Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File:                     Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier:          BLVLayS1dVXj9EeZ/70hyYKKZ1Xm8wySk5dX4WBCdEw=
Subject key identifier:   97:6E:E6:8F:18:6A:51:E8:33:C2:AD:1E:A4:F4:7D:91:05:05:EF:7C
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer:       /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial:       0198805417AD5F7B8A15FA88642F1F8179A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number:          6E
Signing time:             Wed 06 Aug 2025 17:00:51 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:51 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:51 +0000
Files and hashes:         1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: NtZxZNPF/N/b1w63ttoSfXUABL9/OJCZhBX5KV1l6gM=)
                          2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:17:ad:5f:7b:8a:15:fa:88:64:2f:1f:81:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
        Validity
            Not Before: Aug  6 17:00:51 2025 GMT
            Not After : Aug  7 17:00:51 2025 GMT
        Subject: CN=976ee68f186a51e833c2ad1ea4f47d910505ef7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:c0:93:16:1c:f7:c9:66:62:25:2e:35:b9:
                    08:ff:f2:8a:26:16:63:7c:a5:b8:47:a6:e8:ae:df:
                    5d:1d:bf:7e:f9:3b:c7:4b:ef:82:3c:7b:64:60:f2:
                    8d:47:b1:4c:9a:e8:fa:ef:ae:44:07:54:37:4b:c5:
                    cb:18:51:d5:39:65:38:df:c2:ed:cd:61:a3:7f:08:
                    10:ce:f4:bf:1b:2f:f4:a2:7d:b5:91:46:c8:85:da:
                    de:14:a7:2b:8d:22:d5:75:f0:2e:75:e7:5c:4a:99:
                    4e:58:f6:d5:6e:68:c7:c6:3e:95:0f:7e:50:24:4b:
                    d1:f7:f6:86:29:d5:eb:11:0b:08:60:e0:07:77:27:
                    64:75:4f:f8:35:e4:a4:85:26:e0:10:d0:e7:d8:17:
                    a0:ef:ae:37:fd:5e:39:3c:63:71:52:28:5a:3d:44:
                    f1:67:03:95:78:da:0f:f7:38:e7:57:a1:d9:9b:9a:
                    d9:a3:c4:4f:47:3e:c0:0a:de:bd:0b:32:d5:63:df:
                    f9:22:51:d3:65:07:c2:5a:fd:48:7a:1e:ea:4e:7c:
                    b7:d0:a5:7d:31:50:36:0e:b5:32:3c:0a:2c:b2:ab:
                    aa:99:91:53:0d:0f:66:b9:c3:ce:bc:42:00:1e:19:
                    0b:da:6a:21:9e:54:60:8a:b9:10:a5:d7:d6:86:1e:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:E6:8F:18:6A:51:E8:33:C2:AD:1E:A4:F4:7D:91:05:05:EF:7C
            X509v3 Authority Key Identifier:
                keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:7e:26:e3:4a:19:2f:48:80:c7:57:8e:48:ba:cf:6c:0e:
         24:d7:49:fa:c4:1a:73:d7:47:3f:d0:64:6e:71:9e:f8:91:da:
         e0:db:08:97:c0:07:ab:05:df:cf:e7:0d:87:dc:b0:d0:ea:fa:
         50:30:f4:d0:92:13:c0:ce:b3:a6:fb:83:25:2c:76:4b:cc:a0:
         43:e6:77:d9:75:66:c0:9e:80:ee:d8:94:6b:59:2c:82:49:a4:
         01:af:6c:96:9c:3f:80:12:d5:68:2c:26:10:ca:d2:d5:5d:98:
         d9:5b:58:8b:fa:54:0f:a5:5f:53:90:53:71:8a:d6:61:88:1c:
         0a:78:90:e3:e9:40:32:76:57:0e:01:55:26:c9:7c:5c:d4:45:
         b5:d8:a3:57:f0:28:6e:7c:19:fe:e3:e6:81:39:bb:3b:7d:bf:
         96:cb:7b:74:5b:96:80:c0:c8:2b:74:87:77:07:19:91:50:a3:
         5a:5e:c8:24:47:88:26:0a:ec:62:3d:f3:83:bf:89:a3:26:6c:
         e3:69:cb:b8:e9:6f:de:4a:84:39:69:1e:a8:f6:f1:02:f5:fa:
         e8:c4:71:6f:6b:25:19:13:ce:91:ee:7e:03:19:e1:75:f2:a8:
         87:83:ab:2f:78:fc:4e:d2:46:a9:ac:36:2d:54:fc:f4:43:fc:
         bf:68:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:23 2025 by rpki-client