Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          NwtaxztCg3w+53EzGJT6uzfr1/8qT3QkuiLCkUIYhVI=
Subject key identifier:   E5:37:B3:90:8A:A3:42:38:17:99:35:01:7D:A0:D6:5D:CC:0E:C0:D0
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019E21366272D17198153D312A9149F3715B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          0475
Signing time:             Wed 13 May 2026 12:01:12 +0000
Manifest this update:     Wed 13 May 2026 12:01:12 +0000
Manifest next update:     Thu 14 May 2026 12:01:12 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: PfvtV40OuVgkCwkXnoHmMLP2VZrev9w4Fd2th9ZaK28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:62:72:d1:71:98:15:3d:31:2a:91:49:f3:71:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: May 13 12:01:12 2026 GMT
            Not After : May 14 12:01:12 2026 GMT
        Subject: CN=e537b3908aa34238179935017da0d65dcc0ec0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:bd:af:3b:b6:0f:0a:e4:14:9b:22:36:48:
                    8c:76:1f:c2:90:67:35:5d:8d:fc:3b:be:c3:d2:90:
                    01:79:b9:ed:3b:b6:06:47:8a:51:1a:f6:84:fe:ba:
                    ca:b5:84:95:e7:47:2c:15:0a:64:8b:31:1e:b1:fe:
                    d2:a0:85:d7:c9:eb:c7:1e:32:fa:39:15:c8:52:69:
                    fb:80:67:d0:bd:07:57:10:e0:d8:96:e2:6b:af:de:
                    49:27:5d:80:9c:d4:49:b6:14:61:fe:0c:9a:5c:65:
                    03:c5:4e:69:5c:fb:14:98:78:a8:03:65:6b:ab:62:
                    04:53:f1:8b:88:13:a8:cb:dd:9c:f7:92:04:b4:b2:
                    95:55:ac:4f:73:a9:dd:e7:84:64:25:c7:3a:17:40:
                    ce:8b:60:a1:de:77:5c:30:a1:c7:72:7d:ab:bc:f8:
                    85:95:33:89:46:3e:fd:b5:af:f8:f7:b1:d8:bb:fa:
                    8f:34:30:a5:99:db:14:7f:9c:18:54:a4:21:cc:53:
                    07:9a:10:ae:47:27:4f:99:02:61:a3:cb:81:9b:84:
                    4f:5c:28:60:4c:43:5e:c0:d0:c5:fe:f5:9a:14:1f:
                    68:80:88:a1:d4:eb:ef:f5:c1:76:a1:26:cf:75:4d:
                    1b:c6:67:70:87:9d:91:37:1d:97:60:d7:a9:07:6c:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:B3:90:8A:A3:42:38:17:99:35:01:7D:A0:D6:5D:CC:0E:C0:D0
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:55:0b:38:48:3b:bf:b2:33:83:32:31:d2:91:04:6c:58:f8:
         51:21:a1:6d:62:e6:1b:37:9c:11:71:09:55:e1:4b:85:1f:41:
         8c:c3:e5:1e:a4:1c:23:91:ec:8c:5c:a2:fa:78:fc:cb:74:7a:
         93:f4:85:b3:f6:f2:65:f9:19:66:3d:70:10:51:9c:a2:d2:a5:
         5d:f2:f3:70:de:23:80:d0:7a:9d:78:86:6c:6a:8d:ca:40:29:
         ec:fa:5c:da:73:8b:91:e0:88:d1:f9:71:23:a4:82:27:bd:aa:
         60:1e:e3:49:01:9b:4a:82:57:70:a2:9f:a0:1d:81:9a:64:02:
         2f:5f:ef:ed:a1:44:7d:ce:2d:40:f1:0c:ac:36:cc:b6:a7:85:
         81:fc:6a:93:a8:1e:eb:25:8f:d7:84:b8:99:30:4e:9e:26:bf:
         44:0e:89:d2:f9:95:2d:9a:1c:c7:75:cd:70:0d:97:7b:b8:ad:
         69:12:e1:7c:d0:13:31:75:aa:4b:fb:51:cf:50:5d:d6:3e:98:
         47:c6:ee:92:69:04:62:e3:05:75:5c:0d:53:ab:5c:11:cd:eb:
         cb:ba:ac:1e:7e:ae:f7:40:a5:0e:6a:73:c3:53:3e:74:47:e6:
         c0:da:a9:d0:80:33:15:16:d3:2e:48:13:05:d9:91:b1:a6:18:
         4e:02:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:44 2026 by rpki-client