Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File:                     Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier:          sLshRZ4iCnZ0yFG5r5DJXRuQzv9MBFJIy0McUZOmmhk=
Subject key identifier:   95:E8:44:B8:8C:BB:01:6E:53:8A:BB:45:F9:08:22:66:3C:84:56:D2
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer:       /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial:       019DFB047DC6493EA7A4B38C7D66F9911B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number:          0345
Signing time:             Wed 06 May 2026 02:01:08 +0000
Manifest this update:     Wed 06 May 2026 02:01:08 +0000
Manifest next update:     Thu 07 May 2026 02:01:08 +0000
Files and hashes:         1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: gN4FMgtFcksTLBywlKlfAGzeqAeA3zrw+THNa3OMEjE=)
                          2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fb:04:7d:c6:49:3e:a7:a4:b3:8c:7d:66:f9:91:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
        Validity
            Not Before: May  6 02:01:08 2026 GMT
            Not After : May  7 02:01:08 2026 GMT
        Subject: CN=95e844b88cbb016e538abb45f90822663c8456d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:3d:40:ed:c0:b3:05:af:e8:8e:48:e1:f8:
                    f4:53:b4:c8:f5:de:c6:7d:e1:1e:ed:f4:c1:35:56:
                    91:d0:94:fc:7b:48:67:84:c3:44:08:5c:dd:b7:e1:
                    a9:96:3b:f1:df:84:cd:b2:14:b2:00:5e:a0:db:95:
                    69:5a:03:67:32:ca:66:3c:8b:96:9c:77:03:c0:90:
                    81:0b:a6:24:82:7a:7c:99:6d:0c:ea:3b:f1:5d:2b:
                    90:6e:92:c1:63:e6:9e:1f:92:56:c6:cc:ea:a5:19:
                    dc:59:bc:38:b0:7f:fb:9b:74:28:b7:2f:63:48:24:
                    85:c5:0a:fe:3b:e8:21:02:81:c8:8f:90:c7:29:1f:
                    ea:10:4e:70:7b:d4:84:ab:f9:f4:ac:2f:8e:06:4c:
                    b2:41:69:12:e4:af:d7:06:8d:0d:61:e3:89:51:8d:
                    3b:ae:88:4a:37:7b:df:6f:72:e7:2e:75:e0:ea:f7:
                    55:b0:57:d5:75:ad:b2:cb:27:e2:7f:4f:55:bf:ef:
                    0b:30:1f:40:d3:98:d1:c1:b5:88:ea:6f:1a:01:9b:
                    2d:30:2a:c7:23:30:4b:c1:df:d1:63:24:57:20:6d:
                    70:b1:85:99:fc:2b:ee:d2:88:c4:cd:23:d2:00:22:
                    42:bf:cf:5b:bd:fc:9d:28:4d:f9:84:9b:33:e9:e0:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:44:B8:8C:BB:01:6E:53:8A:BB:45:F9:08:22:66:3C:84:56:D2
            X509v3 Authority Key Identifier:
                keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:33:b1:c4:0a:ca:ec:74:b9:7d:ce:7e:62:38:a1:36:c0:
         7f:29:0d:22:9e:2e:ac:20:49:67:37:1e:60:dd:c1:4a:3b:11:
         6d:cc:02:4e:60:2a:20:8f:f3:15:2d:82:9f:76:5b:73:66:2e:
         ef:4d:8b:a6:78:9b:69:4b:33:39:be:73:00:d2:ad:ad:bf:6a:
         c4:c3:7f:5f:1e:72:e5:74:8b:39:2d:18:75:2f:23:f5:06:2e:
         1f:b0:bd:f5:83:f9:79:a3:66:78:86:09:41:af:96:1b:34:2d:
         e3:5c:2b:3e:1f:94:e5:9c:4d:a1:3c:b9:cb:a2:b0:76:e9:f3:
         a3:a2:16:b4:10:3b:39:4e:2a:28:a6:8e:d4:b5:5d:04:8c:d8:
         18:cf:41:17:9d:fa:2a:b7:46:7a:85:89:d9:bf:45:49:1e:54:
         98:ea:67:4e:df:65:d8:b5:4f:37:1c:10:f5:94:9d:4b:ee:82:
         fb:40:5e:40:6c:f0:a1:d5:55:40:ee:b6:b4:5c:39:63:78:44:
         5d:a4:42:99:59:da:d8:69:4b:64:be:02:dd:99:56:8b:9f:79:
         3a:d2:2f:53:51:a9:24:7b:52:3a:8f:61:8a:f8:6e:49:bb:e7:
         dc:2a:85:70:e6:71:0b:75:f0:5c:1f:8d:3b:17:4f:e2:f7:5f:
         ef:97:31:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ37BH3GST6npLOMfWb5kRtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5
ZTM4MDYwHhcNMjYwNTA2MDIwMTA4WhcNMjYwNTA3MDIwMTA4WjAzMTEwLwYDVQQD
Eyg5NWU4NDRiODhjYmIwMTZlNTM4YWJiNDVmOTA4MjI2NjNjODQ1NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyU9QO3AswWv6I5I4fj0U7TI9d7G
feEe7fTBNVaR0JT8e0hnhMNECFzdt+Gpljvx34TNshSyAF6g25VpWgNnMspmPIuW
nHcDwJCBC6Ykgnp8mW0M6jvxXSuQbpLBY+aeH5JWxszqpRncWbw4sH/7m3Qoty9j
SCSFxQr+O+ghAoHIj5DHKR/qEE5we9SEq/n0rC+OBkyyQWkS5K/XBo0NYeOJUY07
rohKN3vfb3LnLnXg6vdVsFfVda2yyyfif09Vv+8LMB9A05jRwbWI6m8aAZstMCrH
IzBLwd/RYyRXIG1wsYWZ/Cvu0ojEzSPSACJCv89bvfydKE35hJsz6eArJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXoRLiMuwFuU4q7RfkIImY8hFbSMB8GA1UdIwQY
MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt
ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5
LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7IzscQK
yux0uX3OfmI4oTbAfykNIp4urCBJZzceYN3BSjsRbcwCTmAqII/zFS2Cn3Zbc2Yu
702LpnibaUszOb5zANKtrb9qxMN/Xx5y5XSLOS0YdS8j9QYuH7C99YP5eaNmeIYJ
Qa+WGzQt41wrPh+U5ZxNoTy5y6Kwdunzo6IWtBA7OU4qKKaO1LVdBIzYGM9BF536
KrdGeoWJ2b9FSR5UmOpnTt9l2LVPNxwQ9ZSdS+6C+0BeQGzwodVVQO62tFw5Y3hE
XaRCmVna2GlLZL4C3ZlWi595OtIvU1GpJHtSOo9hivhuSbvn3CqFcOZxC3XwXB+N
OxdP4vdf75cxMA==
-----END CERTIFICATE-----
Generated at Wed May 6 06:28:29 2026 by rpki-client