Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          DYE2dpwwtBtcsa1xOLXsQv+ybGnJQXTTUiFx51Rys8U=
Subject key identifier:   C1:50:54:CB:24:B6:3E:46:A0:F3:C7:D3:0E:2B:03:EE:8B:CE:3F:15
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       01A0DB71F8527CA496194131F880A15ADFA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          1A03
Signing time:             Sat 26 Sep 2026 02:01:14 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:14 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:14 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: epnZZR0fwbIWHCrQqbcm3k0gvqpEwiUJihXn1EcAOTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:f8:52:7c:a4:96:19:41:31:f8:80:a1:5a:df:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Sep 26 02:01:14 2026 GMT
            Not After : Sep 27 02:01:14 2026 GMT
        Subject: CN=c15054cb24b63e46a0f3c7d30e2b03ee8bce3f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:96:dd:cb:3f:0f:da:fd:8a:61:32:ee:01:
                    1a:94:c7:d3:a0:32:1a:6f:11:f9:27:f3:d6:46:f2:
                    8a:ea:52:fd:92:8b:b8:c6:9d:f8:f1:1c:d0:89:32:
                    a8:26:8f:18:2c:fa:c3:c0:e9:1b:2b:70:e8:1b:f1:
                    f5:eb:22:c6:d3:ab:1e:4f:11:07:70:e5:5c:78:cc:
                    de:96:cb:26:c4:11:8b:ec:22:39:5b:a3:7d:36:5f:
                    f9:88:af:c1:34:1a:7a:16:4b:45:65:ad:94:f7:fd:
                    f3:c2:bf:5e:d6:f3:3d:47:ac:1c:a6:98:6b:4e:18:
                    84:f1:5d:a6:d9:f4:f4:4f:d7:cc:40:df:d6:ee:99:
                    a8:ee:4b:67:4a:08:ac:36:d4:14:b4:7b:a6:8d:f8:
                    a0:8a:f6:9b:be:52:f2:58:ce:a3:89:fb:3c:99:45:
                    93:bd:fa:0b:99:e3:16:4b:45:15:46:df:69:c2:b1:
                    78:35:3d:49:8e:6e:f9:84:2e:fd:ef:48:f7:80:34:
                    b5:09:a9:a6:e1:3d:e6:83:23:f5:59:92:7e:b8:c2:
                    81:8d:91:7a:25:8a:59:1a:44:1f:f9:19:dc:a2:a2:
                    f6:7c:bc:73:3f:0c:5a:09:b2:00:f0:7d:88:be:f1:
                    67:b7:f3:b7:ee:84:52:5a:df:15:9d:a6:70:5b:09:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:54:CB:24:B6:3E:46:A0:F3:C7:D3:0E:2B:03:EE:8B:CE:3F:15
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:b3:7a:ba:2d:51:94:f5:9c:46:25:9a:ed:5d:f0:d1:f2:
         8e:30:3d:d1:36:1f:3c:f1:19:1b:cc:19:e1:e1:68:4e:e7:87:
         b6:d7:1d:f0:30:97:f5:b1:68:dd:3b:04:c5:15:77:df:de:93:
         9f:b3:1f:c0:64:7b:7e:b0:b9:e3:67:a0:f7:dc:bf:dc:13:d7:
         af:2a:9c:27:c7:12:4b:a7:6c:32:a5:64:72:7c:3b:d2:fb:3c:
         77:81:15:d3:82:35:d6:f4:20:55:b1:8f:11:81:fb:ff:f5:38:
         aa:cd:43:5b:26:c2:9c:b8:6f:26:97:31:df:a4:82:e6:a5:87:
         da:c6:07:0b:7b:26:d2:fb:01:62:08:9c:97:fa:d7:3f:43:fd:
         48:82:30:e7:69:db:54:f9:cd:10:cc:05:42:bf:29:5d:ee:1e:
         2e:1e:4e:a5:28:57:44:44:92:ec:c1:b8:8e:c6:b4:e4:b2:1d:
         32:52:45:ae:61:cd:ee:00:e5:5c:68:c3:f0:8c:27:72:da:ae:
         94:73:c6:d8:4b:dd:7d:2d:74:33:b9:33:24:22:6c:4d:99:f8:
         4b:a7:1d:a3:2b:ab:08:c1:17:06:40:3c:89:63:6d:43:94:5d:
         a8:61:2b:6b:d7:c6:90:62:20:9e:11:0f:41:31:ad:81:b8:62:
         f2:38:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:46 2026 by rpki-client