Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File:                     iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier:          0HS0UkQcZSvG/Pxombj3kORmqBoHNP0is9Ncoye5EkM=
Subject key identifier:   8D:97:30:AA:E0:04:E5:33:67:14:A0:10:5D:F1:8D:46:32:E5:9D:88
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer:       /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial:       019DA37856B278340C10E1D4C8CECD7A236D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number:          185D
Signing time:             Sun 19 Apr 2026 02:01:05 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:05 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:05 +0000
Files and hashes:         1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: zPpyXuENLBkFV89KzheVR5f6czk0QKieTv3ZnqkQaRo=)
                          2: iojxs-4stuh5VLOzZynsjkM6c0E.roa (hash: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:56:b2:78:34:0c:10:e1:d4:c8:ce:cd:7a:23:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
        Validity
            Not Before: Apr 19 02:01:05 2026 GMT
            Not After : Apr 20 02:01:05 2026 GMT
        Subject: CN=8d9730aae004e5336714a0105df18d4632e59d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:db:98:8c:3e:30:08:5e:30:8d:c2:c5:d0:
                    93:3e:eb:65:bb:93:a0:4c:03:0f:2e:55:de:42:5a:
                    25:7a:71:2a:9e:5f:59:cb:ea:4e:d1:43:ae:88:37:
                    2b:f0:de:6c:18:fe:7b:a0:88:4b:4d:16:f0:a4:2e:
                    3f:d6:eb:1a:a8:fe:d2:23:73:e4:2f:cc:fc:17:91:
                    6e:65:e3:ed:75:8e:41:38:c3:e7:29:65:8b:29:1b:
                    b3:03:0b:15:16:12:f6:71:6d:5f:a9:e3:77:25:f9:
                    22:52:2a:5d:5a:dc:5c:f7:a3:32:e1:aa:92:03:9d:
                    65:1f:95:68:8a:c4:bc:82:da:df:2f:3a:88:0d:97:
                    6c:c2:f6:56:18:9b:15:a5:13:25:cd:db:d7:65:5b:
                    a5:88:af:af:de:09:3b:2e:cd:29:4a:3b:47:8e:d3:
                    2d:76:26:bb:78:4a:96:80:46:2a:0a:9b:7a:31:2f:
                    56:4e:90:61:93:61:0c:40:a6:75:46:3b:04:5b:5a:
                    88:53:81:2b:94:54:85:44:6a:4b:4a:bb:e1:2a:db:
                    47:00:59:55:20:74:b9:43:4d:fd:b9:14:bf:92:a2:
                    40:4d:be:1d:45:9b:81:3a:17:ac:81:d5:88:ad:ce:
                    6e:f3:70:a3:fa:d9:da:2c:6d:93:ea:f5:db:5d:1c:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:30:AA:E0:04:E5:33:67:14:A0:10:5D:F1:8D:46:32:E5:9D:88
            X509v3 Authority Key Identifier:
                keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9e:3f:e0:c1:bc:4a:0c:39:91:8e:2a:0a:7e:1a:86:db:e6:
         b3:db:74:13:70:64:8e:6b:2d:c9:64:e7:b2:cb:9b:df:22:d3:
         9c:d5:99:64:4b:0d:9f:32:50:cd:ed:f2:54:dd:ac:ec:b9:43:
         07:d6:45:e0:a9:9e:45:68:9f:5a:8f:45:b6:64:ec:7b:e1:f0:
         54:e3:12:2a:15:74:8b:2d:08:78:59:b3:f0:bf:b5:6c:76:7a:
         0a:d7:be:6c:14:5d:97:ad:36:fa:33:9f:75:de:fe:14:4e:e2:
         5c:24:91:45:45:c8:3b:4a:90:2c:c6:90:74:b1:e2:7f:33:56:
         46:a4:a8:b6:03:3c:88:dc:c3:35:e8:f2:5c:05:d5:9e:fd:15:
         74:6f:44:3e:b2:32:62:db:f8:af:b0:2b:a4:39:e1:f1:8f:48:
         fe:a3:19:0e:4e:3a:ad:ce:3c:44:f9:bd:b7:06:c5:fe:65:df:
         96:70:cc:3f:09:f8:c9:8f:93:b3:81:5d:03:3f:ee:4c:eb:ad:
         a8:65:37:1d:63:5a:fb:17:3e:a4:dd:d8:ed:13:45:d8:cc:ae:
         bb:72:3d:03:19:91:03:28:3e:0b:31:7e:56:39:80:4c:1a:06:
         f5:6f:eb:5f:ed:fe:0e:34:f6:ac:79:76:25:02:07:38:fb:bc:
         62:aa:1b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeFayeDQMEOHUyM7NeiNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5
NjlkZDUwHhcNMjYwNDE5MDIwMTA1WhcNMjYwNDIwMDIwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDk3MzBhYWUwMDRlNTMzNjcxNGEwMTA1ZGYxOGQ0NjMyZTU5ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH7bmIw+MAheMI3CxdCTPutlu5Og
TAMPLlXeQlolenEqnl9Zy+pO0UOuiDcr8N5sGP57oIhLTRbwpC4/1usaqP7SI3Pk
L8z8F5FuZePtdY5BOMPnKWWLKRuzAwsVFhL2cW1fqeN3JfkiUipdWtxc96My4aqS
A51lH5VoisS8gtrfLzqIDZdswvZWGJsVpRMlzdvXZVuliK+v3gk7Ls0pSjtHjtMt
dia7eEqWgEYqCpt6MS9WTpBhk2EMQKZ1RjsEW1qIU4ErlFSFRGpLSrvhKttHAFlV
IHS5Q039uRS/kqJATb4dRZuBOhesgdWIrc5u83Cj+tnaLG2T6vXbXRzuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2XMKrgBOUzZxSgEF3xjUYy5Z2IMB8GA1UdIwQY
MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt
OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm
LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ4/4MG8
Sgw5kY4qCn4ahtvms9t0E3BkjmstyWTnssub3yLTnNWZZEsNnzJQze3yVN2s7LlD
B9ZF4KmeRWifWo9FtmTse+HwVOMSKhV0iy0IeFmz8L+1bHZ6Cte+bBRdl602+jOf
dd7+FE7iXCSRRUXIO0qQLMaQdLHifzNWRqSotgM8iNzDNejyXAXVnv0VdG9EPrIy
Ytv4r7ArpDnh8Y9I/qMZDk46rc48RPm9twbF/mXflnDMPwn4yY+Ts4FdAz/uTOut
qGU3HWNa+xc+pN3Y7RNF2Myuu3I9AxmRAyg+CzF+VjmATBoG9W/rX+3+DjT2rHl2
JQIHOPu8Yqobcw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 06:57:45 2026 by rpki-client