Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          RV6akRtlMIO9hS7SmaA4kUiw+LpcBi9vNJmvmZ/yx3o=
Subject key identifier:   40:E5:EF:EE:96:66:E4:70:64:AD:82:C4:9A:A7:AB:2B:4D:05:EA:71
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       019CE44801DFBC4604587C3DAF41051FB34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          1527
Signing time:             Thu 12 Mar 2026 23:00:49 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:49 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:49 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: u3CafHaAqhu2SwolHW1JcJKDEY6V12+Gtp7NBBINY70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:01:df:bc:46:04:58:7c:3d:af:41:05:1f:b3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Mar 12 23:00:49 2026 GMT
            Not After : Mar 13 23:00:49 2026 GMT
        Subject: CN=40e5efee9666e47064ad82c49aa7ab2b4d05ea71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:05:69:53:3b:51:a0:c8:2f:fc:cb:d1:20:
                    f4:30:aa:e3:67:0f:24:19:66:05:47:93:c7:3f:0a:
                    63:69:58:f5:7d:ba:13:3c:7a:2b:58:17:39:a7:d9:
                    9c:62:6e:fd:6b:bf:d3:8a:37:6a:84:6a:79:65:3c:
                    e1:31:09:10:d5:53:c8:41:c3:7e:d8:11:d3:da:ab:
                    86:c2:cb:19:a0:a8:d3:5a:80:7c:da:4e:3d:1c:df:
                    46:57:70:75:95:c0:23:e9:8f:1a:1a:ad:0f:a3:45:
                    62:e1:fd:08:bf:75:e3:da:f9:9a:2a:6f:40:e9:29:
                    e5:2f:68:5a:3a:8f:49:a9:ce:1c:a3:ae:6c:ad:17:
                    c9:39:d9:c3:c4:cf:a0:f6:77:b3:4a:dd:d4:84:3a:
                    c0:63:91:a7:55:4d:9e:46:4d:70:1d:bc:ed:e2:ef:
                    01:7e:37:e8:af:2c:4c:52:3e:a1:b5:45:39:f6:4f:
                    31:ac:d4:bf:19:c8:8a:fb:a8:d2:73:af:3d:e5:a5:
                    80:7d:29:7d:be:b8:26:92:8f:fc:4f:71:38:ec:b2:
                    09:e3:ac:a8:69:38:8c:67:0b:4a:f2:fb:9c:49:f7:
                    c3:c5:84:ba:2a:87:b8:62:a0:b5:4e:ae:a7:1c:dc:
                    b0:ae:39:43:79:c9:6a:7e:57:6e:66:4b:ee:82:e6:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:EF:EE:96:66:E4:70:64:AD:82:C4:9A:A7:AB:2B:4D:05:EA:71
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:2b:75:4d:9b:25:16:61:d7:1b:f0:2c:f6:8f:11:03:1d:
         bf:1e:d9:c9:ef:3a:d4:88:07:a0:f4:fc:b1:a2:83:ce:78:82:
         7d:7a:ad:78:77:1d:c6:45:eb:8a:b1:cb:25:81:fd:34:c9:8f:
         68:78:83:44:48:b7:a6:09:3a:8d:22:1d:a1:d1:36:24:31:26:
         8d:b2:2c:81:45:61:d4:a5:18:dd:42:ef:94:0f:88:dc:19:8d:
         cc:45:8f:b9:71:8e:a7:75:de:58:c9:f9:b3:b1:6e:8b:5f:50:
         88:e1:b5:bd:21:24:0f:a9:1b:05:fa:aa:33:bf:3e:ae:d5:3b:
         24:e7:b8:33:4f:d8:9e:8d:a7:c4:9e:cd:f7:3e:c2:68:ba:2b:
         47:46:6f:f5:eb:2d:99:16:96:2e:28:1c:d7:5d:8e:07:b8:5e:
         57:92:62:07:fc:ce:8e:3f:8f:30:5d:7f:84:23:6f:58:b1:cd:
         e5:3b:ef:99:a3:0d:69:22:f3:72:f3:53:c3:13:14:dc:81:45:
         7b:e5:15:e1:29:ad:69:4b:b7:54:67:46:52:0a:1b:b6:ed:b6:
         d8:7b:b4:9d:7f:4d:2c:6d:fc:d4:ab:d8:46:a3:05:43:15:86:
         cc:5f:71:ce:2f:72:b7:74:c0:84:38:34:2b:32:95:34:20:4c:
         38:52:7f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkSAHfvEYEWHw9r0EFH7NMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk
MzZiYTUwHhcNMjYwMzEyMjMwMDQ5WhcNMjYwMzEzMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg0MGU1ZWZlZTk2NjZlNDcwNjRhZDgyYzQ5YWE3YWIyYjRkMDVlYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsFaVM7UaDIL/zL0SD0MKrjZw8k
GWYFR5PHPwpjaVj1fboTPHorWBc5p9mcYm79a7/TijdqhGp5ZTzhMQkQ1VPIQcN+
2BHT2quGwssZoKjTWoB82k49HN9GV3B1lcAj6Y8aGq0Po0Vi4f0Iv3Xj2vmaKm9A
6SnlL2haOo9Jqc4co65srRfJOdnDxM+g9nezSt3UhDrAY5GnVU2eRk1wHbzt4u8B
fjforyxMUj6htUU59k8xrNS/GciK+6jSc6895aWAfSl9vrgmko/8T3E47LIJ46yo
aTiMZwtK8vucSffDxYS6Koe4YqC1Tq6nHNywrjlDeclqflduZkvuguZqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDl7+6WZuRwZK2CxJqnqytNBepxMB8GA1UdIwQY
MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt
N2UwMzQwZWM5NjY3LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3
LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1YrdU2b
JRZh1xvwLPaPEQMdvx7Zye861IgHoPT8saKDzniCfXqteHcdxkXrirHLJYH9NMmP
aHiDREi3pgk6jSIdodE2JDEmjbIsgUVh1KUY3ULvlA+I3BmNzEWPuXGOp3XeWMn5
s7Fui19QiOG1vSEkD6kbBfqqM78+rtU7JOe4M0/Yno2nxJ7N9z7CaLorR0Zv9est
mRaWLigc112OB7heV5JiB/zOjj+PMF1/hCNvWLHN5TvvmaMNaSLzcvNTwxMU3IFF
e+UV4SmtaUu3VGdGUgobtu222Hu0nX9NLG381KvYRqMFQxWGzF9xzi9yt3TAhDg0
KzKVNCBMOFJ/qg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:05:27 2026 by rpki-client