Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          OAokrJWNwNsDboTGtseB7xLPmpd62WD2nDBrFiv+VIo=
Subject key identifier:   DE:D7:40:18:A5:25:53:1F:65:73:59:DB:9E:3B:CE:4E:3E:03:0D:81
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019F9F9626D7B53C40661C0F893AB5500392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          053B
Signing time:             Sun 26 Jul 2026 18:00:45 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:45 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:45 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: QJzWAlQ6w9occnpw/+9mf3JBcT8J0n+v/HSczUt0izg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:26:d7:b5:3c:40:66:1c:0f:89:3a:b5:50:03:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Jul 26 18:00:45 2026 GMT
            Not After : Jul 27 18:00:45 2026 GMT
        Subject: CN=ded74018a525531f657359db9e3bce4e3e030d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:86:8a:0f:a6:87:fc:fc:ff:d7:96:25:e4:
                    9d:d6:cc:b3:71:0a:db:c6:a9:93:4d:76:15:fb:79:
                    af:81:93:c9:2c:2b:2b:51:db:bd:1f:27:80:75:63:
                    16:6a:3b:38:08:a7:be:38:ff:5d:71:f1:64:dc:24:
                    38:cd:5e:25:54:d3:d1:e2:14:25:70:0b:50:fe:d3:
                    4e:64:f2:b8:8f:60:18:99:10:ba:31:f5:9b:18:cd:
                    b3:23:37:a3:79:d4:17:a5:24:e5:75:c7:24:53:af:
                    33:9d:83:fa:f7:61:a7:ea:18:ef:d0:ff:eb:26:8b:
                    52:0d:96:f4:73:8c:bb:1a:33:5d:b3:bb:9b:34:09:
                    d2:e5:fc:8c:a6:d1:bc:c2:9c:b9:8c:3d:45:de:b1:
                    6e:9c:e9:80:b1:f4:22:b7:11:48:66:d9:20:e7:59:
                    ba:19:29:12:81:6b:6b:a2:eb:24:e2:3f:25:c0:ec:
                    d1:72:6b:e3:32:2c:19:6a:d6:ef:a0:8b:65:d3:e8:
                    44:e6:cb:df:af:1f:67:fe:e2:fb:a7:02:1e:2f:c1:
                    4f:d3:96:49:48:c3:f5:8f:83:36:63:10:3e:50:a7:
                    a2:19:c2:8e:ff:a0:bb:15:d2:f8:f9:36:83:1f:9a:
                    9a:2e:db:3a:db:ca:be:f7:af:73:fe:f9:88:0e:28:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:40:18:A5:25:53:1F:65:73:59:DB:9E:3B:CE:4E:3E:03:0D:81
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:09:18:54:73:24:07:3b:5d:8d:b3:d4:2f:7d:e9:32:d0:f2:
         d5:16:78:54:9f:2e:c5:68:45:d0:83:83:4b:8a:15:36:7e:6e:
         54:45:9a:b3:85:70:ec:e9:2a:21:53:75:fb:28:fe:e8:ea:dc:
         83:53:6b:bf:80:15:fe:4f:50:33:20:78:6c:28:3b:51:86:0c:
         95:87:d6:ef:fe:ff:51:ba:b3:f3:08:50:4a:54:68:da:29:a4:
         79:72:b8:73:e0:69:91:dc:1f:97:cb:19:fc:6d:87:db:80:46:
         78:da:d9:ee:c2:0b:ef:26:eb:cf:ee:d6:01:78:ab:88:1c:b4:
         40:16:f5:08:9d:c0:49:c3:71:7e:99:f0:c0:c0:16:a5:fe:a6:
         bd:a3:60:22:97:e2:95:40:55:ee:4f:88:39:f0:96:4a:35:f6:
         67:7d:9d:4a:09:02:b1:c7:e4:43:43:18:b1:e5:ba:45:80:c1:
         fe:6c:1e:69:64:76:78:b3:98:a7:1d:8d:07:51:77:0a:2f:4a:
         b6:64:e0:e0:41:31:a8:25:35:a7:41:01:87:2f:ec:72:09:b1:
         24:d0:33:f8:26:bc:76:dc:3c:31:30:58:f4:cf:62:78:df:a8:
         cb:af:e0:97:1c:55:a0:aa:2d:cc:f0:5d:7c:77:e1:07:e8:5e:
         a9:03:d6:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flibXtTxAZhwPiTq1UAOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTM0YzBjMTgyYzQzODM3ZjJjMmJkNGVkY2IwYjhiM2Fi
ZTk2ZTkwHhcNMjYwNzI2MTgwMDQ1WhcNMjYwNzI3MTgwMDQ1WjAzMTEwLwYDVQQD
EyhkZWQ3NDAxOGE1MjU1MzFmNjU3MzU5ZGI5ZTNiY2U0ZTNlMDMwZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWiGig+mh/z8/9eWJeSd1syzcQrb
xqmTTXYV+3mvgZPJLCsrUdu9HyeAdWMWajs4CKe+OP9dcfFk3CQ4zV4lVNPR4hQl
cAtQ/tNOZPK4j2AYmRC6MfWbGM2zIzejedQXpSTldcckU68znYP692Gn6hjv0P/r
JotSDZb0c4y7GjNds7ubNAnS5fyMptG8wpy5jD1F3rFunOmAsfQitxFIZtkg51m6
GSkSgWtrousk4j8lwOzRcmvjMiwZatbvoItl0+hE5svfrx9n/uL7pwIeL8FP05ZJ
SMP1j4M2YxA+UKeiGcKO/6C7FdL4+TaDH5qaLts628q+969z/vmIDigGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7XQBilJVMfZXNZ2547zk4+Aw2BMB8GA1UdIwQY
MBaAFI5TTAwYLEODfywr1O3LC4s6vpbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2It
OTg1NDc2YzU1ZTQzLzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2ItOTg1NDc2YzU1ZTQz
LzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAkYVHMk
BztdjbPUL33pMtDy1RZ4VJ8uxWhF0IODS4oVNn5uVEWas4Vw7OkqIVN1+yj+6Orc
g1Nrv4AV/k9QMyB4bCg7UYYMlYfW7/7/Ubqz8whQSlRo2imkeXK4c+Bpkdwfl8sZ
/G2H24BGeNrZ7sIL7ybrz+7WAXiriBy0QBb1CJ3AScNxfpnwwMAWpf6mvaNgIpfi
lUBV7k+IOfCWSjX2Z32dSgkCscfkQ0MYseW6RYDB/mweaWR2eLOYpx2NB1F3Ci9K
tmTg4EExqCU1p0EBhy/scgmxJNAz+Ca8dtw8MTBY9M9ieN+oy6/glxxVoKotzPBd
fHfhB+heqQPWIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:57:04 2026 by rpki-client