Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          Vg80Y+D/uU8lu0fF52pH1PPh9zshCYkjx2cBZAdF7lE=
Subject key identifier:   E3:ED:5E:CE:18:3E:15:61:C1:65:7D:5A:B6:70:13:32:38:A3:82:C0
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       019D27E08057EBB92040CAACE693BEF812E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          154A
Signing time:             Thu 26 Mar 2026 02:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:57 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: fXxy2YqJEfqjSWzzMR2Vzd0BkrFyoJnl/h2nIFMVaDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:80:57:eb:b9:20:40:ca:ac:e6:93:be:f8:12:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Mar 26 02:01:57 2026 GMT
            Not After : Mar 27 02:01:57 2026 GMT
        Subject: CN=e3ed5ece183e1561c1657d5ab670133238a382c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:35:f1:80:49:e2:85:9c:88:4e:7a:1b:83:
                    8c:53:83:c2:ee:59:0c:6b:f2:85:c4:9d:be:70:e9:
                    f3:b5:cf:ce:3c:9a:c5:d9:46:89:d2:cb:a5:46:7e:
                    21:98:25:b9:4a:28:d3:0d:d3:df:cc:9d:34:de:88:
                    91:7a:69:0e:27:db:3e:bf:ba:1f:8e:84:66:f9:bf:
                    90:a8:58:ca:26:46:56:97:78:22:c9:9a:ba:bf:46:
                    63:a7:45:a2:1b:24:92:a8:ad:66:f3:b4:dd:09:93:
                    08:e0:5b:ba:c4:82:b3:c9:7e:ff:15:3f:05:17:b5:
                    9f:a4:6a:4d:59:32:d6:ca:6e:69:0d:56:cd:f7:96:
                    c5:30:7b:8d:d8:bd:d0:96:06:cd:41:14:78:00:17:
                    af:35:fe:eb:50:79:06:4d:88:8c:6e:01:9b:af:a3:
                    bb:e1:c2:c4:c1:99:da:0e:69:04:16:2e:1e:1c:79:
                    f7:1c:a3:a5:3a:84:e0:08:21:c3:28:fb:39:51:30:
                    bc:67:c5:83:41:9e:e5:0b:cc:65:00:89:05:21:77:
                    89:bd:a4:fc:1a:e6:a7:50:07:05:b1:f5:67:6a:a6:
                    5c:72:b6:93:a7:13:d9:c5:4f:6d:3e:f1:33:3b:c0:
                    24:6f:36:b2:ea:2b:5a:c4:14:c9:e3:c1:a1:d6:fb:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:5E:CE:18:3E:15:61:C1:65:7D:5A:B6:70:13:32:38:A3:82:C0
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:52:7b:de:70:66:d9:df:8a:18:da:1e:a2:67:61:e7:57:
         a0:75:cb:a2:51:f5:d8:b0:55:1e:d2:da:fb:c2:fc:49:9b:3e:
         73:bd:c2:53:20:6f:85:66:6c:25:44:0a:e5:25:91:0f:db:96:
         d8:5e:dd:74:3b:d9:45:ed:eb:7d:f7:4b:1b:4b:87:c4:ba:60:
         2f:7c:c0:81:c9:4c:76:37:a3:bb:d1:bd:22:b2:dc:04:20:98:
         3f:56:01:ad:01:96:da:f3:15:5a:04:73:c3:21:32:d5:e6:b2:
         0c:0d:73:94:ee:fb:d6:41:d9:c3:46:7b:8f:61:f2:46:de:3c:
         a9:88:70:2e:30:3b:20:62:34:c3:26:35:4c:ca:ef:22:77:56:
         fe:3f:62:2a:f5:87:81:fd:2d:62:01:c5:4c:ff:6c:10:1b:26:
         62:ae:59:36:72:5f:cc:d1:4a:63:3e:cd:d4:4f:50:22:7f:ff:
         37:b5:2d:e4:a8:30:74:c4:7b:c8:47:37:33:4d:e0:95:b2:79:
         c7:12:66:dd:46:1f:bf:e3:06:d3:58:2f:30:e0:1c:fe:08:55:
         1d:d4:51:a8:cc:84:24:ea:62:fe:3f:9c:b4:5f:ad:bb:34:e6:
         8e:f3:65:cc:ad:cd:4d:64:43:7a:ee:76:b5:60:0a:73:fc:0b:
         8e:1b:71:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:17 2026 by rpki-client