Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          YLoOKZWNjwUero9tPv0IZ5nMgN2RQysHVdzxv65nVQg=
Subject key identifier:   6F:6A:99:4D:9B:0A:78:9B:EE:9C:1D:2E:86:B5:CF:D9:73:94:55:5A
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       01A0C10CF17717BC12AC6B848D78778E26BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          1727
Signing time:             Sun 20 Sep 2026 23:00:45 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:45 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:45 +0000
Files and hashes:         1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
                          2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
                          3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: +WPuXbr07Sztpd14qk+RQo782mYv6W0XFp0/eeTeQPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:f1:77:17:bc:12:ac:6b:84:8d:78:77:8e:26:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Sep 20 23:00:45 2026 GMT
            Not After : Sep 21 23:00:45 2026 GMT
        Subject: CN=6f6a994d9b0a789bee9c1d2e86b5cfd97394555a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:1b:3f:e2:de:b4:bf:6a:02:57:62:24:cb:
                    cf:31:e1:7f:7d:09:6a:eb:ea:e9:da:ad:d7:a9:91:
                    3c:19:8e:d4:fc:37:ae:9f:31:a7:9f:4d:04:a4:d2:
                    2a:04:fa:a6:1a:d3:4c:46:6e:d7:0b:03:5d:dc:f0:
                    6e:17:0e:19:5a:85:cd:1c:a1:40:ac:46:d9:23:4d:
                    31:73:78:cd:3c:fa:e0:c8:a8:16:4b:bb:ba:a8:10:
                    4c:4d:d2:c7:23:5b:b5:46:70:18:d6:38:f1:28:72:
                    ac:8d:d4:ba:4c:19:e4:74:ab:e0:23:1a:bb:26:4a:
                    75:a7:0f:92:fc:2a:0c:43:22:29:e2:5b:a3:88:b7:
                    e6:58:b7:b5:a8:27:a1:da:5a:aa:82:02:4a:e3:49:
                    fc:00:0f:cb:24:db:2a:57:a4:7a:15:78:03:0d:af:
                    37:66:95:a5:a6:58:3d:18:5f:4a:0c:35:31:58:9b:
                    46:76:90:5e:c3:fd:88:7f:e5:d4:d2:f9:ed:f9:df:
                    17:1f:bb:a5:6a:38:47:87:02:46:c7:f7:99:76:c1:
                    4e:88:4b:f9:3a:98:6c:8f:6c:e4:77:21:b0:ad:1d:
                    47:ed:f3:f8:fc:aa:87:51:8e:b6:66:5b:d7:1c:81:
                    1c:8e:a8:05:df:9f:8a:df:47:70:5a:1b:59:8f:c9:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:99:4D:9B:0A:78:9B:EE:9C:1D:2E:86:B5:CF:D9:73:94:55:5A
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:8f:a7:67:22:0a:98:b7:40:5a:02:13:9a:55:22:f1:18:
         0d:4d:bc:e3:a6:fe:c4:e0:02:23:c1:b4:0b:57:a5:3a:fb:fc:
         51:09:71:44:46:87:8a:21:ea:84:c8:0f:46:97:18:56:68:7a:
         55:72:35:5a:d4:fc:ac:33:c3:a8:9a:78:b5:3b:9e:58:3d:f4:
         19:61:eb:a5:1a:9d:05:a5:cc:19:51:4d:d0:50:ba:6e:62:c6:
         d2:32:1c:5c:ef:80:30:76:b2:20:6e:48:ba:b0:34:fe:e7:c8:
         0e:bd:a3:cb:92:86:c6:ff:67:41:64:f2:71:2d:cb:1a:72:ba:
         7a:f2:3e:04:81:05:a1:45:f7:29:91:87:1b:55:55:0f:53:65:
         63:ec:42:2d:58:87:87:0a:27:bb:ca:81:b3:ec:66:da:9a:59:
         bc:e7:81:5d:29:6f:41:84:0e:1d:7b:8f:6b:83:78:5a:a9:a2:
         83:bd:14:f1:45:20:f0:fd:49:d7:b5:d7:f9:2a:b0:5c:a5:ad:
         bd:20:c3:44:ae:6a:2b:d9:06:6b:2b:db:a6:e7:08:ce:91:1a:
         bb:12:e5:eb:81:d3:e2:4e:81:68:2f:3f:64:a8:79:81:1c:96:
         74:fa:39:5f:ac:cc:83:b9:b8:aa:ae:6f:63:77:7f:ba:f0:6c:
         74:a4:92:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDPF3F7wSrGuEjXh3jia/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk
MzZiYTUwHhcNMjYwOTIwMjMwMDQ1WhcNMjYwOTIxMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZjZhOTk0ZDliMGE3ODliZWU5YzFkMmU4NmI1Y2ZkOTczOTQ1NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wobP+LetL9qAldiJMvPMeF/fQlq
6+rp2q3XqZE8GY7U/DeunzGnn00EpNIqBPqmGtNMRm7XCwNd3PBuFw4ZWoXNHKFA
rEbZI00xc3jNPPrgyKgWS7u6qBBMTdLHI1u1RnAY1jjxKHKsjdS6TBnkdKvgIxq7
Jkp1pw+S/CoMQyIp4lujiLfmWLe1qCeh2lqqggJK40n8AA/LJNsqV6R6FXgDDa83
ZpWlplg9GF9KDDUxWJtGdpBew/2If+XU0vnt+d8XH7ulajhHhwJGx/eZdsFOiEv5
Ophsj2zkdyGwrR1H7fP4/KqHUY62ZlvXHIEcjqgF35+K30dwWhtZj8lwdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9qmU2bCnib7pwdLoa1z9lzlFVaMB8GA1UdIwQY
MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt
N2UwMzQwZWM5NjY3LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3
LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2iPp2ci
Cpi3QFoCE5pVIvEYDU2846b+xOACI8G0C1elOvv8UQlxREaHiiHqhMgPRpcYVmh6
VXI1WtT8rDPDqJp4tTueWD30GWHrpRqdBaXMGVFN0FC6bmLG0jIcXO+AMHayIG5I
urA0/ufIDr2jy5KGxv9nQWTycS3LGnK6evI+BIEFoUX3KZGHG1VVD1NlY+xCLViH
hwonu8qBs+xm2ppZvOeBXSlvQYQOHXuPa4N4Wqmig70U8UUg8P1J17XX+SqwXKWt
vSDDRK5qK9kGayvbpucIzpEauxLl64HT4k6BaC8/ZKh5gRyWdPo5X6zMg7m4qq5v
Y3d/uvBsdKSS4Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:23:33 2026 by rpki-client