Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          9iSOC7XIYIAW1HF56UwxDvt914EIiqUNN1HzGj8AoPU=
Subject key identifier:   CE:B2:1D:66:63:8A:04:20:72:D7:37:8E:3D:F0:9C:94:A4:F1:9A:34
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       019D273B32786083F83FF354ABFDEDAECDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 23:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:24 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: YHTAh+eYtrOJ2MheURozNNwPFS6yhXoC8+18Bnlh2ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:32:78:60:83:f8:3f:f3:54:ab:fd:ed:ae:cd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Mar 25 23:01:24 2026 GMT
            Not After : Mar 26 23:01:24 2026 GMT
        Subject: CN=ceb21d66638a042072d7378e3df09c94a4f19a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:95:14:de:37:84:f6:fd:bc:e5:be:a6:65:
                    ca:2b:9a:0b:ca:8a:7f:3c:a4:74:6f:56:e2:2a:6d:
                    75:da:b2:6d:aa:1f:8c:3e:e8:b7:4d:ed:7c:63:d2:
                    45:7d:8a:c7:7e:47:e8:f9:39:7b:5d:4a:27:dc:54:
                    14:ff:8e:ae:7d:f8:eb:e5:c1:dc:89:b6:01:c9:b1:
                    e1:b3:5d:97:10:2d:f7:f2:53:2d:12:1b:a9:03:a0:
                    49:3c:23:7c:47:ee:d6:33:1c:76:1f:eb:96:96:2a:
                    b4:41:fd:45:79:3c:34:a6:e1:c2:b4:95:5e:1a:22:
                    e4:d9:92:fb:ba:0b:c2:bf:60:93:66:c5:f1:da:86:
                    5c:f0:aa:d4:a9:3b:74:db:a6:84:d9:08:24:52:75:
                    c9:d3:f4:00:ae:d6:f5:b2:01:cd:bc:f9:b9:5d:6d:
                    72:dc:35:5e:17:9f:b3:b0:05:ce:1f:2a:9e:89:07:
                    4b:a7:c6:1e:93:42:03:b7:ea:b2:e6:bb:3e:f2:cb:
                    32:49:04:76:d2:89:9e:2e:5b:a3:a2:d7:7f:9d:61:
                    f4:7e:53:62:cb:5b:53:7c:f9:be:98:f6:82:4c:05:
                    14:bb:5d:74:2a:ef:d2:30:f8:39:4a:7e:f5:f8:5c:
                    44:96:2c:ef:19:e6:b8:21:64:8f:81:1d:c0:87:a8:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:1D:66:63:8A:04:20:72:D7:37:8E:3D:F0:9C:94:A4:F1:9A:34
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:39:8e:49:2e:8c:4b:87:fe:9e:9f:33:11:e6:c9:a3:5e:30:
         24:43:df:24:83:f4:e4:14:1f:ed:b3:99:b0:05:10:87:c8:31:
         bb:11:04:1d:1b:68:1a:e2:e1:d3:59:5e:10:38:e4:f1:ca:7e:
         dc:b9:3d:8b:93:0a:d0:31:63:c5:89:21:a2:9c:d3:c7:55:37:
         c6:b8:5d:ac:ff:a4:21:46:0b:2a:af:60:95:f3:82:8a:41:bc:
         51:dd:64:d4:e5:b6:33:b5:71:4d:65:62:ad:eb:43:12:77:86:
         2e:eb:4d:c2:3b:c2:73:ea:c0:f0:ea:1c:b2:41:0f:b0:1c:39:
         84:3e:91:97:95:47:e2:50:c1:18:09:61:9b:5f:76:e5:c5:a2:
         89:20:fe:c1:57:6d:00:b6:6f:fc:f0:57:a8:b0:f3:1b:4e:62:
         bd:91:5e:71:4e:a6:9b:e3:b5:4f:3a:6e:b6:3e:41:5d:a5:4f:
         cd:38:c8:63:30:e7:55:f0:c9:c2:06:be:2b:ee:0b:88:f9:d4:
         2a:e6:8b:97:fc:c2:98:78:60:8b:82:4c:f6:c1:41:52:38:05:
         75:a1:02:c6:c1:58:42:cf:c4:64:17:81:ab:23:07:e3:09:31:
         c3:0c:2e:b1:ef:96:29:9d:7d:10:00:f2:b0:c0:06:c7:6f:d3:
         c1:48:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:30 2026 by rpki-client