Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File:                     ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier:          Yvsx8mcC1IVkeSM0gyxTm8HqThqZcWB6+75XAHn8Qn8=
Subject key identifier:   AE:11:DA:2E:E8:71:6D:FF:19:D6:41:77:4C:F8:D9:88:54:98:BE:D7
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer:       /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial:       019CA9B37DCAC1A3FC8A5FB28DB69DFC0F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number:          173E
Signing time:             Sun 01 Mar 2026 14:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:38 +0000
Files and hashes:         1: WRWq9c3b9kg8gQPomqG34r1Y5v0.asa (hash: ZoJ/LKA1w1XuBHscB30KCICWqihW2yVYKCpjACmrLmk=)
                          2: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: ZNU3JIHPCszoWh8jQmuAMefHRioLcDfEO11yPGqITLk=)
                          3: ii1wrV6MH0Od9I-EvZmz4tIZ0YU.roa (hash: QsmP7YoZAPOJBFrEDm/rD4hR/aKn34unfeCi9/KcoPA=)
                          4: lgTArLUMYrKA2h_soDmzPeEt-bE.roa (hash: QFGAzr+Hh5GDcp3vsyzbp7//YxUomw2TKbl55PVM51U=)
                          5: pFhubwSNdAYBGmBojn7PXR4qmPw.roa (hash: 3NUl+CvK/jyTI2OJq3B6/7x1aR9RvE8f9qeqZkFG9nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:7d:ca:c1:a3:fc:8a:5f:b2:8d:b6:9d:fc:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
        Validity
            Not Before: Mar  1 14:00:38 2026 GMT
            Not After : Mar  2 14:00:38 2026 GMT
        Subject: CN=ae11da2ee8716dff19d641774cf8d9885498bed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:cd:21:54:b3:41:d3:bc:50:36:45:8b:3f:
                    0a:78:91:17:bb:d8:2e:24:ed:51:54:63:c8:8a:82:
                    e5:ee:82:00:79:9b:2c:34:3e:22:b9:92:e2:8f:51:
                    b3:0a:fb:31:4e:b9:e5:87:2d:57:af:ff:29:70:6c:
                    34:a8:a7:f0:c9:f3:5f:a1:f5:d1:71:c0:4e:ac:43:
                    a3:f3:7d:bf:0e:a7:e9:04:93:07:76:e6:3d:c0:42:
                    6b:c0:3b:a6:30:49:39:4d:ef:32:3e:63:bb:40:48:
                    bd:33:57:59:22:69:dd:4c:96:6b:e4:4f:d8:5e:6d:
                    58:52:5d:3c:e6:f6:c0:f3:69:61:5e:0b:6d:52:d0:
                    bc:c9:fd:36:fc:79:31:af:d1:ff:15:b9:aa:13:a8:
                    84:28:cb:2c:47:27:12:aa:be:65:de:d6:45:87:91:
                    eb:04:64:5a:34:fd:f5:84:3c:01:f4:25:5d:67:cf:
                    71:a5:35:aa:4f:61:fb:f8:9f:a5:dc:24:21:9a:b0:
                    d9:1e:42:88:39:9e:3c:20:91:80:c8:e1:ca:d7:df:
                    05:5f:12:32:0d:dd:00:08:33:16:06:22:1a:d7:17:
                    08:e1:ce:2e:8c:5f:3e:00:2a:ba:66:25:d1:8a:62:
                    85:ea:2e:c2:c6:d1:d8:ce:32:41:d0:c6:6a:79:36:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:DA:2E:E8:71:6D:FF:19:D6:41:77:4C:F8:D9:88:54:98:BE:D7
            X509v3 Authority Key Identifier:
                keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:d4:52:2d:f6:00:1a:2a:a2:83:04:6c:19:c9:64:7c:e3:
         5d:6c:14:f9:29:35:2c:1d:d5:0e:be:d9:97:86:ac:5f:87:45:
         33:f8:0c:5b:60:ec:e5:5a:ff:ef:b3:a3:07:42:80:5f:10:14:
         0e:3a:55:39:c0:58:cf:4d:c3:99:15:d3:da:5e:87:c5:f5:4d:
         8d:54:4f:68:04:5e:b2:d4:5a:32:01:d3:09:79:c3:b7:d2:e2:
         1f:48:02:55:2a:c0:36:fb:d8:0c:fa:19:0c:86:33:99:99:16:
         9c:12:8a:8f:2b:7a:55:ce:76:78:96:0c:dd:f5:1a:bd:ce:9a:
         08:a1:41:a9:d5:51:c8:4b:df:72:39:a7:c8:c4:c3:d2:97:47:
         95:f8:f5:d4:d6:8b:dc:1f:7c:59:c3:b7:3a:b3:b0:9e:7f:2c:
         7b:41:5b:89:50:52:21:1d:3b:de:72:36:8f:a0:08:59:1f:12:
         87:91:7d:94:3f:ef:44:63:c6:5e:c6:60:b9:6d:27:c5:5a:1a:
         72:67:ba:14:c3:5e:17:dc:4c:cb:85:de:e6:d6:1f:cb:da:97:
         9b:e3:45:ee:33:d8:67:bc:16:d6:fa:3a:51:f0:07:73:b1:c6:
         3b:45:7e:61:3a:05:d9:5d:58:d0:79:c4:77:46:96:6a:d9:48:
         5a:12:29:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps33KwaP8il+yjbad/A97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw
M2RjNzUwHhcNMjYwMzAxMTQwMDM4WhcNMjYwMzAyMTQwMDM4WjAzMTEwLwYDVQQD
EyhhZTExZGEyZWU4NzE2ZGZmMTlkNjQxNzc0Y2Y4ZDk4ODU0OThiZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RnNIVSzQdO8UDZFiz8KeJEXu9gu
JO1RVGPIioLl7oIAeZssND4iuZLij1GzCvsxTrnlhy1Xr/8pcGw0qKfwyfNfofXR
ccBOrEOj832/DqfpBJMHduY9wEJrwDumMEk5Te8yPmO7QEi9M1dZImndTJZr5E/Y
Xm1YUl085vbA82lhXgttUtC8yf02/Hkxr9H/FbmqE6iEKMssRycSqr5l3tZFh5Hr
BGRaNP31hDwB9CVdZ89xpTWqT2H7+J+l3CQhmrDZHkKIOZ48IJGAyOHK198FXxIy
Dd0ACDMWBiIa1xcI4c4ujF8+ACq6ZiXRimKF6i7CxtHYzjJB0MZqeTZrCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4R2i7ocW3/GdZBd0z42YhUmL7XMB8GA1UdIwQY
MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt
ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez
LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTPUUi32
ABoqooMEbBnJZHzjXWwU+Sk1LB3VDr7Zl4asX4dFM/gMW2Ds5Vr/77OjB0KAXxAU
DjpVOcBYz03DmRXT2l6HxfVNjVRPaARestRaMgHTCXnDt9LiH0gCVSrANvvYDPoZ
DIYzmZkWnBKKjyt6Vc52eJYM3fUavc6aCKFBqdVRyEvfcjmnyMTD0pdHlfj11NaL
3B98WcO3OrOwnn8se0FbiVBSIR073nI2j6AIWR8Sh5F9lD/vRGPGXsZguW0nxVoa
cme6FMNeF9xMy4Xe5tYfy9qXm+NF7jPYZ7wW1vo6UfAHc7HGO0V+YToF2V1Y0HnE
d0aWatlIWhIp1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:50 2026 by rpki-client