Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File:                     LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier:          wCzDhjxVUDVD7XPkPcmpBuxtLla69z5k6wfxTX+OaQc=
Subject key identifier:   4D:AB:A6:B5:5E:08:16:58:A8:48:BE:9D:95:BA:8F:80:04:95:64:7A
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer:       /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial:       019EB7A08EB7D4E47C3B568759D55127E961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number:          99
Signing time:             Thu 11 Jun 2026 17:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:13 +0000
Files and hashes:         1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
                          2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: HQCl3USIMEzRlGVbaWN1VTfPmkHCnZ4JbJ5kB0gQNL8=)
                          3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:8e:b7:d4:e4:7c:3b:56:87:59:d5:51:27:e9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
        Validity
            Not Before: Jun 11 17:00:13 2026 GMT
            Not After : Jun 12 17:00:13 2026 GMT
        Subject: CN=4daba6b55e081658a848be9d95ba8f800495647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:e9:96:c3:23:13:88:e0:6f:6b:dc:e3:8f:
                    a1:52:a4:86:04:83:77:25:1f:78:17:b3:c8:74:31:
                    f9:80:e5:02:72:e7:0f:33:03:f3:7d:26:35:30:e1:
                    12:62:cc:a8:fe:be:51:a4:b7:14:d1:1d:bc:0f:ca:
                    56:a0:26:cd:c9:99:06:77:9e:61:a1:39:96:ab:0b:
                    5f:e3:8d:0b:c8:bb:fe:61:b5:f6:d1:b5:8c:77:5c:
                    a1:79:11:d3:d1:cc:77:b1:ce:4b:bc:62:a4:f9:b3:
                    31:e1:b2:92:05:8f:8a:76:d1:87:e1:40:e5:9b:29:
                    a5:c6:23:87:38:6c:53:fb:c3:3b:66:26:ae:b7:19:
                    20:25:c2:e8:cc:82:a9:7c:50:cd:05:12:b0:1f:a2:
                    f3:3d:3b:62:c6:d5:e9:88:7f:fb:6d:41:4f:a8:23:
                    60:63:77:29:58:eb:1a:e5:49:5b:38:a8:2e:21:7e:
                    9c:0d:72:41:a9:08:b5:a9:45:13:c0:e6:e4:f3:82:
                    a2:2c:28:2c:10:6a:8d:9a:9a:90:9d:c2:4e:94:2a:
                    ca:fa:16:68:48:cb:b8:10:b2:5f:27:72:42:44:2f:
                    a1:cb:79:65:ed:a3:94:b7:96:35:67:9f:b9:ac:dc:
                    58:06:d3:b0:5a:2a:fe:9c:7f:b7:a8:40:59:d7:59:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AB:A6:B5:5E:08:16:58:A8:48:BE:9D:95:BA:8F:80:04:95:64:7A
            X509v3 Authority Key Identifier:
                keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:de:59:87:0a:6b:18:e7:69:cd:c8:64:7a:34:ca:f1:2a:
         3e:bf:08:88:40:bd:ab:59:bc:42:50:71:2b:63:7d:a3:f2:ee:
         4f:40:18:b4:ff:e0:f1:68:6e:91:df:ae:63:05:66:fe:2b:ab:
         8c:27:12:dc:16:48:04:e4:17:50:c3:1b:49:81:4f:15:58:df:
         36:63:5f:15:06:68:2f:78:ca:ca:0b:f9:f0:6f:ff:46:3c:49:
         dd:2d:4a:54:84:7c:ce:0d:16:6f:18:4e:cf:12:88:bb:46:c4:
         b7:9d:91:c4:73:78:9c:02:b8:85:dc:d1:6c:8a:3e:82:40:bf:
         6a:2a:c3:13:d7:71:eb:b2:d8:79:d8:d1:4c:12:a2:8e:0b:3b:
         af:aa:24:2a:6b:1c:c2:68:7b:1e:17:06:f0:70:1e:68:80:d6:
         5b:53:f2:3f:4a:c1:e1:c5:05:3b:96:cf:89:a8:43:94:27:70:
         75:6a:91:c8:1e:a4:ec:43:6b:d9:3b:2d:0d:97:7d:52:66:7d:
         67:90:31:61:30:45:73:59:e9:8c:61:18:c0:be:9e:66:79:5c:
         2f:c5:5c:69:a9:5a:6d:72:7a:46:ba:4c:bc:45:f8:bb:35:d3:
         30:de:3b:ec:65:8f:ac:be:a1:cc:2b:5a:68:0e:21:36:cd:c4:
         da:07:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:51 2026 by rpki-client