Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File:                     li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier:          +UDSWafIm5khBIJb3u8DDmOoFTDu6KI2u0G8WFBRucw=
Subject key identifier:   A5:D2:76:E5:79:F6:D7:AA:F3:3B:34:34:A7:2B:CE:0E:96:62:2E:C6
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer:       /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial:       0198530D145BAF09C45C695E0CCD5C0DB39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number:          1597
Signing time:             Mon 28 Jul 2025 22:00:22 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:22 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:22 +0000
Files and hashes:         1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: VfHs27h1ODvwLxvZMiV9GN7vu/6KVCtdxjxDp07TghY=)
                          2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:14:5b:af:09:c4:5c:69:5e:0c:cd:5c:0d:b3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
        Validity
            Not Before: Jul 28 22:00:22 2025 GMT
            Not After : Jul 29 22:00:22 2025 GMT
        Subject: CN=a5d276e579f6d7aaf33b3434a72bce0e96622ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:a4:65:6f:03:e6:6e:dc:22:e1:e1:5f:7e:
                    7f:01:6e:8a:e0:44:2b:56:cd:89:5a:3c:8b:3d:e2:
                    5c:9d:e4:74:43:bf:e4:2c:9e:c6:b3:f9:bc:25:03:
                    bf:21:1a:88:90:72:c7:cc:ba:4e:1d:71:5b:2d:d8:
                    6b:5b:34:a7:24:92:7d:f8:8a:bd:3c:56:89:5f:8c:
                    84:fd:70:28:bd:ed:7a:13:26:58:9a:23:26:12:f8:
                    0f:79:ce:62:70:82:bb:d3:27:53:bd:20:86:34:a3:
                    c9:92:f9:eb:a0:33:66:32:ff:5b:83:02:da:90:3f:
                    cc:8e:c6:12:22:3c:d1:d1:ef:b6:14:b8:7d:58:04:
                    77:a6:a7:a4:3e:17:10:db:fa:25:4b:e8:ce:b9:34:
                    ce:01:45:61:08:16:64:f3:40:76:a7:98:a3:4d:6c:
                    c4:83:17:e8:53:d4:91:99:9e:40:7d:dd:1e:59:cd:
                    65:d2:3c:a6:e1:18:bd:00:12:2c:06:fe:a3:95:86:
                    01:7b:cf:ec:3b:bd:6d:c6:3a:ca:d8:46:99:52:7d:
                    8b:9a:24:cc:49:e5:0d:d1:1f:60:5b:67:34:ee:09:
                    0a:a4:c3:a0:4e:d6:f7:23:a6:67:9f:58:98:d7:6b:
                    66:84:cf:bf:33:5b:0c:61:3e:9b:4c:4b:2b:ce:7e:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:76:E5:79:F6:D7:AA:F3:3B:34:34:A7:2B:CE:0E:96:62:2E:C6
            X509v3 Authority Key Identifier:
                keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:40:45:87:0f:fc:a3:d6:bb:13:9e:f9:28:44:ef:2f:56:a5:
         08:4c:2c:e5:e8:b7:23:14:23:ec:8f:b8:ce:96:53:aa:37:36:
         5b:6f:01:c0:84:61:dc:df:db:fd:f1:14:ac:a2:c7:dc:38:a9:
         d6:9e:9c:83:96:bb:14:01:dd:63:07:54:b0:46:fe:bf:5a:c4:
         11:33:67:35:2c:22:fd:b5:fc:12:71:0c:97:2f:41:43:f6:43:
         4d:8a:cf:3f:4b:be:96:eb:8f:1d:67:77:35:88:86:32:7d:a4:
         fc:83:df:73:57:c4:eb:ef:fb:79:f2:66:ae:a1:45:35:27:57:
         a4:68:a3:00:3a:9e:c3:76:ef:89:c2:cd:a5:41:c8:fe:b0:5d:
         c7:70:ff:2d:79:13:32:08:bd:ec:c5:4b:1e:3d:60:7f:02:73:
         4c:db:97:51:57:24:d0:5c:83:fa:95:8a:3b:a0:c7:e3:6b:92:
         11:81:42:38:2b:36:01:08:f1:7a:fa:c2:9e:a4:be:76:05:f6:
         dd:ba:3a:6e:1e:a0:3f:f1:12:b2:d2:be:9d:73:c5:33:23:ae:
         20:ba:ef:c7:5e:94:f8:9a:86:03:66:b9:29:fc:52:0f:d9:df:
         9c:5e:6e:06:84:1c:04:b0:63:2d:9c:14:40:a4:27:1f:74:37:
         6f:b2:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:10 2025 by rpki-client