Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File:                     luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier:          HfEu0bhcU9sCvsMVzIhQOCD+m1iewdHzHpHp4oobMTI=
Subject key identifier:   B5:B2:EA:2A:62:9F:B9:66:AE:59:C9:2D:BB:97:66:78:FA:AF:4B:95
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer:       /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial:       019FD94FE7D2074893016447A91AC1755E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number:          197F
Signing time:             Thu 06 Aug 2026 23:02:00 +0000
Manifest this update:     Thu 06 Aug 2026 23:02:00 +0000
Manifest next update:     Fri 07 Aug 2026 23:02:00 +0000
Files and hashes:         1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
                          2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
                          3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: qshpzrMDili5bWxIkSY5HVlJljOwaZgCxtDv8wKcic4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:4f:e7:d2:07:48:93:01:64:47:a9:1a:c1:75:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
        Validity
            Not Before: Aug  6 23:02:00 2026 GMT
            Not After : Aug  7 23:02:00 2026 GMT
        Subject: CN=b5b2ea2a629fb966ae59c92dbb976678faaf4b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:04:58:da:8f:85:1e:00:37:40:91:6c:de:
                    48:2d:ad:db:cd:c0:7d:5f:1c:cc:ac:1d:82:f0:96:
                    b3:9c:f4:77:8e:fc:a7:d7:85:aa:75:41:5c:09:d1:
                    b5:b6:18:ac:25:44:71:57:e6:87:67:a7:ce:7a:cc:
                    12:e9:24:d3:b4:df:40:8a:1b:c6:2d:8b:74:90:f9:
                    70:c9:27:ec:e4:50:14:22:fc:0d:bf:b4:ca:ef:38:
                    de:ff:90:d2:35:e4:ea:04:90:be:35:c4:24:a8:ca:
                    26:d1:22:ab:a2:7f:61:b5:2d:92:4a:26:e5:37:a1:
                    1a:80:5e:06:8d:1d:ff:3e:49:38:c1:b7:7d:5d:8c:
                    52:60:fa:66:19:ef:81:d6:58:3d:4d:6f:71:7c:53:
                    06:95:4b:10:04:5e:6f:f4:bb:22:2d:c1:d4:6d:a1:
                    e6:2a:6a:bf:53:41:53:fb:4a:a9:82:5e:72:b2:81:
                    6e:ba:5b:05:72:cf:28:c3:a6:e9:30:d4:f5:f8:f7:
                    99:15:9d:f6:d4:22:c7:32:e2:22:38:f1:af:7b:14:
                    94:89:df:0e:2a:86:b3:76:71:3f:6c:6b:5a:ad:db:
                    b2:e6:c1:74:08:e9:f0:30:86:33:a9:08:55:49:19:
                    9e:8b:10:bb:eb:f3:95:d7:24:5c:b0:f2:c4:52:85:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:EA:2A:62:9F:B9:66:AE:59:C9:2D:BB:97:66:78:FA:AF:4B:95
            X509v3 Authority Key Identifier:
                keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:f7:32:da:9e:89:90:99:49:3b:6d:39:94:11:94:d4:8d:
         69:af:e0:02:44:0f:c9:a8:d7:7a:62:be:12:18:eb:63:48:52:
         ee:2c:24:22:eb:29:75:2e:44:1b:ea:dc:fe:5c:a2:2e:70:83:
         10:d7:bf:df:fe:af:d4:4c:fb:a1:93:e3:26:d3:31:5c:b1:7a:
         e7:1e:23:96:82:d8:0f:43:6d:92:b1:95:01:91:7d:f7:df:c9:
         ba:ae:ab:81:82:b5:01:a9:e8:fd:fd:e0:be:01:d0:06:f6:36:
         75:af:eb:b1:d2:24:0c:dd:68:0f:8c:a5:2d:49:a9:03:9f:b5:
         98:66:5f:b6:c7:84:4f:bf:01:3d:9e:b4:d2:17:6b:fe:80:ad:
         13:f3:50:6f:b7:8a:e5:ae:fc:d6:99:06:d6:72:bb:d1:25:e6:
         37:55:88:5b:57:40:04:e0:48:3c:6d:a4:e5:cb:73:91:1a:4b:
         9e:d7:9e:06:05:d3:d4:f1:e1:6b:ea:34:84:cd:b4:33:c5:44:
         94:f1:ec:67:a5:34:2e:80:97:8d:04:f8:0a:51:2c:70:44:0f:
         b7:19:9a:47:06:91:12:a5:ff:2d:c5:b4:cb:02:d0:33:00:f5:
         05:20:0c:42:bd:91:c3:1a:f0:0b:e5:73:39:0c:e3:b7:05:e2:
         ce:3d:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 07:47:10 2026 by rpki-client