Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          tgEJv6+QmVyhi0xsj5Hwrm7ncifBkGKMPh1xEvUz8ZQ=
Subject key identifier:   5A:BF:96:7F:8E:67:44:3B:7D:08:05:31:68:FC:10:67:D7:30:4B:CE
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019F93FF62C840094005505EA4D3B4962126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          0535
Signing time:             Fri 24 Jul 2026 12:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:15 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: e0+a3ejmSTYwJ0/pV7vXKYG5v0BxsrFsFv6HPbxSKWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:62:c8:40:09:40:05:50:5e:a4:d3:b4:96:21:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Jul 24 12:00:15 2026 GMT
            Not After : Jul 25 12:00:15 2026 GMT
        Subject: CN=5abf967f8e67443b7d08053168fc1067d7304bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:ac:2e:1e:35:9e:ee:1e:ca:c1:79:c8:4d:
                    d7:c7:71:7f:00:91:44:48:9b:0d:e4:bd:1c:e3:ef:
                    75:51:02:cc:d7:59:7e:c9:90:90:8b:8f:31:6b:d0:
                    d7:ae:e3:0f:33:b0:86:90:17:85:8d:b7:5a:eb:60:
                    9d:c1:91:5c:f8:4c:5c:4b:1f:e5:8c:a8:9a:97:6a:
                    ba:e4:09:cb:b1:55:da:bf:4f:9c:d3:10:47:8a:04:
                    cf:a5:f3:00:fc:dd:97:04:98:7c:96:05:62:b2:03:
                    01:f7:4d:e0:50:11:7b:a8:df:62:d0:48:be:9e:e9:
                    4c:54:f4:fb:53:65:e7:98:14:e7:e5:68:fb:b2:eb:
                    74:bb:04:4c:26:2f:19:01:f8:60:11:f8:5d:02:78:
                    8c:70:d3:e0:ef:5e:d7:44:47:d5:c0:a2:62:74:47:
                    21:d5:60:1c:3d:4c:89:e8:af:cc:8b:eb:c5:19:dd:
                    7d:34:a5:8e:45:43:34:54:f1:e5:43:5c:71:c0:9b:
                    d8:1c:92:c4:cb:48:8c:5e:cf:67:0b:e9:92:48:53:
                    7a:16:fe:4b:02:59:7c:0d:b0:30:70:94:e1:19:5c:
                    be:27:da:60:2d:09:fd:47:7e:ff:00:7a:85:71:59:
                    2b:05:61:f5:4e:cf:42:79:07:9e:63:d0:aa:9c:ca:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BF:96:7F:8E:67:44:3B:7D:08:05:31:68:FC:10:67:D7:30:4B:CE
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:73:ae:81:5b:2f:d8:d3:d2:0d:2f:e9:e5:bc:67:5e:fc:92:
         7e:d3:77:53:85:f9:4f:1a:eb:62:46:d7:2f:77:5f:d6:f7:9e:
         8a:43:f4:b1:26:cc:fc:e9:a6:f0:d7:6f:23:e2:cb:4a:77:db:
         01:d0:27:e1:cb:12:5c:02:1e:94:21:6c:71:75:a5:95:c9:48:
         78:f2:5d:2a:bb:86:25:bc:f3:09:56:d4:e8:28:40:e5:25:61:
         fc:c1:3e:3c:0b:4a:a9:27:c1:da:33:03:e3:f8:b8:69:5e:63:
         eb:91:77:b8:50:7c:8c:65:2e:cb:9e:15:30:e8:45:fb:fe:96:
         27:1c:b8:a7:cc:f9:55:36:d4:21:ea:fd:44:e5:dd:88:cb:20:
         e0:fd:a2:e6:c7:47:f5:50:ba:2c:c9:d5:83:1e:f6:94:01:2d:
         25:0d:9b:70:50:13:bf:b6:7a:47:4b:9d:81:eb:60:8c:a9:9c:
         7e:57:a4:d0:75:2b:a5:92:9b:70:bc:91:ae:c1:92:43:46:24:
         78:ff:46:17:27:2c:d4:f3:5e:0f:d0:df:b2:90:34:4e:8d:99:
         63:15:a0:0b:56:bd:71:1a:d6:c8:2c:39:4f:8a:94:0c:aa:e8:
         47:bd:24:d6:fc:51:61:dd:7f:77:40:68:c6:f3:85:18:17:65:
         21:72:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:55 2026 by rpki-client