Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          nP55dWj90sc6SrqmIDBKGD1R4+Rsd83O4sOyxlb6eHk=
Subject key identifier:   1F:E5:70:CB:47:F5:B2:D9:98:E1:4E:FE:00:64:01:27:9D:CF:F0:61
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       019F91DB1D4F9EA9C82D572CD764951AE545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          168A
Signing time:             Fri 24 Jul 2026 02:01:23 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:23 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:23 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: JPzofQ507gPAiXW+//IDdEzHdgFG5WK+QUgWhqUe4/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:1d:4f:9e:a9:c8:2d:57:2c:d7:64:95:1a:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Jul 24 02:01:23 2026 GMT
            Not After : Jul 25 02:01:23 2026 GMT
        Subject: CN=1fe570cb47f5b2d998e14efe006401279dcff061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:df:59:d2:46:83:0f:94:46:fd:42:da:37:
                    c1:8a:57:b0:13:6b:8c:0b:5e:e2:ac:06:80:f5:6a:
                    ba:b4:50:55:01:fc:83:34:57:f0:2a:bd:5a:8b:fb:
                    d8:6e:94:57:f4:4c:de:9e:9d:5d:81:9e:6f:92:9f:
                    d9:5e:f1:50:e6:03:6a:97:c7:94:33:2b:4b:89:ac:
                    ed:4f:b8:cf:ec:13:36:0d:77:f9:ea:6a:72:31:c3:
                    df:b5:73:c8:b2:c0:03:9f:c2:d1:c0:6a:e3:0b:e1:
                    7e:d7:4d:5a:fb:c5:15:c3:7c:44:82:dd:c0:57:4d:
                    b8:f0:7e:5e:89:f6:d8:ba:63:d3:66:c8:83:e7:58:
                    7f:1a:95:72:80:68:46:47:8e:85:6b:b4:d6:4e:5a:
                    5e:6f:5d:3f:75:ad:50:b9:4c:6e:63:58:30:fa:df:
                    1e:a6:20:52:fa:45:0b:08:bb:6b:d9:69:64:7a:9d:
                    1c:ca:79:0c:78:5a:5c:a9:c2:ab:fd:f4:e1:33:77:
                    e6:bb:f6:ff:28:0f:f9:9a:7d:3d:9b:24:ee:de:9f:
                    e9:21:23:d6:a2:b5:91:42:12:bf:af:13:c4:32:be:
                    6b:e7:c5:9a:71:80:b1:63:0a:a5:32:a7:60:1e:7d:
                    94:36:1f:7d:d9:93:e4:fd:2b:6f:eb:de:43:f3:af:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:70:CB:47:F5:B2:D9:98:E1:4E:FE:00:64:01:27:9D:CF:F0:61
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:19:31:c6:d1:2b:25:57:03:ab:57:92:f4:8e:b1:5b:c3:a2:
         cf:3d:79:f7:3a:99:bc:77:53:b9:fb:bf:91:f0:07:b9:5c:33:
         43:29:10:79:3f:33:c8:58:c3:b8:26:63:a1:eb:e2:e2:16:e4:
         6e:2a:b3:f3:c6:f3:e8:e9:ba:d3:85:fb:3f:11:2f:a8:ab:73:
         e4:5c:2b:95:3e:f7:76:03:d6:85:7f:74:5f:81:91:e7:c1:a9:
         aa:8a:ef:d5:ef:99:21:47:95:43:36:d1:dc:97:1f:46:b6:40:
         68:c7:26:b0:57:4c:81:e1:91:f6:12:eb:e7:6e:f5:f7:1e:66:
         59:a0:36:f5:44:5a:bc:30:ed:8f:cd:d6:ab:c5:c1:14:15:a9:
         b2:5c:4c:dc:eb:56:be:1e:0a:62:ab:2b:c1:5f:ad:73:db:d2:
         f3:7b:d8:3e:19:59:4e:79:f8:50:20:88:1c:a1:02:a8:fe:03:
         ab:17:d7:03:04:14:2d:27:8a:4a:95:04:95:ce:d3:c5:56:1f:
         86:f9:99:a0:7f:e5:a0:30:17:95:2c:0b:f2:60:3a:1e:34:3d:
         f2:18:f1:ce:56:0d:8c:f3:a8:47:87:e3:77:ad:ee:c6:7c:ae:
         4a:6d:f9:12:05:8a:ae:4d:64:f8:2c:01:31:b2:a5:6d:28:b1:
         05:aa:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:48 2026 by rpki-client