Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File:                     h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier:          P55U29O9Nc8vEH8RbECnaQ0dVwG+We2YEu4Ak1MdcX0=
Subject key identifier:   0B:43:9F:1A:4E:D0:24:D7:62:68:C2:9C:5B:8E:EB:97:4C:C1:42:49
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer:       /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial:       01A003948C930366DF20EFC311FA6A11B8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number:          018C
Signing time:             Sat 15 Aug 2026 04:01:01 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:01 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:01 +0000
Files and hashes:         1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
                          2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: dMGt/mExYnCvxGOip4JLGARnd4IwC1U26eq8WLjgXQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:8c:93:03:66:df:20:ef:c3:11:fa:6a:11:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
        Validity
            Not Before: Aug 15 04:01:01 2026 GMT
            Not After : Aug 16 04:01:01 2026 GMT
        Subject: CN=0b439f1a4ed024d76268c29c5b8eeb974cc14249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:a6:5d:78:7a:b8:74:59:36:02:e6:91:11:
                    8e:6e:4f:41:f1:77:1f:e7:a8:a3:f4:5d:b5:5a:72:
                    8a:dc:eb:24:95:4f:be:f2:e2:79:8d:6e:c3:2d:98:
                    77:4f:9d:f0:b3:37:56:b6:a9:68:5e:a1:fd:8e:88:
                    8a:60:10:5c:b6:b4:6d:e9:91:96:82:5d:11:63:4b:
                    53:c3:52:25:b6:e9:4b:88:5d:df:09:a8:8f:31:73:
                    14:c5:14:10:0f:5e:91:a9:c4:09:a4:4a:e9:ab:17:
                    82:59:4e:6d:c7:c8:07:3a:31:17:a8:d8:42:f4:55:
                    0a:d2:3a:ea:00:3f:bc:b2:f4:05:3d:52:22:78:de:
                    d4:2a:79:30:7f:76:ba:0a:c9:50:68:ae:5f:c9:1a:
                    f1:24:6f:7a:89:11:6e:70:9b:d0:bf:2a:e3:f6:c0:
                    56:5e:b4:9a:76:5b:00:ec:f8:df:aa:69:5e:fc:4d:
                    ae:42:05:6d:c2:bb:18:35:0b:2b:37:77:bc:45:11:
                    21:7c:9f:04:ad:e3:bf:71:3e:91:92:d7:98:81:e4:
                    d9:cb:e8:23:7c:51:f9:a9:18:b3:5e:51:dc:2e:ce:
                    48:92:6c:3b:f5:83:48:3b:05:e2:0d:a1:b6:d3:dc:
                    7a:17:a8:ee:d9:20:56:36:ec:ca:aa:40:f4:45:fc:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:9F:1A:4E:D0:24:D7:62:68:C2:9C:5B:8E:EB:97:4C:C1:42:49
            X509v3 Authority Key Identifier:
                keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:74:1b:c5:11:0b:00:0e:97:70:f6:d8:ca:f2:d3:14:2c:14:
         0b:06:89:08:be:1f:20:5c:dd:3e:07:97:ec:66:d0:f7:84:de:
         0a:3d:5c:5b:cd:e9:97:05:4e:ab:9f:ea:0f:dd:09:09:60:d7:
         96:a2:85:6e:54:f9:de:75:47:a9:5d:02:65:b0:ee:2a:bf:1f:
         24:e3:ca:e2:d9:a2:b8:14:46:96:b9:39:69:d9:ac:10:cd:16:
         4d:96:8d:94:a3:38:7b:d6:d1:b3:27:a1:e4:d4:c0:ed:ad:7f:
         77:e8:43:79:50:fa:7b:15:50:39:1e:ea:95:bb:08:65:38:a1:
         4e:96:f4:8b:d8:c7:a6:26:7f:86:5a:82:32:a5:10:d8:e5:e2:
         cb:0f:5d:76:2e:33:fe:8b:99:d0:9e:84:18:3e:a7:72:d0:d2:
         90:ca:3d:b3:8e:34:99:82:c5:93:bb:e0:15:21:c3:ac:52:b6:
         e0:0b:a4:9b:40:d1:84:41:3b:7d:9b:f4:0f:da:18:12:fc:53:
         73:c7:e8:c4:05:63:89:04:f7:39:db:18:ca:85:e8:46:b9:7e:
         02:66:c6:fb:f9:a6:92:44:ea:04:ad:a9:6e:40:f0:ad:bd:d4:
         b4:32:a5:f0:80:38:66:b2:30:2d:c4:75:65:a1:c6:ce:d8:d0:
         35:06:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:52 2026 by rpki-client