Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File:                     Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier:          c8/Azz+zbTGRXHMrUWWPKrWDo8EujhDwM0wU0kjK2dc=
Subject key identifier:   34:01:95:A0:0B:14:1C:16:4E:91:5B:54:CA:70:73:B4:2C:D8:EB:2F
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer:       /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial:       01A0028227328670574307011FF610C445A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number:          0452
Signing time:             Fri 14 Aug 2026 23:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:19 +0000
Files and hashes:         1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: KF1VL9x4n98B5cEBe8lKdxTRHro3d8Uoo9asCvu3/t0=)
                          2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:27:32:86:70:57:43:07:01:1f:f6:10:c4:45:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
        Validity
            Not Before: Aug 14 23:01:19 2026 GMT
            Not After : Aug 15 23:01:19 2026 GMT
        Subject: CN=340195a00b141c164e915b54ca7073b42cd8eb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:00:c9:7e:b1:ae:81:d9:13:6e:f3:3d:8a:
                    d1:9a:1d:15:9d:32:fc:81:f0:8a:6e:e9:21:06:3b:
                    2d:ce:7c:b0:0d:72:67:ea:4f:be:a2:80:d2:db:50:
                    66:12:39:4c:61:67:8d:ce:be:80:b1:79:de:9c:b5:
                    ab:56:8d:c8:a6:18:11:76:c3:8b:64:03:b7:77:01:
                    ba:d1:8b:c1:99:f5:c8:a1:11:da:ce:c3:1c:7f:c6:
                    a8:ff:88:aa:15:10:49:c6:d4:c2:46:fe:97:16:85:
                    eb:87:ad:3f:13:1e:51:15:fc:bb:ce:ca:0a:cd:93:
                    12:1f:83:a2:ce:7e:ab:06:a1:5c:46:45:d4:5b:db:
                    4d:49:8e:82:fa:c1:22:73:5c:ed:76:50:41:32:36:
                    4c:28:5c:60:45:4e:d1:92:bd:a1:6c:d4:89:87:50:
                    57:9f:98:6e:5d:13:a7:3d:38:80:f3:23:2d:c6:7f:
                    61:1d:9f:60:ef:b9:15:ff:d7:c9:da:ea:e9:7a:09:
                    42:38:54:88:d4:00:9e:3f:44:e4:82:8e:4e:eb:2c:
                    91:14:70:7f:4b:f6:53:31:18:9f:d0:02:16:a4:ea:
                    6c:3c:ea:1c:00:7b:25:01:8b:d9:00:c7:17:91:49:
                    a0:bf:f2:4d:49:03:78:af:c7:85:4f:c2:41:ae:14:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:01:95:A0:0B:14:1C:16:4E:91:5B:54:CA:70:73:B4:2C:D8:EB:2F
            X509v3 Authority Key Identifier:
                keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:56:7a:65:89:fe:74:c9:5e:d0:f4:bf:06:ff:c8:70:1d:
         ce:a4:4c:86:27:b3:6f:ab:cb:15:98:2e:6b:80:20:d9:b8:cc:
         da:8f:dd:2e:19:e4:a2:dd:72:56:28:e8:fa:40:a7:be:24:34:
         42:eb:37:b2:5f:17:6f:eb:ff:77:b0:c8:43:ca:65:d0:4e:2f:
         24:eb:b1:4a:1a:ea:29:25:7f:c3:86:83:12:e4:22:82:a3:2e:
         18:76:a2:c6:56:5d:a0:9b:37:c6:73:5c:d4:35:a4:40:2d:1c:
         3e:00:19:c7:a4:81:20:03:06:14:dc:50:22:88:15:ad:92:83:
         be:04:a5:21:ad:1f:fa:46:94:81:3b:5f:21:39:97:d0:91:e4:
         70:24:e9:fb:72:f2:e0:2f:9a:8f:6e:da:d7:c7:01:5c:ca:78:
         cb:79:5a:f5:a7:5a:e1:16:4b:0f:ca:22:dd:43:2f:c6:d9:ed:
         e1:89:c6:fe:98:02:00:24:04:cb:ee:1e:b9:bc:a2:78:04:3c:
         40:7b:f8:df:b7:86:5c:ce:39:21:63:51:6c:14:cc:2a:14:4d:
         ad:65:15:f2:b1:8c:22:fe:5b:58:55:10:a0:d4:9a:65:6e:04:
         a4:72:0e:12:16:30:d2:2e:f1:2a:e2:bc:da:9b:a4:17:c4:b9:
         fe:ad:08:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgicyhnBXQwcBH/YQxEWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5
ZTM4MDYwHhcNMjYwODE0MjMwMTE5WhcNMjYwODE1MjMwMTE5WjAzMTEwLwYDVQQD
EygzNDAxOTVhMDBiMTQxYzE2NGU5MTViNTRjYTcwNzNiNDJjZDhlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaMAyX6xroHZE27zPYrRmh0VnTL8
gfCKbukhBjstznywDXJn6k++ooDS21BmEjlMYWeNzr6AsXnenLWrVo3IphgRdsOL
ZAO3dwG60YvBmfXIoRHazsMcf8ao/4iqFRBJxtTCRv6XFoXrh60/Ex5RFfy7zsoK
zZMSH4Oizn6rBqFcRkXUW9tNSY6C+sEic1ztdlBBMjZMKFxgRU7Rkr2hbNSJh1BX
n5huXROnPTiA8yMtxn9hHZ9g77kV/9fJ2urpeglCOFSI1ACeP0Tkgo5O6yyRFHB/
S/ZTMRif0AIWpOpsPOocAHslAYvZAMcXkUmgv/JNSQN4r8eFT8JBrhSPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQBlaALFBwWTpFbVMpwc7Qs2OsvMB8GA1UdIwQY
MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt
ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5
LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQJWemWJ
/nTJXtD0vwb/yHAdzqRMhiezb6vLFZgua4Ag2bjM2o/dLhnkot1yVijo+kCnviQ0
Qus3sl8Xb+v/d7DIQ8pl0E4vJOuxShrqKSV/w4aDEuQigqMuGHaixlZdoJs3xnNc
1DWkQC0cPgAZx6SBIAMGFNxQIogVrZKDvgSlIa0f+kaUgTtfITmX0JHkcCTp+3Ly
4C+aj27a18cBXMp4y3la9ada4RZLD8oi3UMvxtnt4YnG/pgCACQEy+4eubyieAQ8
QHv437eGXM45IWNRbBTMKhRNrWUV8rGMIv5bWFUQoNSaZW4EpHIOEhYw0i7xKuK8
2pukF8S5/q0I7w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:40 2026 by rpki-client