Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File:                     ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier:          K8TQtMCxiIvLh9wLrMrz4GomgWY64cUR41fUYNr0HNo=
Subject key identifier:   71:36:B8:11:CC:6E:32:E9:50:41:0B:7E:67:58:3F:22:F6:63:D6:54
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer:       /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial:       01A002B93C080B9862A09E6F5BD55DA4FDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number:          132E
Signing time:             Sat 15 Aug 2026 00:01:28 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:28 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:28 +0000
Files and hashes:         1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: zdf5o4kjKC9Q9e4Wgku/Z9Jc/GpWwnqcJ81oxhMI0Ss=)
                          2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:3c:08:0b:98:62:a0:9e:6f:5b:d5:5d:a4:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
        Validity
            Not Before: Aug 15 00:01:28 2026 GMT
            Not After : Aug 16 00:01:28 2026 GMT
        Subject: CN=7136b811cc6e32e950410b7e67583f22f663d654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:8b:cb:45:db:a9:91:65:94:8f:80:a3:d8:
                    a1:48:66:7f:aa:78:6c:ca:62:da:53:9e:ac:94:ed:
                    ae:1f:ba:6c:5c:e5:f1:a3:c7:02:b2:e6:3f:a3:2c:
                    56:77:7d:2b:ff:40:d4:1a:4d:d6:34:52:da:d9:83:
                    77:76:d1:a3:bc:b7:cb:f3:cc:8e:10:6c:18:a9:5f:
                    3a:fd:28:82:3a:c5:4b:29:7d:0a:27:98:2d:29:f7:
                    eb:09:8b:12:98:23:35:ee:9a:6f:54:14:44:81:31:
                    48:3e:31:e0:6a:5f:88:3a:2e:88:92:86:19:17:1b:
                    5e:19:ce:70:f8:4c:5c:8d:f9:9d:86:88:f2:22:46:
                    16:5d:1e:90:f3:96:3a:d6:22:7a:9d:47:41:c5:be:
                    25:81:1a:a1:9f:ba:0b:82:21:fe:18:c7:22:bc:8d:
                    95:55:da:27:46:ee:ac:e4:40:04:12:23:ec:51:ab:
                    48:66:33:a4:94:97:2a:24:c6:c3:28:13:5a:8f:8b:
                    4d:0a:5f:87:74:bd:53:aa:fa:3f:8c:b8:df:ee:fa:
                    85:8c:d1:f8:fd:c4:f7:33:f2:57:13:cb:5e:c6:e6:
                    f1:99:d9:ab:ea:b1:7e:ae:8a:1b:2e:0f:b2:01:be:
                    cc:e6:16:dc:03:9f:d3:e2:d6:65:d7:8f:36:fd:0a:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:36:B8:11:CC:6E:32:E9:50:41:0B:7E:67:58:3F:22:F6:63:D6:54
            X509v3 Authority Key Identifier:
                keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:07:22:82:4c:5c:02:d0:2b:c9:ab:6b:77:8e:0a:78:e0:0b:
         dc:4f:74:33:b2:ea:37:10:65:a5:f5:ed:be:80:b2:9f:ea:31:
         d7:7b:a3:b1:a6:7f:06:a6:ad:a2:fe:f0:d2:f3:93:ed:7e:b9:
         8a:76:12:b9:8b:48:ee:6a:2b:ac:f1:09:23:28:ce:bd:5e:27:
         66:ef:e8:49:89:54:20:50:28:1e:ab:45:92:4a:b9:78:7b:a2:
         a5:89:41:fd:94:27:7c:dd:27:cb:9a:0a:fd:af:40:1d:3d:e6:
         d4:86:d5:61:76:2c:06:ae:db:21:29:84:fe:c5:df:48:c2:34:
         83:b3:c4:25:5f:68:ac:a9:f5:ff:6f:41:1c:e1:e7:99:ce:f0:
         6c:3e:d7:fb:e5:80:92:41:17:eb:96:ff:7b:8a:a0:8b:6a:7c:
         68:c7:a0:51:55:84:b0:80:02:50:0d:89:87:e9:4e:36:bc:b1:
         9f:b9:32:3f:b7:1b:bd:7f:ff:6a:57:b3:34:b4:f2:b6:2c:15:
         fa:79:74:4b:3b:e0:c2:20:f8:2e:f3:cc:be:9c:da:83:77:1e:
         75:b6:92:3c:ed:2e:c8:4b:61:f9:ac:8f:7b:4d:f4:89:e3:39:
         94:6b:f8:94:27:6a:f5:ae:a6:cf:c3:e3:c0:7b:29:e2:34:a8:
         57:21:61:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuTwIC5hioJ5vW9VdpP3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjYwODE1MDAwMTI4WhcNMjYwODE2MDAwMTI4WjAzMTEwLwYDVQQD
Eyg3MTM2YjgxMWNjNmUzMmU5NTA0MTBiN2U2NzU4M2YyMmY2NjNkNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbeLy0XbqZFllI+Ao9ihSGZ/qnhs
ymLaU56slO2uH7psXOXxo8cCsuY/oyxWd30r/0DUGk3WNFLa2YN3dtGjvLfL88yO
EGwYqV86/SiCOsVLKX0KJ5gtKffrCYsSmCM17ppvVBREgTFIPjHgal+IOi6IkoYZ
FxteGc5w+ExcjfmdhojyIkYWXR6Q85Y61iJ6nUdBxb4lgRqhn7oLgiH+GMcivI2V
VdonRu6s5EAEEiPsUatIZjOklJcqJMbDKBNaj4tNCl+HdL1Tqvo/jLjf7vqFjNH4
/cT3M/JXE8texubxmdmr6rF+roobLg+yAb7M5hbcA5/T4tZl1482/QqyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE2uBHMbjLpUEELfmdYPyL2Y9ZUMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAcigkxc
AtAryatrd44KeOAL3E90M7LqNxBlpfXtvoCyn+ox13ujsaZ/Bqatov7w0vOT7X65
inYSuYtI7morrPEJIyjOvV4nZu/oSYlUIFAoHqtFkkq5eHuipYlB/ZQnfN0ny5oK
/a9AHT3m1IbVYXYsBq7bISmE/sXfSMI0g7PEJV9orKn1/29BHOHnmc7wbD7X++WA
kkEX65b/e4qgi2p8aMegUVWEsIACUA2Jh+lONryxn7kyP7cbvX//alezNLTytiwV
+nl0SzvgwiD4LvPMvpzag3cedbaSPO0uyEth+ayPe030ieM5lGv4lCdq9a6mz8Pj
wHsp4jSoVyFhUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:42:01 2026 by rpki-client