Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          anFnMx1Tl4MrElVkIc3xIAZLUkpeNs9c1l9wuoS8sFs=
Subject key identifier:   77:1E:A9:ED:4F:61:12:46:31:E3:16:49:11:E8:B7:E3:68:0D:CB:01
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019D3789B564111ACAB175E7C1D2BC8943B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          03FC
Signing time:             Sun 29 Mar 2026 03:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:04 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: FrZQGQxQ982EZ8fMoaYDZfD5+ViX+uSeebNLf5aPt6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:b5:64:11:1a:ca:b1:75:e7:c1:d2:bc:89:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Mar 29 03:01:04 2026 GMT
            Not After : Mar 30 03:01:04 2026 GMT
        Subject: CN=771ea9ed4f61124631e3164911e8b7e3680dcb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:7d:bf:99:d9:7d:f9:ed:60:e9:6d:a8:f7:
                    9e:43:6a:b4:50:9e:aa:62:5a:39:32:07:e7:e2:90:
                    06:70:61:0d:26:5e:84:5e:8d:3d:90:e6:f9:96:61:
                    ed:29:b6:2d:59:aa:d8:80:87:bb:59:fd:ee:3a:83:
                    a5:54:8f:af:00:33:3a:83:d5:c1:f9:ad:f9:39:f8:
                    bb:d6:65:94:22:e0:87:ef:64:71:81:55:62:20:4d:
                    a4:38:b5:f2:12:24:2a:59:f7:5a:7b:54:68:ab:cd:
                    c0:93:ee:42:cd:1e:3a:6e:ef:8f:1c:ec:b2:84:44:
                    b2:6d:01:6b:29:e9:1e:a2:3b:72:83:c7:34:ea:aa:
                    df:c1:cf:51:47:91:56:6a:41:48:11:18:45:11:cd:
                    41:d6:59:ad:03:04:fd:f9:c5:78:f1:72:94:71:1c:
                    5f:cd:02:54:bd:1d:ce:10:7e:05:b7:09:bc:62:5a:
                    17:9a:54:22:4f:b2:45:ff:5a:9d:f6:86:a5:dc:01:
                    cc:90:ee:bb:fc:2e:70:3b:c7:5a:37:34:ac:fd:53:
                    27:fb:8e:2b:1d:bb:36:98:fb:3c:eb:71:a0:3a:1b:
                    42:ba:ed:b3:9a:d4:22:1b:10:21:96:83:c6:70:9a:
                    5e:ad:82:a1:12:6c:06:5c:b6:fc:c4:55:25:14:3e:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:A9:ED:4F:61:12:46:31:E3:16:49:11:E8:B7:E3:68:0D:CB:01
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:a0:76:a4:7d:8c:05:1d:76:4d:c4:84:ee:e0:25:70:5d:
         d3:fd:1c:84:a6:79:60:68:b0:e4:a5:1b:50:1f:62:04:3c:dd:
         4d:6c:5e:95:6c:05:ef:a5:d2:67:9a:10:d5:d3:60:19:f0:1b:
         82:6e:41:51:fd:47:e2:23:0e:b5:d5:35:d9:a7:5f:61:ca:c5:
         0e:fa:df:cd:3f:0c:18:15:f8:4d:45:d1:32:73:29:7e:69:cb:
         53:62:32:7c:86:3f:ff:ad:09:b6:25:72:92:9c:4b:2e:f2:18:
         f0:99:f5:27:96:f0:6d:20:9a:5d:5e:a9:bc:c4:d4:2a:35:47:
         40:97:3f:0b:44:66:18:5a:06:bb:0c:7e:5a:46:d4:2f:4a:f9:
         b1:d8:68:ca:c0:71:31:4f:cb:1e:09:98:6c:1f:dd:f9:53:bf:
         a2:cb:cf:32:68:3f:6f:30:45:15:ee:f1:55:61:07:8a:86:d9:
         35:44:08:dc:a2:e2:4e:c8:9b:2a:55:5c:1c:fc:65:9f:82:fd:
         c5:b1:1d:8b:5a:b6:a2:12:d5:69:f0:0f:c3:2e:39:ff:95:ff:
         35:e6:81:5b:29:0b:b2:4b:e0:38:9c:c1:ad:8d:70:ab:87:97:
         18:50:9e:e6:c0:6c:d8:65:7e:b3:53:ce:87:62:62:a5:83:47:
         a3:bc:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:51 2026 by rpki-client