Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          O4R3U4J9tVUnuzlSVF1af7Mcf7naqtVF4hlyOZ9iA0s=
Subject key identifier:   B9:6C:D0:5C:7D:4C:5E:6E:EF:3A:14:2E:2B:46:32:6B:7A:78:AB:04
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       01A08AFA10D4ED2D3A6175E280631744AB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          170B
Signing time:             Thu 10 Sep 2026 11:00:39 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:39 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:39 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: l1A+CZHCtLRKJYrfhB6Nfbx8LX1EV9V0UHoz2JdLEFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:10:d4:ed:2d:3a:61:75:e2:80:63:17:44:ab:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Sep 10 11:00:39 2026 GMT
            Not After : Sep 11 11:00:39 2026 GMT
        Subject: CN=b96cd05c7d4c5e6eef3a142e2b46326b7a78ab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:37:e0:01:94:95:3d:5c:a3:1f:6d:3a:69:
                    57:78:55:e8:5d:59:ac:cd:8b:91:9c:fc:28:82:e4:
                    9b:75:2a:d5:c1:0b:4d:44:53:c0:0d:18:72:88:af:
                    ae:f3:18:32:37:95:d8:c4:d3:db:11:aa:73:77:3e:
                    a6:bb:25:65:fc:bb:02:cd:70:6c:4c:57:d2:b2:9f:
                    e8:ac:fd:de:67:3e:0b:d0:32:d0:9d:66:d4:f4:50:
                    6d:ac:bd:6e:cf:72:42:c6:6a:b7:d6:c4:91:85:a5:
                    f7:3c:f3:31:55:be:69:cb:77:da:fb:02:52:0f:cf:
                    38:b7:5b:ea:2b:03:57:78:37:ea:48:54:61:2d:83:
                    5d:ac:cb:8f:e5:c0:5b:7b:8d:5f:17:d8:ff:c3:77:
                    1c:6d:47:84:40:7f:47:56:eb:2c:28:b8:54:4a:0e:
                    b6:14:72:0d:f5:3a:6a:57:c8:d8:94:ec:c2:93:3b:
                    f8:17:34:94:38:c2:0e:50:c9:2b:3c:29:af:b2:b4:
                    f4:5b:72:8f:09:de:a9:5c:7b:08:2a:14:23:96:16:
                    9b:01:ba:48:4c:63:3b:0d:b9:fc:6e:fb:53:95:cb:
                    90:cb:b5:50:b1:61:a3:65:cb:fe:e4:8e:53:4a:5c:
                    af:66:33:1c:c4:af:0b:d5:6b:6c:79:ba:a8:72:e7:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6C:D0:5C:7D:4C:5E:6E:EF:3A:14:2E:2B:46:32:6B:7A:78:AB:04
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:09:a7:a6:c0:f1:8d:d6:5f:01:f1:77:27:38:4c:11:3b:
         d2:27:ca:45:b5:c7:aa:cd:d7:7a:dc:ac:d0:ac:3c:ea:84:f3:
         22:36:2c:2c:a7:6d:e2:67:97:b3:64:8f:b5:2c:a7:41:8d:2d:
         fa:cf:06:d9:60:ab:56:42:e1:c6:f1:07:a0:9e:3e:3c:4c:6d:
         0e:03:d7:15:ae:ff:6c:5f:f3:f0:7a:ef:d1:e0:db:d5:cc:bf:
         61:5b:a2:34:33:40:7a:e9:88:8f:97:cb:77:59:58:c1:67:6e:
         9a:0d:36:39:f9:c0:54:22:fa:9a:44:e7:9b:bc:4e:2b:2c:ae:
         0d:10:72:99:36:eb:da:83:cc:d2:53:eb:c7:66:e3:8a:d2:52:
         44:58:1c:86:9c:60:b5:33:92:85:2e:e3:4f:05:41:5d:a6:50:
         d4:60:0d:bb:cd:29:5d:fa:13:d7:76:d1:45:84:3f:87:a0:c5:
         65:e3:3b:1f:3f:68:d2:6a:2a:41:3d:5e:24:19:95:b8:b7:ce:
         82:30:56:45:c0:6e:93:cf:95:5f:87:f4:41:35:2e:23:f8:98:
         8c:9d:91:c2:55:0e:95:4e:a0:6d:c6:98:76:a0:5a:d0:e5:50:
         67:de:9b:31:a1:72:4a:6a:23:a4:7f:cb:b3:32:43:62:09:b9:
         f2:73:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:02 2026 by rpki-client