Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
File:                     Li0SmltLCeXgV4TDQAtrHn8lvXY.mft (raw, json)
Hash identifier:          IN83gZ5m2FxkiD/nv+MexA0PisvO100VYJfr0iIGY8E=
Subject key identifier:   A0:CF:F6:06:54:59:1A:1B:76:28:47:E4:33:60:38:24:77:EF:67:25
Authority key identifier: 2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
Certificate issuer:       /CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Certificate serial:       01A0D34B18C1F54A5DB256931992A8A375BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
Manifest number:          E8
Signing time:             Thu 24 Sep 2026 12:01:48 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:48 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:48 +0000
Files and hashes:         1: Li0SmltLCeXgV4TDQAtrHn8lvXY.crl (hash: L0E7O/ZsDd0cZg1RcomOxw54S5ePXsaj99WMuo/Ksb8=)
                          2: onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa (hash: I7AFUur2ROEZxmpIxbJw3fqUyHF2B3umsxduJVcLuKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4b:18:c1:f5:4a:5d:b2:56:93:19:92:a8:a3:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
        Validity
            Not Before: Sep 24 12:01:48 2026 GMT
            Not After : Sep 25 12:01:48 2026 GMT
        Subject: CN=a0cff60654591a1b762847e43360382477ef6725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:88:79:73:eb:0b:7c:ff:f7:71:87:b8:c3:
                    3a:6a:2e:62:be:2f:84:fc:b4:a2:5a:6f:31:b4:72:
                    d7:39:28:4c:70:9c:23:6d:df:58:a1:2b:6b:14:33:
                    46:03:72:3f:97:03:d4:18:ab:24:cb:ff:2d:71:91:
                    ec:24:65:c0:94:af:ca:50:d1:0c:80:06:31:62:87:
                    c0:6a:f0:1a:37:80:20:5c:c2:8d:6c:22:88:75:8f:
                    ac:38:01:9c:57:18:07:2e:f4:56:5a:a0:d4:1c:ab:
                    37:b3:bc:53:ef:51:e9:d6:e0:d1:e3:a2:b9:88:b9:
                    42:71:77:6d:19:51:14:0b:40:99:32:f0:04:b5:cc:
                    88:fc:67:9a:c0:7f:0f:f4:48:b8:4b:97:25:9e:41:
                    96:d5:8a:d4:91:26:b4:26:3f:45:08:f1:7e:94:82:
                    94:fa:26:d8:48:a2:c2:04:41:9f:8f:d7:42:db:63:
                    1d:df:04:f7:3d:cc:96:53:72:c6:ca:17:13:82:ae:
                    2e:f5:dc:aa:9a:4e:86:2b:37:19:fe:17:f0:ff:b0:
                    18:05:e0:6f:e0:d3:c8:8f:3d:9a:a3:8b:b0:f0:91:
                    9b:2d:a3:c1:37:d3:8a:33:33:5d:21:3f:47:a5:e6:
                    32:26:1f:3e:c4:d3:d4:7d:05:70:a2:ab:b7:28:a2:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:F6:06:54:59:1A:1B:76:28:47:E4:33:60:38:24:77:EF:67:25
            X509v3 Authority Key Identifier:
                keyid:2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:c1:f2:69:da:fe:59:88:dc:56:0e:77:38:48:46:66:1e:
         c1:5b:62:2d:eb:d8:bb:28:26:83:ea:34:0c:2c:0b:15:9a:4f:
         87:77:da:fb:6a:30:2b:62:39:37:b0:44:e9:22:2e:af:65:29:
         bf:f7:dd:9c:fd:16:7b:7a:16:0f:12:ea:96:c1:34:df:14:18:
         85:15:63:c1:0a:f6:9d:00:61:bb:a7:cb:b6:7a:e2:d0:34:e5:
         25:aa:08:e8:6e:29:e8:5a:22:8e:fd:d0:ad:1f:84:aa:79:22:
         fa:bd:8f:de:d2:3c:3f:66:a1:9d:08:3c:98:49:f5:31:e9:9b:
         56:ba:cf:29:10:89:92:c4:c5:b6:30:15:30:79:a8:68:fa:ea:
         87:08:8f:bc:5e:8c:2e:29:c8:a8:05:37:b9:5c:6c:f8:c0:74:
         92:af:4f:3e:9f:8a:71:c3:18:9f:78:b6:4c:89:fb:69:37:ea:
         37:8a:63:c7:97:e6:39:65:0f:5b:2b:65:13:90:47:61:62:e0:
         0d:b2:56:c1:ed:12:86:c6:c5:a3:be:d1:86:fc:60:31:be:36:
         49:d7:56:0b:ff:01:1f:d6:5e:4f:0e:03:57:58:c1:81:9c:09:
         b5:50:d2:0a:41:ca:9f:1b:7a:0c:c3:7c:06:ef:e2:84:4d:76:
         73:7d:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:29:54 2026 by rpki-client