Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          g5S5EpNAKPIdXc/gXTSAqctRJJazImv7qBBUus+I1S8=
Subject key identifier:   93:41:BE:BA:99:88:E2:80:EF:FE:CD:B5:3D:64:5A:9F:5C:25:0B:B1
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       01A0D3B89770EA3446A7587E428920C46008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          19FF
Signing time:             Thu 24 Sep 2026 14:01:25 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:25 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:25 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: iX4higf815cFtFDzzHhEuHbcuXvIzOE9/U/5CN3LrrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:97:70:ea:34:46:a7:58:7e:42:89:20:c4:60:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Sep 24 14:01:25 2026 GMT
            Not After : Sep 25 14:01:25 2026 GMT
        Subject: CN=9341beba9988e280effecdb53d645a9f5c250bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:0a:7e:b2:3f:e1:d3:53:e5:c3:0f:1c:55:
                    39:b2:03:6c:14:e1:6b:04:d8:8e:9d:c5:6e:f4:67:
                    99:69:f3:d3:f5:96:bd:a3:21:77:24:12:8d:93:62:
                    d8:9b:79:5b:b6:87:d6:42:88:fc:db:da:7e:fb:74:
                    f5:52:4a:81:27:bd:b4:fc:36:d2:73:18:65:ef:86:
                    47:d6:9a:c2:e8:d3:d4:80:e9:3b:5f:86:c6:ce:83:
                    42:7e:b8:8c:47:90:80:9c:a9:ef:b1:e1:c6:e1:87:
                    9b:92:48:ae:39:1f:f1:28:0e:53:0d:d8:a9:3e:76:
                    87:68:dc:2d:3a:1f:a7:7b:fd:3b:ff:65:b3:93:42:
                    72:f2:be:a1:62:94:50:61:ce:c5:b1:fb:18:d8:b3:
                    62:70:32:01:c9:c4:76:87:c8:0d:a1:76:f7:9e:19:
                    48:e6:20:5f:04:f9:49:e2:d6:8e:72:b4:e2:ef:b0:
                    5c:7a:51:7a:40:d0:b9:29:c3:0a:c9:89:00:86:2c:
                    3d:97:78:8a:d8:70:87:59:c8:72:ad:ad:aa:61:99:
                    0d:cd:0e:da:f1:cb:11:77:6a:94:42:e9:e2:02:22:
                    7d:5f:bb:46:39:75:5d:9b:3d:a2:db:1b:dc:c6:e1:
                    6d:2d:07:2c:0d:dd:f3:f6:f7:83:5f:01:68:53:4a:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:BE:BA:99:88:E2:80:EF:FE:CD:B5:3D:64:5A:9F:5C:25:0B:B1
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:5b:91:fb:72:09:89:98:ab:f7:3f:01:ff:6e:21:17:e1:
         b2:a7:3c:05:06:33:15:31:f7:7b:9a:05:24:a3:13:a3:60:06:
         75:b5:db:a2:9f:bc:af:21:06:37:c3:17:a9:31:54:90:ec:a5:
         de:2f:58:72:08:e0:03:40:7f:af:df:20:50:2f:cb:f1:42:92:
         5f:9a:c4:88:be:87:3a:01:60:32:44:0d:7d:d8:c6:92:ea:42:
         41:aa:4f:7a:7b:2b:dd:a3:38:a5:95:d2:c1:60:d6:c7:7d:fe:
         59:7c:a0:dd:bc:3c:5d:d9:b2:a8:a4:f6:7f:94:b4:c2:30:a9:
         a9:f5:d5:cf:f8:31:a8:72:4d:42:b3:7b:79:4b:1f:07:80:cb:
         d4:bc:6f:10:8a:cc:ac:02:51:fb:b6:b3:51:f0:d8:15:00:fd:
         95:0b:4e:7c:35:ea:2f:c1:c5:72:b1:f0:13:5e:b9:7d:77:3d:
         b7:e2:c3:8b:68:5e:a2:6d:81:cf:fd:63:34:22:e1:99:78:53:
         c2:7f:2a:96:55:be:eb:c8:8f:4b:e8:a3:26:51:b4:20:26:82:
         eb:e5:a9:9e:38:f3:8f:fa:7e:75:2f:86:8b:c5:4e:ab:3a:2e:
         b4:f6:85:3b:85:26:24:7a:45:f8:e0:09:6d:9b:e0:e5:e6:27:
         62:8e:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:40 2026 by rpki-client