Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File:                     h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier:          zGzUjQuaL516mc/aUmk8HSp8/PkqFZq4O5aPGrsCTu8=
Subject key identifier:   99:2C:13:EC:6C:8D:E1:66:89:23:42:77:96:3D:A8:64:46:D7:DC:A3
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer:       /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial:       01A1404BE5127123BECAD1599FAA4F7B2CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number:          0230
Signing time:             Thu 15 Oct 2026 16:01:17 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:17 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:17 +0000
Files and hashes:         1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
                          2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: 9zaYtkPAmDoYqtERg2pKRPne2II8ayXLvVzfz8maotg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4b:e5:12:71:23:be:ca:d1:59:9f:aa:4f:7b:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
        Validity
            Not Before: Oct 15 16:01:17 2026 GMT
            Not After : Oct 16 16:01:17 2026 GMT
        Subject: CN=992c13ec6c8de16689234277963da86446d7dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:95:9e:f1:03:9b:d0:a6:c0:06:e7:1a:d6:
                    2c:fb:74:66:bd:ad:0a:86:ac:67:ad:a7:ad:5f:ed:
                    74:ec:5e:b9:7b:0d:3a:4d:66:e2:ba:a9:78:af:e4:
                    90:cf:5a:0c:3c:b7:35:52:bc:f1:a4:42:41:6c:73:
                    88:9e:de:0c:05:c9:f0:35:7a:90:2b:da:f0:f0:0d:
                    ab:2e:79:e4:83:1f:e1:7f:a1:07:b1:95:8e:48:af:
                    38:68:c7:f6:01:37:d7:ac:a5:e0:fc:bc:eb:83:a6:
                    37:4f:a0:ef:4a:15:60:37:27:25:a1:3b:46:fa:44:
                    04:ac:35:b6:df:22:21:db:2b:94:aa:07:fd:5b:72:
                    d3:69:05:71:66:ad:6f:85:3f:44:17:df:51:64:93:
                    b5:c7:ca:ce:8a:ca:df:3f:27:50:94:d5:de:4e:43:
                    99:4b:80:1d:84:67:35:94:07:4a:f4:f0:52:a0:28:
                    5b:5a:b7:15:7e:6f:50:d5:f8:91:22:47:01:d8:04:
                    70:eb:14:ac:0a:25:3b:08:60:87:5a:5a:b3:35:e3:
                    cc:dd:e0:80:42:b9:28:a9:b0:04:82:e5:7b:4a:4b:
                    37:ac:fe:db:0a:4c:c6:24:86:c3:7a:9b:16:0b:3c:
                    b7:b3:a4:84:74:29:37:1c:1f:39:fe:d5:25:95:0a:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:13:EC:6C:8D:E1:66:89:23:42:77:96:3D:A8:64:46:D7:DC:A3
            X509v3 Authority Key Identifier:
                keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:06:72:52:9e:bc:71:4a:5a:46:57:86:b9:e4:94:63:22:e3:
         25:7f:dc:63:1e:4c:bf:b3:82:46:0f:27:98:4a:43:0e:db:d6:
         83:ec:11:42:97:74:35:4a:13:2f:cf:b5:46:ad:63:0a:d5:d3:
         51:01:05:99:d1:4c:5e:51:0e:22:5b:01:88:bf:2b:32:a2:66:
         29:64:9a:f2:74:3e:f4:4e:70:98:37:d7:46:75:ff:8c:95:e8:
         08:b5:03:05:49:b9:95:6e:67:77:34:1f:9d:17:08:5c:7e:88:
         48:8e:72:8b:84:a6:0a:80:24:5f:b4:ea:b9:82:d8:ef:e3:e3:
         81:ab:0d:09:e6:1b:d3:63:71:01:10:26:0c:2a:85:0e:8a:43:
         c9:1f:c3:6f:b4:de:99:aa:14:1e:8e:73:4c:78:22:6d:fb:b5:
         2e:56:5c:4b:ed:9f:d1:ab:05:30:4a:3e:f6:f0:30:9c:51:a5:
         5d:7a:2e:61:e9:54:d4:e9:fd:02:57:3e:2b:f7:ed:56:89:24:
         e8:e4:50:61:72:ce:3f:96:c0:ef:65:f3:31:47:1c:00:07:e9:
         3b:1e:ae:55:47:47:ba:92:55:17:45:65:75:19:5e:53:b1:96:
         b8:e1:17:19:c6:3a:e9:cd:28:0e:e6:8e:42:3a:84:4b:b0:5a:
         95:b0:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:56 2026 by rpki-client