Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File:                     LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier:          724nWHwo79BhyCZXbl08qZKR7RomsXQWywN7qLtQz1Q=
Subject key identifier:   05:C0:EE:4A:66:06:CA:96:AF:14:E1:2A:55:AB:1E:B1:EC:0E:A2:B0
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer:       /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial:       019FA14DD6ED145F2A7663C1EB359E4A5691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number:          0112
Signing time:             Mon 27 Jul 2026 02:01:00 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:00 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:00 +0000
Files and hashes:         1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
                          2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: wjUuvNjMAGWVOkuqGKnLBYLXaI9lFkkX0aS89xClDE8=)
                          3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:d6:ed:14:5f:2a:76:63:c1:eb:35:9e:4a:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
        Validity
            Not Before: Jul 27 02:01:00 2026 GMT
            Not After : Jul 28 02:01:00 2026 GMT
        Subject: CN=05c0ee4a6606ca96af14e12a55ab1eb1ec0ea2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:0d:7e:f3:5c:a0:dd:12:f7:a5:a3:58:d4:
                    dd:57:fb:67:70:42:92:85:4c:bc:eb:10:1c:0f:ae:
                    35:20:bb:2b:38:be:0e:28:d4:18:22:86:de:cd:0c:
                    fd:10:bf:4a:33:5d:eb:7d:87:4e:80:24:3f:8c:ed:
                    bd:e2:e9:25:7a:96:a2:3f:b6:b4:fe:77:ed:96:9b:
                    b6:92:6a:75:46:3f:e0:b7:5d:5c:b6:9b:57:f1:6b:
                    27:b7:72:e1:47:4f:16:41:68:db:65:de:76:32:20:
                    f8:3a:c6:6d:0e:0f:10:0a:cd:4a:23:cd:d7:02:26:
                    e4:31:42:0c:64:9c:3f:84:06:b7:cd:6c:80:ab:c0:
                    d4:19:6c:0b:ba:a1:ae:92:26:42:ef:cf:a8:e9:72:
                    e6:11:5e:9c:93:bc:4d:89:60:4d:7c:45:df:33:67:
                    90:49:9e:5a:9e:0e:56:28:45:52:ab:4c:8a:66:df:
                    e5:44:dc:af:1b:b6:69:4f:22:e0:21:c7:12:27:a8:
                    5d:55:9e:7c:83:d2:68:62:8c:9c:b3:bd:35:c7:6e:
                    56:06:28:28:11:25:23:aa:86:a1:7b:46:9a:94:9b:
                    80:66:60:f4:cb:3b:0d:9c:01:8a:56:08:06:c8:40:
                    44:a8:e6:21:ea:f3:fa:01:d3:c0:f3:d5:d0:6d:28:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:EE:4A:66:06:CA:96:AF:14:E1:2A:55:AB:1E:B1:EC:0E:A2:B0
            X509v3 Authority Key Identifier:
                keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:46:b7:c2:b3:33:b4:3f:a8:6f:a0:6d:6f:d5:25:1d:0b:
         89:06:25:17:5c:f0:9e:89:72:8c:eb:21:4f:14:19:06:ff:8d:
         08:5a:25:15:b3:81:41:1a:52:27:53:96:10:7e:90:e4:76:a9:
         ec:48:14:b1:7b:49:1e:fe:10:d4:ae:f6:39:8d:a3:6e:7a:42:
         b9:ad:53:14:7f:a8:c7:75:3b:d9:6f:f1:a5:5e:a5:a2:41:71:
         f5:5c:ce:db:68:1a:51:e9:e5:1e:43:fb:b7:e3:d0:82:9f:9b:
         bb:dc:c0:90:73:63:00:29:98:9e:8a:f8:2f:0a:83:76:27:44:
         9b:b1:ec:e4:3f:49:26:2d:17:10:1a:2b:ef:47:37:b8:97:ae:
         3c:ad:bd:ce:e3:31:35:92:90:95:fe:5e:2e:d1:f8:fa:fd:28:
         1a:87:8b:75:d4:45:9d:40:24:f3:b9:68:f5:c0:a5:72:d6:76:
         f5:76:5c:19:18:f4:84:c8:ca:30:76:61:6a:51:a4:09:4f:dd:
         55:98:c1:72:8e:98:9f:bb:ca:5a:2c:ae:14:81:07:c8:68:1b:
         fb:ec:17:da:d2:9d:94:27:47:d1:f2:97:5c:9b:9c:5b:2e:81:
         a3:d5:12:5c:d7:34:73:a8:25:41:cf:d7:b6:16:08:37:8f:92:
         6e:53:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:49 2026 by rpki-client