Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File:                     Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier:          qpepPcPFdN34/OIWsOk6a3pSF7WUisXT4972Vmygd2w=
Subject key identifier:   15:8B:A3:DD:77:C1:7F:3C:DF:7A:35:39:5B:8D:00:60:0D:C0:26:78
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer:       /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial:       019EC1EDF5191E6C874537A6F75AA004DC8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number:          03AC
Signing time:             Sat 13 Jun 2026 17:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:57 +0000
Files and hashes:         1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: fA67y2L0ejQ3Uu7uEW74SGauI88fqCmnRdAe+TCLZzE=)
                          2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f5:19:1e:6c:87:45:37:a6:f7:5a:a0:04:dc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
        Validity
            Not Before: Jun 13 17:00:57 2026 GMT
            Not After : Jun 14 17:00:57 2026 GMT
        Subject: CN=158ba3dd77c17f3cdf7a35395b8d00600dc02678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:a2:0c:90:f0:7e:fa:7d:4a:91:af:5b:f1:
                    a3:e4:1c:27:cb:d6:e9:67:c8:3c:10:7f:bd:bc:ed:
                    fc:e9:5f:48:2c:0d:52:f6:ca:be:91:6a:be:02:c2:
                    b7:ce:d9:98:56:05:58:08:de:df:b9:ae:54:7d:d2:
                    7b:fc:92:2d:4e:15:db:2a:1e:04:57:3b:9f:19:a2:
                    c5:c1:50:7b:22:f5:c6:10:3d:25:b2:54:2e:44:d0:
                    6e:10:48:10:21:33:f9:b9:90:0e:c0:89:83:8d:2e:
                    18:00:cb:1d:c6:0b:ea:e6:f5:5f:f3:05:b2:49:d5:
                    8d:f8:b4:32:1f:e4:bc:2c:14:a4:ec:ec:3e:00:f7:
                    50:fb:db:03:5b:48:87:45:c7:83:17:c8:55:60:b4:
                    b1:48:a7:fd:1a:05:6c:a5:ef:0e:b6:f2:9b:d4:aa:
                    e2:99:04:06:26:be:7c:b6:a1:25:54:97:89:67:09:
                    7d:ce:00:a2:73:24:05:67:b4:2f:0b:71:2f:ae:c2:
                    2b:cd:01:c3:c1:16:a8:23:9e:ab:88:33:37:28:63:
                    45:ad:f2:be:0c:85:63:63:ab:82:1b:d8:9b:ae:c1:
                    d1:c2:4e:c1:d2:f8:c7:06:72:c0:30:ad:dd:a4:57:
                    b3:9f:1a:f6:20:35:e3:66:f3:24:ab:53:d3:a5:c7:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:A3:DD:77:C1:7F:3C:DF:7A:35:39:5B:8D:00:60:0D:C0:26:78
            X509v3 Authority Key Identifier:
                keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:60:ac:69:36:1e:76:08:96:21:78:b9:3b:4d:ee:44:a2:9a:
         de:8b:aa:9f:23:78:41:cc:86:29:dc:3a:c3:46:3d:b6:93:41:
         76:6e:91:2e:be:51:84:77:b3:39:44:d4:e5:a6:6d:c2:0e:1e:
         59:6c:dc:0e:3a:f7:07:e1:01:ce:28:4c:be:1c:27:57:f3:66:
         5e:10:c0:49:68:f8:90:a6:ec:99:1a:86:f1:d0:cf:b0:3f:7e:
         f7:d1:88:36:89:b9:c9:19:00:34:7f:10:99:33:b5:48:bf:2e:
         8c:31:6a:50:a9:c6:49:d5:36:d4:c5:78:8c:ab:33:05:24:35:
         ca:2f:b2:7b:bc:2d:b7:9e:41:78:33:41:20:4e:5d:a7:9f:dd:
         78:5f:30:a2:3a:37:ff:98:bb:c8:f5:ac:19:e9:1a:eb:19:db:
         0d:76:01:4d:68:51:f4:8c:ff:5a:c2:50:8d:7b:5e:08:f8:df:
         4d:74:3b:10:0a:87:63:c0:39:12:f8:b9:b4:ba:3c:c6:55:6e:
         12:8e:d3:7d:a1:7c:a1:22:44:7a:85:fe:53:7e:ce:be:1c:b8:
         36:29:66:55:34:7d:fa:c5:1e:71:63:73:51:18:97:f8:0b:13:
         0c:65:81:8e:94:bc:44:d1:66:0f:58:a8:0d:ee:c4:88:ff:af:
         ac:11:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:14 2026 by rpki-client