Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File:                     li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier:          +GEa8wiiUhZQdmdH8Ug4+3B4OfwOjOCCtQ6gamgfrFA=
Subject key identifier:   C7:2F:F6:00:F1:C5:A4:D8:D6:59:EB:5C:0B:6E:41:E3:36:2D:69:BB
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer:       /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial:       019E1FEC579877293D041FFD051E7D0677BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 06:00:43 +0000
Manifest this update:     Wed 13 May 2026 06:00:43 +0000
Manifest next update:     Thu 14 May 2026 06:00:43 +0000
Files and hashes:         1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: YyAnkWVfWP3ARIisFcnvCVo1+eeWYA8hE9e2l2tUPWg=)
                          2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:57:98:77:29:3d:04:1f:fd:05:1e:7d:06:77:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
        Validity
            Not Before: May 13 06:00:43 2026 GMT
            Not After : May 14 06:00:43 2026 GMT
        Subject: CN=c72ff600f1c5a4d8d659eb5c0b6e41e3362d69bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:16:30:75:73:1d:c4:1a:b8:36:e5:1d:06:
                    83:b9:72:58:c7:d6:05:9a:c2:52:8c:5f:51:0d:39:
                    f5:7c:1c:b3:40:f6:39:e0:d8:39:23:88:b0:2e:ce:
                    ef:3b:80:2b:a5:01:7a:22:52:fa:5d:25:1d:24:a3:
                    57:23:8a:1b:37:aa:d7:bc:5a:ad:47:16:e2:12:74:
                    ec:c8:1a:3b:85:d8:df:ce:05:17:3e:ff:8e:57:13:
                    0c:13:86:1c:33:5f:62:2d:42:44:d5:bb:15:88:4b:
                    ba:04:05:83:ee:7a:0d:41:e9:cc:8e:e3:a6:da:73:
                    d6:08:37:08:b5:a6:51:a0:59:45:a4:be:c3:c7:32:
                    d5:ca:45:e1:2c:c3:e3:19:2b:1b:cc:67:41:08:b0:
                    b3:6d:f9:8c:ea:9d:19:89:ac:a1:ce:55:d7:49:c9:
                    f6:67:52:b3:26:83:e6:67:15:30:ea:8a:9d:78:af:
                    cc:38:22:6b:6c:f6:52:2f:0b:45:79:ef:b8:7f:fd:
                    7f:6c:63:4f:79:e6:8a:c6:e1:98:29:a3:4d:3e:74:
                    f1:5a:2d:68:b7:67:d2:f3:fc:47:b1:52:70:df:14:
                    cc:26:d0:a9:00:43:a3:50:7d:09:a4:fd:56:9d:3b:
                    37:4d:b2:70:b6:07:3e:6c:d2:96:e7:60:2c:65:9c:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:F6:00:F1:C5:A4:D8:D6:59:EB:5C:0B:6E:41:E3:36:2D:69:BB
            X509v3 Authority Key Identifier:
                keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:86:6b:da:1f:75:f3:5f:3e:78:58:33:da:dd:99:34:77:
         96:af:68:8e:ce:cb:5a:c3:64:8b:11:8c:fc:13:b3:03:3d:0e:
         9d:e2:b4:fc:4b:50:31:ab:90:31:dd:7a:8f:9c:9b:63:90:f2:
         c9:53:0c:99:6b:01:da:bf:20:80:60:f2:84:31:48:a3:e9:6c:
         92:38:6e:09:db:ee:6d:d7:08:e2:f7:db:fc:72:f2:13:09:c4:
         1b:ad:40:d5:46:97:e6:fb:12:aa:67:5b:ff:5b:08:c0:ab:c3:
         86:c2:55:4e:08:c0:06:8c:e7:35:d2:f3:a4:1d:7b:db:70:8c:
         41:20:b9:a6:28:63:ae:fb:fe:0e:a2:8f:aa:76:b4:41:a5:54:
         33:eb:97:ab:28:3b:cc:41:5c:f4:6b:7e:85:21:b4:a7:63:bb:
         7a:8c:df:1a:f6:a1:05:e8:6b:b3:77:cd:c1:9e:02:ba:fd:fd:
         63:0c:67:a6:7a:8b:54:f6:ae:1a:4c:77:52:12:7b:7d:8e:e0:
         a3:50:b7:cf:d7:21:b0:2d:0e:d5:36:0c:16:0b:cb:7d:07:20:
         fd:c8:6f:13:bd:7d:65:ad:59:2f:a1:70:e0:5a:93:a1:20:40:
         82:a9:bd:e0:5d:da:fe:5c:a3:63:a7:cb:01:0c:89:fd:7f:a0:
         7b:b7:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:00 2026 by rpki-client