Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          yC2ow3J2eM+L3Lbnt042NkN+shfpl3wVOZIzXQ+/bVs=
Subject key identifier:   11:25:21:D1:15:2B:A7:B4:06:E7:77:15:EE:B0:4C:D0:46:E0:54:7C
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       0199FBEAD6F8EEAD5AD8328925EE70E1B7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          024F
Signing time:             Sun 19 Oct 2025 10:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:35 +0000
Files and hashes:         1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: ZFOhz39T3Iaj3HkC7JUzdvQUe5hIWynBWC5Yy250nl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:d6:f8:ee:ad:5a:d8:32:89:25:ee:70:e1:b7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Oct 19 10:01:35 2025 GMT
            Not After : Oct 20 10:01:35 2025 GMT
        Subject: CN=112521d1152ba7b406e77715eeb04cd046e0547c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:4d:bb:d8:02:1b:08:5e:fe:07:36:49:0a:
                    cc:0a:b5:59:fc:b3:06:05:37:ac:2e:56:46:e2:e6:
                    cd:95:8a:02:e8:cf:91:ff:1f:b5:dd:a6:98:80:50:
                    ed:86:e2:d5:c6:f1:2e:a3:b7:f5:ce:ac:77:04:6a:
                    6a:d7:b4:8c:59:d6:f0:b1:90:33:c0:da:7a:32:c7:
                    b7:d4:4b:32:bb:40:94:34:38:03:51:0b:3f:43:d6:
                    ab:0f:63:2e:0e:8f:6f:38:65:96:05:ed:dc:e4:3b:
                    3b:dc:b6:22:e5:c5:1f:42:f4:70:07:d6:b7:6a:2b:
                    36:bd:81:af:70:74:d9:ea:b4:f3:1c:b3:1b:10:e1:
                    da:54:f3:7a:25:df:4c:9b:a6:b7:d9:3a:5c:b7:a2:
                    3c:c0:6b:28:e2:14:8e:3f:a8:df:28:4a:04:4d:3a:
                    2b:54:75:d8:95:60:9f:3d:ea:c4:79:d6:49:4f:37:
                    b2:ba:88:b9:91:cc:b6:b0:a2:6b:b1:62:ee:5d:1d:
                    13:bb:7c:20:db:aa:16:07:4e:c9:8f:00:2b:e2:9d:
                    f3:50:cb:86:c6:2c:e9:ae:19:06:13:6b:b9:88:27:
                    47:60:8e:a9:7f:e8:62:32:e9:3c:45:06:90:cc:bb:
                    d0:7f:de:c1:2a:5d:b3:2a:d0:1d:ad:5e:41:b0:57:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:25:21:D1:15:2B:A7:B4:06:E7:77:15:EE:B0:4C:D0:46:E0:54:7C
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:38:ad:50:4b:7a:80:e8:92:bf:62:6b:12:99:8b:8e:85:
         9b:6d:e2:dc:21:ba:cf:05:18:cd:a0:15:7f:62:1a:de:c7:c3:
         de:9e:22:03:f9:ac:64:77:94:26:b6:72:9f:52:f0:1c:7e:92:
         55:ab:71:be:20:bc:27:7c:28:1b:32:82:25:c7:a3:07:8d:6e:
         3e:94:ae:40:45:6f:a2:6b:fb:44:61:24:01:0a:c8:17:26:f0:
         77:53:e1:80:b5:8a:1a:2f:b7:29:b1:cd:56:e8:78:3f:19:8c:
         92:31:b8:6e:fc:11:5f:f7:eb:5e:89:9a:08:26:67:2b:17:de:
         46:62:e7:bc:04:58:c4:1b:a1:ca:92:08:78:a8:02:af:c6:07:
         c1:85:26:3e:32:ad:4a:bc:b4:3d:34:87:1c:e4:fc:bb:19:8b:
         bd:7f:61:93:f7:50:8e:84:d3:b6:bd:0d:28:25:c7:55:e3:53:
         a8:e5:c3:81:90:56:41:0d:d6:d4:e9:40:d0:2e:b8:0c:bd:4b:
         da:15:8f:b0:39:4e:14:49:cc:bb:41:85:44:3d:44:c9:d0:14:
         38:22:4b:33:1e:a0:cc:a3:8c:be:f0:cf:07:34:dd:89:6a:ad:
         d2:42:9b:ba:40:7c:26:52:01:d4:cc:5c:9a:80:f2:47:ee:bf:
         08:4a:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:30 2025 by rpki-client