Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File:                     iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier:          1A5LCRCVyx85v6tYZfgfFefVJuP+m1TuG22SA3iyZGs=
Subject key identifier:   CE:BA:CE:6D:75:03:FE:DC:04:7E:72:E7:C7:B3:28:17:92:74:BD:93
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer:       /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial:       019FAAF5984CEEC6B43C99FF32F09CAAE4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number:          196A
Signing time:             Tue 28 Jul 2026 23:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:49 +0000
Files and hashes:         1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: PR4IDSyFEH6EeSXLFPY81klKfjE77I1Derw6hJmBW9Y=)
                          2: iojxs-4stuh5VLOzZynsjkM6c0E.roa (hash: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:98:4c:ee:c6:b4:3c:99:ff:32:f0:9c:aa:e4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
        Validity
            Not Before: Jul 28 23:00:49 2026 GMT
            Not After : Jul 29 23:00:49 2026 GMT
        Subject: CN=cebace6d7503fedc047e72e7c7b328179274bd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:d7:4b:a8:48:12:56:49:73:c2:36:ac:75:
                    19:ef:21:19:fc:40:8b:b4:7b:9a:e8:1b:a2:0c:a6:
                    6e:fe:0c:e4:5a:00:54:84:34:43:ed:7c:32:97:e7:
                    fd:54:36:f8:6e:45:89:f6:f6:62:73:36:be:08:be:
                    5e:1f:87:33:38:ca:28:83:29:ae:14:84:b7:21:2f:
                    a3:0d:16:19:fd:55:c9:fd:62:9b:5e:d8:24:92:71:
                    6a:5b:b6:4b:b5:92:ca:6b:a6:14:33:9b:6e:87:ee:
                    d8:60:2d:7c:fc:47:73:66:94:20:6d:12:50:fa:ff:
                    70:98:54:ca:62:88:03:d3:5a:72:2b:6a:27:c8:a5:
                    92:15:cd:0c:51:fe:96:5e:63:ff:76:e8:a3:a2:dc:
                    3f:40:96:9c:34:a7:90:db:5f:4b:d9:71:8f:7e:cd:
                    25:09:76:11:e8:57:24:a7:d4:54:52:f9:fd:90:3f:
                    ff:ce:02:ad:a7:a6:fd:14:fb:45:e8:fa:f0:01:64:
                    5a:43:f9:32:36:5d:3d:e4:e5:f0:a0:2e:75:6e:7d:
                    c1:3c:be:eb:9b:42:e2:76:50:07:35:54:98:7f:a4:
                    d0:ae:58:1f:23:ad:c0:4a:6b:0d:71:86:bb:1b:2b:
                    15:bf:75:5f:9d:f7:32:6c:0a:8f:4f:d8:35:22:dd:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BA:CE:6D:75:03:FE:DC:04:7E:72:E7:C7:B3:28:17:92:74:BD:93
            X509v3 Authority Key Identifier:
                keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:27:26:71:2e:24:f2:e8:8c:87:87:a9:62:88:41:c0:64:
         65:65:97:6e:40:a6:d8:0a:6c:ba:60:84:e9:ad:ec:e0:aa:21:
         2e:e2:ed:f8:1d:03:d7:ab:83:dd:ea:24:43:74:5f:09:6b:08:
         d7:96:64:79:82:31:2c:01:c3:01:37:19:1d:74:1b:6f:a0:99:
         6e:1e:23:4c:bc:86:0d:7b:0b:59:38:54:19:f7:c7:b4:47:27:
         70:4e:5f:b4:7b:df:35:13:10:37:36:8f:f3:cb:4a:c8:d8:0d:
         b5:62:1a:50:89:21:8d:41:2f:01:19:a2:d4:c2:b3:63:7c:4a:
         83:11:d2:58:42:e0:9f:ec:ed:b5:95:8f:f4:e0:72:90:c3:85:
         5a:f6:0a:8e:5c:a1:25:e0:23:a3:99:66:60:0d:4d:7c:34:25:
         96:bb:ea:11:a6:c8:09:8a:66:3f:d8:e3:9e:66:d5:7c:97:90:
         7e:4d:14:0a:7c:55:33:da:fc:a1:31:5e:c2:32:9d:04:44:2e:
         38:d9:f3:cb:ed:fc:06:14:93:1f:53:fd:8d:ad:d6:4b:62:a4:
         2e:70:fe:02:8f:f7:d7:3b:03:56:b6:24:4d:f0:4e:77:77:88:
         a5:a8:c6:37:05:99:48:aa:00:85:fc:58:ac:44:70:93:54:c7:
         b6:be:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:00 2026 by rpki-client