d4:a9:4a:8e:24:9d:24:
                    79:d4:d5:ab:50:0d:5e:cc:f8:0b:73:52:b8:9f:60:
                    2b:b5:c5:e7:5a:84:a5:07:87:19:50:fc:bf:dd:15:
                    99:1f:a1:59:02:83:31:7b:e2:8d:65:06:79:b5:d3:
                    1c:eb:a7:d3:51:de:50:ae:26:ad:f2:47:4e:1c:cd:
                    5d:ad:f4:3c:a7:f2:e2:3a:49:8b:83:40:63:ec:9f:
                    2e:40:cb:bd:75:25:88:46:4d:4c:7c:f2:25:48:0a:
                    83:e1:94:ee:06:a2:ea:fb:02:de:14:00:2c:27:62:
                    a0:98:87:c1:d4:96:64:81:91:87:33:f9:96:0d:e3:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:4B:A1:F3:39:61:85:12:02:AE:1E:81:B9:E0:54:14:A1:07:89
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:79:5a:a9:59:69:22:7c:76:ff:df:96:6b:57:20:23:e6:fd:
         05:49:6f:9d:05:c0:f7:b8:71:2a:53:fd:39:62:b3:c2:f6:c4:
         ef:66:7a:07:54:dc:b1:57:09:3f:3e:b4:36:47:0a:39:c0:ba:
         a4:ef:9f:df:f5:25:6d:6f:eb:d2:08:94:37:eb:80:f5:e2:7d:
         11:a5:79:ee:96:fd:42:a3:c0:31:ec:51:5b:a3:4c:ad:32:a0:
         e4:82:6b:13:78:19:60:90:c0:e7:28:72:0f:12:cf:62:cf:94:
         e5:4d:56:de:69:0a:a7:b5:f8:35:de:22:af:44:a4:20:94:87:
         39:53:f8:5e:98:12:6a:39:25:89:5c:60:ed:5d:d8:be:7c:d1:
         08:96:4e:a0:92:f4:4a:f6:d9:5f:09:66:37:bc:1b:ef:d0:f7:
         ea:01:9a:25:05:60:bd:43:06:0e:6d:f6:1d:23:6e:de:0c:22:
         9a:93:6a:7e:6b:78:67:81:f6:20:00:4c:e1:7e:05:53:a7:d6:
         13:6d:12:90:6f:c5:8a:4c:3d:b4:7b:80:d5:85:9c:95:fd:4c:
         d1:d9:d3:8d:e3:6c:e8:b0:4f:c4:87:a9:b8:e2:11:99:ea:8e:
         81:6f:5f:61:ba:ca:60:d1:01:d6:1d:05:20:3d:78:29:7f:9f:
         75:5d:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:52:48 2026 by rpki-client