Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          s9mOCkNjA9uMT+rC8q+gd/NGmYjDC72pWA2Aeqb6lOU=
Subject key identifier:   6F:9F:61:65:DB:41:FE:1D:6D:B2:07:84:4A:08:F3:CE:50:73:F5:9C
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       019E1D230AF60F1F5AAB6CDD72B43E619242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          15C9
Signing time:             Tue 12 May 2026 17:01:36 +0000
Manifest this update:     Tue 12 May 2026 17:01:36 +0000
Manifest next update:     Wed 13 May 2026 17:01:36 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: kPrv0IXKa+aSKeP1ambVD4sfTBffLPj15hiERfDivSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:0a:f6:0f:1f:5a:ab:6c:dd:72:b4:3e:61:92:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: May 12 17:01:36 2026 GMT
            Not After : May 13 17:01:36 2026 GMT
        Subject: CN=6f9f6165db41fe1d6db207844a08f3ce5073f59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:1e:09:0e:dd:c0:0f:81:96:bb:9e:fa:1e:
                    ff:54:3f:8e:67:7d:74:ac:05:8e:79:2f:57:98:db:
                    47:cd:a5:e7:a0:c4:23:47:d8:d8:1e:1f:2c:db:dd:
                    82:03:7e:cd:0f:0c:61:cb:99:f4:4c:01:ea:8d:4a:
                    f0:5d:28:90:9a:8f:03:f2:0d:38:30:06:a1:38:be:
                    ab:e6:05:e5:2e:ab:50:eb:96:b6:5f:20:8f:b2:66:
                    d9:a2:74:91:d3:51:6a:52:a3:55:80:57:42:01:09:
                    d6:cb:b6:41:5a:80:98:aa:b2:45:61:a6:f7:bc:05:
                    4a:83:70:14:33:ce:db:9d:e8:1b:37:7b:16:59:2f:
                    df:1f:ee:68:1f:a0:86:4e:57:b9:94:24:52:b4:a9:
                    09:1c:d3:f4:ac:8b:f7:2c:2e:1d:6b:a8:82:3e:54:
                    de:f9:0b:6b:e5:ed:bf:15:69:69:6d:46:3f:b9:2b:
                    68:28:4b:b5:d6:02:7b:63:6c:ba:98:44:54:8b:9a:
                    6a:00:6c:24:56:6f:4a:54:b4:39:89:ae:b2:6e:d4:
                    fb:df:4e:c6:6e:74:73:4f:f7:52:5d:9c:85:93:da:
                    44:bf:11:f9:25:2c:71:73:af:04:bc:bc:ae:77:90:
                    a9:7b:c4:fe:8a:0f:40:31:b7:a8:c0:8d:39:1f:9c:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:61:65:DB:41:FE:1D:6D:B2:07:84:4A:08:F3:CE:50:73:F5:9C
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:64:4b:55:b5:00:0b:14:13:59:8c:ca:a4:c4:82:98:b0:ab:
         ae:fe:7b:7b:76:10:a9:9e:93:96:cf:e0:dd:c4:d2:12:a2:70:
         da:27:90:5f:f7:2f:b2:42:2b:ef:a9:91:5e:68:4c:1a:5e:f1:
         1b:7d:c3:93:56:fa:64:fb:c7:7a:eb:d8:64:d5:5c:b8:43:88:
         c4:b2:a0:93:8e:31:8c:0b:77:b5:9b:41:5b:74:31:0c:bb:08:
         45:f1:d0:d5:b9:aa:8e:58:f6:b3:3f:76:74:26:06:1c:f3:8a:
         d5:97:44:d9:c7:fd:f0:02:16:ac:60:da:43:11:37:e4:7d:dc:
         42:2a:f3:27:54:83:e4:32:6e:4b:c3:22:9b:5c:f9:34:4e:87:
         8b:f2:27:81:b9:fd:61:53:b5:03:03:1b:57:2f:b4:06:5f:95:
         b0:f7:00:4d:36:3c:2e:2a:7f:0a:53:80:fd:7b:96:6d:4f:e2:
         9f:92:bc:7d:95:ae:bd:44:4b:d7:a1:64:ef:ab:19:6a:a5:5c:
         8d:bd:bd:dc:30:a1:93:09:cb:83:8c:db:f3:3f:f6:08:64:d9:
         81:3c:92:f0:d9:34:f9:b5:07:e3:4a:90:4c:86:45:ca:d2:ce:
         f4:c2:d5:ba:ac:bb:a8:96:87:4b:3b:c0:21:32:9a:a8:88:b0:
         7b:0b:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:24 2026 by rpki-client