Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File:                     ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier:          nhqJPHN5BztMEmrXXel2KLQ+mZlCNpDdjuGt3Uzxf0Q=
Subject key identifier:   99:79:28:4E:F4:16:DC:B7:62:75:9A:93:7E:BC:5D:22:2B:AD:94:87
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer:       /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial:       019D98BD89657DCF79E8555541AFE21DB5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number:          11EE
Signing time:             Fri 17 Apr 2026 00:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:51 +0000
Files and hashes:         1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: yPfEZ7jkrOH2gHaFd3GHHfy9YSvbCQmAw8cjKJXxGt0=)
                          2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:89:65:7d:cf:79:e8:55:55:41:af:e2:1d:b5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
        Validity
            Not Before: Apr 17 00:00:51 2026 GMT
            Not After : Apr 18 00:00:51 2026 GMT
        Subject: CN=9979284ef416dcb762759a937ebc5d222bad9487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:28:07:06:14:c4:05:e0:95:7a:ae:a4:cf:
                    5f:f2:bc:65:76:cf:b1:6c:5d:df:41:de:14:1b:b6:
                    1b:91:64:fc:72:c3:fc:5d:a7:16:d6:e2:07:3d:52:
                    7c:20:dd:24:1d:ae:9e:f1:97:14:27:4b:ee:90:79:
                    ca:a1:e4:fa:0c:67:02:a0:0d:31:5b:08:ed:e8:91:
                    46:73:d6:4e:fd:33:bb:a2:9e:5a:68:9a:3e:3c:fd:
                    3a:a4:0a:9c:db:4c:57:34:9e:64:2e:2b:f7:a8:44:
                    f3:59:ab:f0:23:13:d0:59:5d:cb:fb:a2:7a:31:12:
                    4f:38:97:b8:ec:52:13:e0:10:6b:e8:62:43:cf:6f:
                    7e:d7:95:70:7b:0e:72:60:47:73:c0:fa:9d:66:94:
                    c4:5b:ba:43:cb:4a:aa:6b:50:bc:f1:94:c1:9d:d8:
                    44:4a:68:34:f9:8c:a3:5c:76:58:58:d6:28:3f:9c:
                    72:50:40:b9:d3:ca:fc:34:cf:9e:00:6f:13:3f:da:
                    03:09:56:14:a2:8b:e8:38:9d:9b:76:27:e2:e9:91:
                    d1:1e:ed:0c:e8:9d:14:1f:d7:4c:62:78:12:62:66:
                    ec:6e:57:2d:3c:4c:57:ca:d2:44:ea:c4:94:71:eb:
                    2f:5b:24:a5:3f:d7:62:e1:57:2a:09:39:37:92:e0:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:28:4E:F4:16:DC:B7:62:75:9A:93:7E:BC:5D:22:2B:AD:94:87
            X509v3 Authority Key Identifier:
                keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ba:fd:a7:58:06:5b:d9:6f:2d:5e:f9:82:02:1c:b2:57:33:
         77:c8:d9:42:d3:20:68:5f:d2:bc:66:45:a8:ef:53:cc:56:21:
         a3:7b:16:7b:f3:76:b6:86:69:be:2e:ca:26:a6:b8:79:4a:31:
         a4:99:1d:56:6d:a0:a0:55:4a:9a:84:03:67:8f:0d:27:6c:22:
         0e:4a:8f:b3:80:de:4a:10:29:d0:6c:ea:84:f2:4d:66:87:35:
         8f:91:a3:8f:e8:ba:63:3f:5b:28:be:0b:18:c5:1f:e8:73:9f:
         46:33:65:ef:21:bf:0e:be:65:76:5c:a3:2f:eb:50:4c:2a:3b:
         71:14:94:9f:47:47:32:fc:a1:1e:e0:67:d6:3c:42:db:8d:5f:
         ed:29:86:89:29:75:f9:d6:a3:93:ad:6c:18:1b:d0:ff:8d:f4:
         91:9f:51:f0:05:07:f0:f8:86:48:b6:c5:cf:b5:74:97:68:a3:
         d9:86:9e:13:9a:ac:18:93:1d:8c:77:d0:1d:2a:e0:54:22:af:
         53:1e:5b:4e:de:8e:32:0f:7a:6e:69:84:83:6c:0e:c5:e5:30:
         2b:89:9b:3a:4f:63:05:50:d6:69:e3:fe:c9:67:a5:07:c3:7f:
         9d:3a:35:ed:9c:91:06:1d:32:31:0d:02:5c:97:4d:ce:cf:f5:
         4b:58:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:16 2026 by rpki-client