Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File:                     li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier:          2bGdMKbeJbtecO8K9LPGfGHngzaXZQgkjDZidjk48r4=
Subject key identifier:   03:C1:CC:81:84:F3:B9:98:C7:FE:6B:8A:3E:18:F2:CB:39:40:FA:E8
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer:       /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial:       01A135C809CBA7574EC16E6AC46D028FF5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number:          1A31
Signing time:             Tue 13 Oct 2026 15:01:04 +0000
Manifest this update:     Tue 13 Oct 2026 15:01:04 +0000
Manifest next update:     Wed 14 Oct 2026 15:01:04 +0000
Files and hashes:         1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: zz61O+9wxOTwliq1hgg2LcCN+s63wx8pVP2HTy4/13M=)
                          2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c8:09:cb:a7:57:4e:c1:6e:6a:c4:6d:02:8f:f5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
        Validity
            Not Before: Oct 13 15:01:04 2026 GMT
            Not After : Oct 14 15:01:04 2026 GMT
        Subject: CN=03c1cc8184f3b998c7fe6b8a3e18f2cb3940fae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:84:9e:e0:34:82:8d:37:bd:fd:f1:a7:69:
                    b0:99:21:b6:eb:2f:a2:94:22:2c:9d:b4:47:cf:1a:
                    6f:3a:19:53:6c:99:31:1d:30:ef:6c:f6:0b:2a:d2:
                    0c:cf:a9:5a:6c:ba:a1:12:0f:90:97:76:64:f3:47:
                    67:bf:83:1c:f3:22:14:8b:98:e2:07:29:2c:f8:cc:
                    0d:d8:9f:53:2c:b5:d4:f9:a1:12:20:a6:b8:28:c7:
                    de:a9:05:df:97:00:63:d4:12:8a:14:fc:16:b5:82:
                    dc:e8:1d:40:c7:0f:90:24:65:0e:29:b2:25:a5:72:
                    01:68:a9:fb:53:f7:bd:68:f6:a3:1b:67:5f:09:55:
                    9e:75:37:ac:d7:d5:c9:25:f7:4c:f6:22:cc:d0:1d:
                    12:69:f8:4c:f8:1c:a6:e4:98:54:9a:89:d6:aa:55:
                    80:36:2b:4d:e4:99:59:c7:f4:18:53:b6:6f:54:ad:
                    19:a2:c7:ec:d9:15:a3:8d:0e:a0:fc:8f:40:99:68:
                    51:eb:86:f9:fa:dd:13:a2:a3:b5:92:0a:d6:ec:06:
                    e9:1c:1b:6b:3e:10:77:d1:1f:5f:fb:5a:8d:49:08:
                    a2:a8:94:7d:35:4a:d4:31:e6:63:dc:df:a1:df:60:
                    28:4a:8a:7d:a4:f8:c8:10:6b:63:33:5b:45:48:6a:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:CC:81:84:F3:B9:98:C7:FE:6B:8A:3E:18:F2:CB:39:40:FA:E8
            X509v3 Authority Key Identifier:
                keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:de:98:55:b8:11:12:3f:9b:a7:05:00:62:1e:b0:54:43:
         d6:56:e8:2c:76:5e:e4:f7:99:05:23:8a:f5:6a:14:bf:56:9f:
         c6:d5:1b:98:81:7e:3f:04:a6:1d:f6:19:d2:a5:31:b9:97:b2:
         b2:55:81:c5:cd:67:d0:10:3d:af:7f:6d:02:d4:ed:59:e0:ce:
         68:62:bc:6a:31:07:8c:80:b0:6d:0e:c9:a0:d1:c4:a6:ed:84:
         df:be:de:3e:f4:62:04:65:f6:66:d0:eb:69:95:97:71:be:b9:
         53:82:cf:f1:43:c6:f4:ad:ad:8d:58:5a:ff:2c:39:a1:87:df:
         bf:06:46:46:4a:73:da:a4:48:75:13:53:3a:b8:7d:03:1d:8a:
         c2:24:e4:57:10:6f:1c:da:53:0d:a4:e2:19:e5:c0:25:34:4a:
         dc:98:ce:e4:18:de:d4:1f:64:fe:2a:cf:57:81:01:b5:40:1d:
         50:5a:59:cd:44:d0:56:a5:f9:50:78:4e:5a:85:66:6b:d2:5f:
         1f:95:05:25:26:cd:4e:97:b7:8e:bd:5f:9c:d7:ae:c1:89:b8:
         f2:68:7b:a7:83:e8:61:4f:93:f1:d5:06:18:d0:d9:40:ed:63:
         91:c6:bb:68:af:ac:18:d7:3a:7d:74:c6:cb:76:49:f5:7b:e0:
         a4:7f:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:10:24 2026 by rpki-client