Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          dMN4LIewCY249P8nBI9V8Y3O9CwmmU2vFt5yr/LM7VA=
Subject key identifier:   D5:BF:D6:EF:47:1B:4D:EA:F6:8D:25:70:CD:08:04:4D:BC:71:B0:5A
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       019D992B951B41E67BF8ECE76C84AC1A797D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 02:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:03 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: bYiMpYzVs7vFXgGjQMPCe8eLx50AocqyW/u8xVBv9P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:95:1b:41:e6:7b:f8:ec:e7:6c:84:ac:1a:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Apr 17 02:01:03 2026 GMT
            Not After : Apr 18 02:01:03 2026 GMT
        Subject: CN=d5bfd6ef471b4deaf68d2570cd08044dbc71b05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:b9:57:34:0b:98:c8:50:cf:2e:f4:db:7c:
                    07:5e:db:e4:33:84:de:97:0a:b1:54:76:f8:8e:fb:
                    e8:95:79:1f:87:7f:36:6e:56:31:d4:f3:f6:7a:3c:
                    ac:93:fa:ab:40:75:de:a9:c4:cf:be:14:3b:f8:96:
                    36:02:41:c1:01:b0:a2:67:cb:42:a5:c1:30:58:bc:
                    2f:af:79:8b:48:4b:61:bc:d0:95:fa:ca:b5:09:7b:
                    9f:6a:12:e3:3a:7f:a6:27:2c:39:b2:39:bf:30:ad:
                    2f:e3:69:e2:f7:61:4f:64:5c:07:3b:87:d4:43:ee:
                    a4:57:15:26:b7:48:12:07:a6:be:2b:be:06:73:c3:
                    83:43:b5:ee:2c:fc:5f:09:ea:2f:42:93:66:e8:11:
                    05:9e:1a:f4:e3:0e:51:09:15:f7:35:93:26:fa:10:
                    b2:54:cf:6d:38:77:b5:a1:f9:a4:2e:b6:25:68:94:
                    0a:d4:6b:ac:10:b6:c7:3c:de:98:8a:26:b5:ae:2f:
                    09:8b:b9:81:3f:2c:b7:1b:da:45:97:40:32:47:cd:
                    1d:76:5e:ba:77:24:29:3d:ac:1a:0b:9d:0e:b7:5d:
                    7d:5f:64:f2:91:51:29:96:af:89:2d:25:b1:68:a0:
                    10:86:19:3e:51:5a:27:e2:4d:9e:28:8c:21:f5:40:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:D6:EF:47:1B:4D:EA:F6:8D:25:70:CD:08:04:4D:BC:71:B0:5A
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:61:54:43:7d:26:56:aa:2e:48:18:2f:10:2a:50:26:22:76:
         f6:c1:60:27:62:d0:12:41:78:32:df:76:4d:2c:fb:75:d0:a8:
         6b:e0:73:75:89:b0:37:30:a2:43:b2:9d:b8:dd:31:3a:e5:c4:
         a6:66:5d:84:46:a2:3a:b3:3e:4b:dc:c8:f5:28:93:e2:34:85:
         1a:1b:e4:37:cc:18:d9:75:ad:e6:fe:64:a7:d9:36:fd:c5:bc:
         5f:44:39:b0:26:48:f1:40:03:63:c9:8b:bf:6f:15:0b:56:51:
         01:37:21:04:24:60:c7:e9:97:b7:27:47:31:8b:fe:05:1d:5d:
         84:07:c9:7d:2a:38:0d:42:8e:10:f5:76:ca:c5:00:29:05:38:
         91:8f:e5:a2:d3:39:78:7f:96:60:ac:46:74:66:16:e7:1c:cc:
         87:6e:39:81:a6:52:da:1f:16:6f:05:f8:c2:b0:02:85:b3:54:
         08:46:ee:e1:0c:91:cf:e4:87:32:40:d0:5c:8a:3c:a3:55:89:
         c0:dc:4a:05:35:ee:fe:91:90:0d:25:9b:80:aa:1f:4e:47:ea:
         1c:a2:66:fd:52:9c:d9:a2:44:c6:65:08:ae:80:73:b7:ad:a5:
         a7:ec:00:67:49:70:56:3a:f0:53:12:ee:3f:0b:65:da:1a:2b:
         22:04:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:39 2026 by rpki-client