Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          4XXwfmhXFF4t323e/ILZm+G6k9O0GLZtWluRwviP0ZA=
Subject key identifier:   C0:A5:7F:A7:F1:C9:FF:16:1C:E2:F4:3B:58:0F:59:90:E3:9D:5A:0A
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       019FA0A85785BB1673EDAA3C5C813210671D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          1960
Signing time:             Sun 26 Jul 2026 23:00:14 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:14 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:14 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: MhFUqvckPU35ZvhMViqun0JAZid5uxE1x9Aky4ysZZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:57:85:bb:16:73:ed:aa:3c:5c:81:32:10:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jul 26 23:00:14 2026 GMT
            Not After : Jul 27 23:00:14 2026 GMT
        Subject: CN=c0a57fa7f1c9ff161ce2f43b580f5990e39d5a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:91:1b:22:68:c6:1a:6d:86:c7:99:5e:4d:
                    9e:4d:2a:72:3a:f5:28:e6:69:35:b1:a0:2c:5a:8c:
                    a7:6f:dd:76:8c:fa:93:20:97:05:29:d5:81:b9:26:
                    fe:0f:e8:e8:15:45:b4:10:15:ce:ae:e5:bf:2f:a3:
                    62:8d:98:96:8b:b6:eb:32:8b:2b:91:df:f9:1c:81:
                    34:f0:86:ac:ad:c3:4d:dd:b9:69:f6:2b:2e:83:8d:
                    b3:02:7c:4f:3e:83:83:ad:a1:49:6e:de:7a:86:a6:
                    b6:98:3f:71:81:05:61:b4:b5:ff:f1:15:f4:6d:fe:
                    46:32:02:9c:b3:92:8c:2b:70:da:71:c9:24:03:40:
                    47:21:7e:cf:86:9e:8e:8e:70:05:e4:62:50:b2:70:
                    7d:cf:36:4e:be:44:f4:f7:01:61:cc:cb:d7:92:6f:
                    e4:f7:4f:75:e5:dd:b6:1a:ad:c9:d0:14:9c:10:d5:
                    b2:63:50:45:5e:a2:ff:45:40:e2:19:b6:88:40:da:
                    0f:6e:be:2b:a6:23:2a:cb:33:f1:f3:dd:aa:00:d8:
                    ca:75:fd:64:40:2e:51:73:52:71:0c:04:b2:ad:30:
                    52:17:b6:7f:45:d5:2a:ce:74:34:c8:68:d0:26:c3:
                    43:f6:e6:6c:c5:7f:b8:c2:0f:9b:5b:dd:da:69:8b:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:7F:A7:F1:C9:FF:16:1C:E2:F4:3B:58:0F:59:90:E3:9D:5A:0A
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:81:b1:d9:9a:3c:29:15:15:3f:59:d5:70:5d:b9:63:65:
         ac:cc:6e:b6:ae:21:de:18:74:51:fa:b9:df:95:51:5b:21:40:
         70:d8:b5:8a:79:23:71:6e:5d:03:bc:83:a9:44:66:38:3c:6d:
         d3:89:33:05:af:91:7c:d8:d1:5c:22:64:0a:96:6f:66:1c:26:
         26:88:9a:59:5a:6a:4f:7e:07:84:d0:21:38:0d:bc:43:72:71:
         84:18:a0:42:04:2d:bc:23:72:50:7c:3b:3e:85:82:06:5e:cc:
         f3:74:ac:4d:05:fd:5c:11:48:bd:58:6c:09:cc:e4:f6:86:6f:
         8e:96:b8:1e:77:2b:e7:07:8e:8c:dc:aa:67:bd:64:62:8e:49:
         ac:c8:f6:48:28:6d:55:1e:4e:17:d2:dd:2f:d5:47:5f:6b:52:
         81:0c:42:78:0b:ee:95:06:ff:03:03:a6:01:4e:ca:c7:fc:12:
         3f:14:a8:00:50:f9:7b:4f:93:86:ed:04:9e:09:f7:97:bb:37:
         51:0c:c2:6e:84:b2:77:c5:0f:c8:5d:a4:6a:60:52:7e:3a:a1:
         27:11:c9:30:13:d2:c7:96:05:8b:3a:ad:53:d7:e1:b9:7b:2a:
         c5:8e:5b:2b:c5:38:65:ab:21:08:7e:d1:61:30:8d:53:40:c1:
         2a:ec:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:16 2026 by rpki-client