Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File:                     Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier:          YoCIgD8I6hfLBuc+LiLBF2s93ReNCarmlrYcvDnDybg=
Subject key identifier:   DC:FE:7C:D9:D3:5B:53:32:51:BA:E3:05:8C:35:89:D0:A4:85:2E:95
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer:       /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial:       01A0E098243A3251B44D69DF13B33BFA70F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number:          04C5
Signing time:             Sun 27 Sep 2026 02:01:02 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:02 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:02 +0000
Files and hashes:         1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: kt2fv5Tkm1z2ixJ9874vfVJ+STHvYJNO7w7veULRFac=)
                          2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:24:3a:32:51:b4:4d:69:df:13:b3:3b:fa:70:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
        Validity
            Not Before: Sep 27 02:01:02 2026 GMT
            Not After : Sep 28 02:01:02 2026 GMT
        Subject: CN=dcfe7cd9d35b533251bae3058c3589d0a4852e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:c2:fa:89:41:b7:02:f6:f7:17:9b:0f:96:
                    b5:6f:aa:96:ce:6e:07:71:ce:04:3c:5e:d7:e1:49:
                    46:a1:2d:a5:a0:c2:a7:6f:15:ab:d3:ca:41:91:a9:
                    41:fb:1f:26:33:e3:ad:ca:ea:44:4f:c6:09:14:91:
                    c3:27:f3:ae:29:00:ba:45:22:a4:84:ba:0d:95:12:
                    83:a9:c2:b4:f3:51:c6:2d:09:51:68:20:9e:3a:50:
                    56:95:68:74:a1:74:bb:1b:47:2c:a6:b5:8b:da:74:
                    12:9d:14:22:2d:82:5d:f9:7f:2d:94:ee:ae:14:89:
                    77:0c:79:82:19:74:69:57:1b:ae:20:ba:45:87:e5:
                    a0:49:39:aa:15:38:ba:f0:41:e8:e7:c4:37:f3:7c:
                    37:97:d4:a6:8c:e2:13:59:8d:11:a7:73:0f:aa:db:
                    6d:c3:8a:60:18:b1:b3:8d:71:fc:75:55:c8:28:36:
                    6e:a1:2b:63:a3:bd:c6:2c:4a:e3:20:10:f1:ee:0b:
                    1e:3d:6e:ea:ac:ce:89:ae:9e:8d:11:1d:ea:e3:45:
                    a2:59:cb:1a:45:24:7a:1f:ac:16:13:50:23:23:00:
                    23:19:30:fc:03:bf:0b:a7:d3:47:e9:31:61:5d:75:
                    0e:9c:b9:48:72:63:b9:37:ed:11:50:27:18:72:58:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:7C:D9:D3:5B:53:32:51:BA:E3:05:8C:35:89:D0:A4:85:2E:95
            X509v3 Authority Key Identifier:
                keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d9:95:c2:dd:3b:25:0e:28:63:e2:99:f4:1d:30:92:b4:f7:
         8d:8f:eb:78:1f:46:00:91:0e:71:1c:43:15:b1:60:ba:15:da:
         28:92:d7:03:5e:a0:47:d3:66:86:66:23:bb:1f:c0:54:84:b0:
         bb:09:e6:4d:ad:72:6f:b3:de:bd:97:e7:52:db:0c:23:0b:f5:
         eb:f0:73:d8:c5:34:63:60:10:22:46:b7:23:37:49:8a:7e:4d:
         93:15:65:e6:70:39:5f:2b:26:37:44:21:b6:32:2a:4c:2a:06:
         13:16:90:9c:c9:6d:6a:1a:ea:25:d4:72:39:9b:e1:d2:ac:6e:
         70:9e:bf:72:a9:d1:1e:7c:1e:29:35:fb:8d:9e:04:7a:c8:f9:
         33:00:82:d7:c0:1a:01:b6:47:61:82:80:e9:8d:e7:a7:bb:9d:
         f5:0b:77:fe:6f:85:aa:8e:06:8a:f5:ab:6b:54:3e:92:06:14:
         39:c5:ce:eb:71:95:fe:cc:dc:12:2f:72:bb:61:0d:65:86:8a:
         5f:eb:c2:2a:fe:4b:81:10:9b:6d:28:65:57:e8:47:cc:e0:2c:
         f9:57:66:a2:81:39:f5:e3:84:8f:aa:10:18:af:26:eb:d9:dc:
         c4:b4:76:c7:d9:cc:81:53:cb:6c:0d:73:33:0c:e5:06:c2:1f:
         95:89:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:12:26 2026 by rpki-client