Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File:                     ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier:          +VzBbBc1OAzIkWOWVUoUC2f09Q7ZuxEdwF7itQfq+NM=
Subject key identifier:   8C:1E:42:8E:C9:9E:17:3B:95:33:52:EF:47:18:CC:09:08:57:49:5E
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer:       /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial:       019EC413701B35F24016D68CFF4B124EB64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number:          1289
Signing time:             Sun 14 Jun 2026 03:01:08 +0000
Manifest this update:     Sun 14 Jun 2026 03:01:08 +0000
Manifest next update:     Mon 15 Jun 2026 03:01:08 +0000
Files and hashes:         1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: Wq5OHqAY6wn56GzT4vGSE3gnSKHCs/9mRt1xoOusWws=)
                          2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:70:1b:35:f2:40:16:d6:8c:ff:4b:12:4e:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
        Validity
            Not Before: Jun 14 03:01:08 2026 GMT
            Not After : Jun 15 03:01:08 2026 GMT
        Subject: CN=8c1e428ec99e173b953352ef4718cc090857495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:61:d3:82:b9:72:c9:e6:e0:30:20:ff:e4:
                    b0:58:2d:08:f6:98:1d:21:b7:eb:25:4b:52:1d:28:
                    2a:45:43:83:eb:9b:49:b3:33:2b:e8:60:ed:c8:f1:
                    34:09:a8:3f:36:83:ee:ca:9e:4e:dc:88:b1:33:16:
                    90:56:10:b3:72:6a:51:19:79:d4:50:3e:75:d6:3d:
                    e7:ec:49:be:f4:1a:33:19:83:67:9e:59:f8:69:7a:
                    7c:53:24:98:d6:ba:24:88:01:7f:76:30:51:22:b4:
                    f4:de:18:56:cf:6c:94:03:ba:5b:60:df:0b:83:6f:
                    bb:9b:1f:af:4a:26:bd:ff:c8:b1:26:32:02:d7:1f:
                    08:fc:ef:d5:5a:92:56:51:92:36:25:de:38:2f:26:
                    27:7d:74:71:00:10:84:20:a3:fb:9a:26:30:3f:0e:
                    b3:c9:6b:fe:02:e4:92:78:28:19:3c:a4:46:5d:77:
                    a4:61:98:3b:30:2f:60:bd:0f:25:23:7c:2f:aa:fe:
                    04:93:37:f3:fe:59:95:0f:6e:92:fe:62:b8:b4:7d:
                    57:b5:f2:62:7b:33:fe:52:5a:60:ab:0e:4b:bc:15:
                    68:dd:61:9e:7f:f2:e0:51:66:47:b1:83:71:c9:5b:
                    9d:17:18:26:8d:99:87:54:6d:f6:8e:ef:9a:4d:20:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:42:8E:C9:9E:17:3B:95:33:52:EF:47:18:CC:09:08:57:49:5E
            X509v3 Authority Key Identifier:
                keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:be:b7:7e:66:14:76:76:0b:c9:0e:79:e6:99:38:72:9c:
         cc:0a:28:49:ba:14:8a:a4:a4:d7:b4:41:44:73:89:7a:04:6d:
         2b:36:00:d7:d0:5e:1c:62:96:66:e1:0b:0e:08:b6:aa:f9:10:
         5d:cf:ba:8e:dd:f7:c8:58:98:6d:35:3b:b3:22:9f:46:3f:35:
         c7:72:7d:a4:0f:de:b0:11:c4:af:76:a1:05:ed:bd:bd:75:c6:
         b2:69:10:0f:ff:b0:7b:29:d5:8c:03:49:59:12:2a:ad:aa:89:
         0b:3b:61:5b:af:cb:e9:4d:bf:43:52:e9:a1:69:81:06:89:df:
         fb:da:23:1d:a1:ec:75:45:7e:2f:20:2a:51:70:a2:1d:59:fb:
         74:b9:03:59:59:88:a0:f8:f3:b4:1c:87:d8:2c:e7:e3:8a:84:
         75:19:9c:4c:9f:24:5c:5e:86:b4:08:82:68:8e:ef:49:06:6b:
         4f:1b:e8:a0:18:30:8c:9d:3d:a2:25:7f:17:39:04:7a:fe:e0:
         a3:a0:ca:37:78:51:42:08:81:fb:90:35:73:00:93:da:5f:a0:
         f4:66:2a:c1:34:a5:a5:cd:e9:84:de:b0:6a:1a:f3:36:cc:e9:
         cf:77:8a:59:5f:e2:bc:55:76:02:5d:56:a3:10:c4:40:49:6e:
         f8:25:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:32 2026 by rpki-client