Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File:                     h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier:          9xaN0QPlAOqdWsYS32Z6GcIDFFkUXWhJ1+Sd1vUOyJ4=
Subject key identifier:   9F:E8:80:CA:15:7A:A1:E0:54:0A:93:E6:12:52:9F:95:A6:67:D0:7C
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer:       /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial:       019D98F4428385CB5915E9684BB0B6670B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 01:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:37 +0000
Files and hashes:         1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: vt9Ohh3Jv17+vytMWMTCTZPoN/aJZFLydUTMysIZ2fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:42:83:85:cb:59:15:e9:68:4b:b0:b6:67:0b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
        Validity
            Not Before: Apr 17 01:00:37 2026 GMT
            Not After : Apr 18 01:00:37 2026 GMT
        Subject: CN=9fe880ca157aa1e0540a93e612529f95a667d07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:10:88:8a:c6:f0:8c:05:34:1e:f5:19:97:
                    06:b1:76:f2:35:da:ec:36:24:c8:74:bf:da:b8:12:
                    0e:a7:85:3e:98:13:7c:59:e0:e9:85:79:31:28:aa:
                    ad:71:dd:0e:d2:3e:64:47:c8:58:ac:30:55:a2:94:
                    83:26:eb:b2:b9:93:45:02:1f:19:7c:c1:b1:2e:89:
                    0d:57:c1:80:69:a4:96:70:4e:16:15:b9:78:0f:83:
                    06:05:a5:49:41:5b:79:6f:f0:7b:29:b0:18:97:05:
                    0a:26:0f:0e:cd:f3:da:1b:32:58:c7:b5:21:ed:03:
                    26:07:a5:48:17:68:91:75:5a:7d:00:da:00:76:5a:
                    4a:be:9c:32:bc:5d:0f:d3:a4:59:8d:68:66:1e:f7:
                    01:6d:16:10:b4:a2:47:84:f7:55:c7:19:b6:59:a6:
                    fe:be:85:59:fb:24:64:e0:c3:82:ca:e9:15:78:8b:
                    44:24:27:a9:57:4d:06:ef:88:07:fc:17:bf:e9:a4:
                    0d:9e:9f:6e:23:96:16:13:d4:0e:64:e8:c4:81:d0:
                    9e:3d:fc:4a:bd:d4:08:cb:9f:e2:bd:08:61:42:75:
                    11:12:a5:57:0c:5d:f4:8b:74:fc:28:34:ca:f5:3b:
                    0f:11:b1:c5:e9:8d:29:36:22:b8:ae:06:09:a0:4c:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:80:CA:15:7A:A1:E0:54:0A:93:E6:12:52:9F:95:A6:67:D0:7C
            X509v3 Authority Key Identifier:
                keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:83:8f:91:0f:ff:04:60:91:45:79:ab:b8:8d:24:de:8d:69:
         ee:14:8a:cd:4d:73:00:ab:8a:20:f6:aa:f7:5e:ac:54:a1:b2:
         b6:80:36:24:ed:e2:3e:80:48:66:2e:4e:c1:08:6e:d7:04:d5:
         95:6a:4a:e1:76:10:8a:ad:72:93:2b:86:f4:f8:7c:c6:0e:ea:
         d5:74:c0:a1:03:6b:20:31:fc:af:0d:4b:22:59:67:6a:4c:58:
         f9:6c:63:ff:54:5d:ef:dd:a6:03:29:8f:1c:cd:63:59:f4:24:
         cd:8f:14:0e:0e:f9:a7:1d:d6:a5:40:ac:41:16:4a:bc:22:81:
         28:8f:11:67:73:a7:08:ce:08:b6:a3:bc:f1:9c:8e:70:5c:a0:
         83:4a:6a:f3:fd:cb:d0:9a:d5:4e:e2:23:4c:4e:01:6a:a2:bf:
         81:30:b7:66:bf:bb:db:af:0b:d4:14:d4:a5:e4:89:26:c0:b6:
         f9:15:17:f5:64:b5:37:ae:39:41:54:c4:e3:c8:13:37:40:96:
         6b:12:23:70:bf:80:8a:d4:b4:fc:04:94:8d:ca:2e:5e:df:f7:
         0b:3e:b8:4c:98:47:61:cd:e2:c7:db:93:47:58:c4:3c:06:67:
         d7:0b:b5:92:ca:5a:a4:51:4b:5a:41:12:fe:db:e5:af:80:b2:
         c5:9a:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:25 2026 by rpki-client