Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File:                     li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier:          VabXNSwXuww7hlKCcj5Xt8AG8Ttzg2ASk/GyWt2cQds=
Subject key identifier:   58:04:B8:A7:54:96:1D:0A:34:07:01:E8:6C:EE:57:7F:68:20:BC:27
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer:       /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial:       019841AD3159F10CAEC87509743889A529AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number:          08D8
Signing time:             Fri 25 Jul 2025 13:02:06 +0000
Manifest this update:     Fri 25 Jul 2025 13:02:06 +0000
Manifest next update:     Sat 26 Jul 2025 13:02:06 +0000
Files and hashes:         1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
                          2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: f1pj4WRDYI1J3Dgzw/+cXLfCuLciYaIUjJb48p5VUZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:ad:31:59:f1:0c:ae:c8:75:09:74:38:89:a5:29:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
        Validity
            Not Before: Jul 25 13:02:06 2025 GMT
            Not After : Jul 26 13:02:06 2025 GMT
        Subject: CN=5804b8a754961d0a340701e86cee577f6820bc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:4b:1b:65:01:88:78:fd:96:d7:17:a7:8f:
                    7b:1b:f3:07:ac:27:46:1f:af:df:2b:a7:25:80:fc:
                    c3:64:6b:4f:81:c3:1e:ff:0f:31:ec:ca:ae:fe:02:
                    9a:5e:0b:3b:79:47:2a:a0:c3:9b:62:39:9a:6e:c7:
                    55:a2:a6:97:34:bf:bd:01:73:b2:bb:9a:1c:7c:ca:
                    2e:ff:8e:19:33:5b:af:3f:d8:03:e4:9f:f9:b5:c3:
                    a2:ae:1c:65:27:1b:25:c4:72:23:c9:69:4a:ca:81:
                    08:34:d8:cf:84:88:b5:d1:1a:63:2d:d8:02:2f:45:
                    f3:49:f6:40:a1:af:7a:b6:81:05:9e:4e:11:ae:e8:
                    12:2a:fb:97:65:5f:cf:08:c9:40:a6:c8:a9:34:c8:
                    d6:6d:87:3a:19:93:ad:c6:93:67:79:39:11:03:c4:
                    11:34:31:44:16:c5:de:3b:db:97:d7:6c:be:21:c1:
                    63:c2:e3:d9:0b:f6:47:60:34:49:9d:20:1f:62:6b:
                    d7:56:a2:be:38:f5:bb:bf:36:be:3c:25:19:29:90:
                    fe:0d:9b:43:6e:a9:4e:a4:04:68:32:7d:92:6b:f3:
                    a2:af:d7:17:e8:72:dd:20:06:bb:3f:c0:60:0a:7d:
                    e4:22:05:8f:6a:75:01:81:0d:44:56:66:26:2c:10:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:B8:A7:54:96:1D:0A:34:07:01:E8:6C:EE:57:7F:68:20:BC:27
            X509v3 Authority Key Identifier:
                keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:6b:66:cb:6c:04:c0:06:49:ce:52:5b:19:22:d1:c4:78:
         b5:21:13:5c:3a:07:f0:33:39:4a:05:59:6f:89:a4:05:c0:ec:
         f4:58:bb:c4:a9:79:dc:b8:5b:2e:e1:db:48:f4:a4:bd:73:c2:
         19:be:64:75:35:57:1f:06:95:d1:7d:4b:75:bb:ba:31:75:60:
         ea:85:56:1e:11:3d:be:ca:fe:41:d9:33:65:36:81:c7:d0:e3:
         10:b6:95:b5:c6:49:28:2b:44:bb:7c:42:9c:cf:87:86:1f:52:
         b8:b3:9b:7b:67:62:9c:ce:76:9f:78:de:9c:10:9b:04:33:57:
         cb:10:cf:97:26:7b:35:5b:dd:fe:b1:b2:9b:fd:24:05:96:b8:
         48:70:95:b6:d8:37:1f:ae:f6:ba:c9:a4:ef:53:08:93:f3:10:
         48:25:c8:ce:b2:73:f6:45:26:09:c1:f1:ad:81:00:d0:dc:16:
         45:eb:67:1b:3c:9b:31:de:73:9f:8a:fc:61:41:cf:91:4a:22:
         60:99:6d:3f:28:ae:39:5d:32:a3:a2:b1:f1:27:70:d2:16:37:
         83:1c:19:34:84:d6:ad:cb:29:0b:26:e3:61:5d:71:36:1e:73:
         ed:ec:4d:ae:c4:0f:00:f2:57:be:fb:b0:5e:1d:2f:fc:de:c6:
         a2:12:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:42:22 2025 by rpki-client