Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          hXtmObgf11vjgYE+ItZs7qfYug6s2gosalDWxFF5MBw=
Subject key identifier:   87:8B:85:5F:7D:8A:94:91:B1:EA:67:9C:DB:56:C0:12:A4:38:A5:4D
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019FAB2C77433861F99C22E01ED709B92B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          0541
Signing time:             Wed 29 Jul 2026 00:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:45 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: qeV4KAMYYfTW/4NXVSBGx6mTTMFjw4Mfc3la9eOwcf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:77:43:38:61:f9:9c:22:e0:1e:d7:09:b9:2b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Jul 29 00:00:45 2026 GMT
            Not After : Jul 30 00:00:45 2026 GMT
        Subject: CN=878b855f7d8a9491b1ea679cdb56c012a438a54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:bc:2b:ba:d6:cb:05:67:8f:89:7f:cd:bd:
                    f2:f9:74:8b:50:58:f0:ea:60:52:5a:15:fa:3d:c8:
                    ae:89:aa:9d:b4:2b:b3:fd:c6:a8:dc:c5:ee:db:7f:
                    89:5d:6e:25:17:a9:f1:d8:bc:87:4d:92:b4:c4:3d:
                    53:b8:49:53:52:b3:43:94:09:7b:cb:e3:39:72:b8:
                    52:37:e0:dd:b1:ab:73:3e:fe:3e:9a:d8:90:3f:6e:
                    97:ff:b8:e7:87:a3:4a:48:f1:a6:ae:92:eb:ac:e7:
                    c4:3e:0f:87:76:c0:4f:3d:1e:03:b7:71:bd:23:e5:
                    75:2d:95:c2:d9:d5:1c:77:3c:3d:14:0b:70:d8:77:
                    b4:c1:a1:75:67:76:eb:f4:a6:0d:48:48:58:4c:45:
                    05:cf:0c:f1:e7:b5:ed:19:7f:10:2b:23:c9:46:54:
                    3f:16:2c:7c:5e:51:67:95:99:4f:4f:7a:fa:1d:db:
                    83:2f:ff:b2:47:4a:71:7b:27:c8:2e:3c:e0:e9:4b:
                    1d:0c:73:58:6e:5c:25:9f:6e:55:7d:30:8c:da:f2:
                    82:bc:cc:a1:2c:fd:83:bf:dd:da:b6:c5:06:e5:13:
                    73:8c:a9:c9:79:2b:71:f9:5b:e9:30:1a:77:9b:46:
                    66:f2:07:82:ac:35:b8:32:40:85:59:49:09:80:94:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8B:85:5F:7D:8A:94:91:B1:EA:67:9C:DB:56:C0:12:A4:38:A5:4D
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:e3:ad:ac:3f:7f:c1:ba:01:e2:3b:60:32:a2:b3:64:90:
         ff:57:1f:b3:43:52:18:3b:cc:af:58:31:92:07:53:61:99:c2:
         07:73:26:1a:9b:ec:eb:66:51:dd:00:b6:05:07:b7:80:ee:07:
         55:63:5d:2e:53:15:79:ca:18:8f:32:00:51:c2:46:63:90:5f:
         c1:86:a5:fc:f8:81:cf:f1:3e:37:7d:cc:b0:8e:3d:1b:0c:8c:
         5c:db:8c:0c:3a:a7:85:94:9d:d8:59:d6:2a:17:d5:d4:18:7a:
         ba:77:0b:c2:9b:64:05:48:70:4b:c9:c2:18:65:10:7b:e2:a8:
         02:85:6d:02:c7:02:7f:49:74:6c:d3:6f:bd:94:47:e2:a8:78:
         9a:c2:e1:1f:12:e4:65:ea:fe:d0:e1:d1:69:07:0f:da:ae:c2:
         83:77:96:20:60:04:1c:5d:de:e6:24:49:dc:0c:a7:65:a8:c1:
         c4:a6:78:5c:2e:32:7b:e8:9e:6b:c5:dc:1b:2c:4d:0c:8a:a4:
         04:96:38:8a:96:6b:c5:75:f8:ad:ac:2a:87:23:f3:2b:9e:61:
         74:34:11:9b:40:cd:ef:b7:89:bc:89:53:ce:ab:98:e8:64:b8:
         99:d4:e6:4b:ae:97:84:63:b0:f3:f1:ca:14:60:4a:5e:80:42:
         a2:10:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:50 2026 by rpki-client