Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File:                     h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier:          vcNO6rlBM09676oDrXCgMcZZW5djIZExIjCvHgBRTRQ=
Subject key identifier:   CF:D4:7E:0C:2C:89:38:22:64:8B:D3:CF:FF:C0:82:27:F9:59:91:9E
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer:       /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial:       019D99993DCFB25969A72215C10A57DEA870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number:          4C
Signing time:             Fri 17 Apr 2026 04:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:49 +0000
Files and hashes:         1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
                          2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: I/AVKwhb2gM4b/U0BuzN1ltTAZguKJGMqokrBXQUsTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:3d:cf:b2:59:69:a7:22:15:c1:0a:57:de:a8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
        Validity
            Not Before: Apr 17 04:00:49 2026 GMT
            Not After : Apr 18 04:00:49 2026 GMT
        Subject: CN=cfd47e0c2c893822648bd3cfffc08227f959919e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:f6:26:06:55:b5:a2:74:54:cf:7e:14:42:
                    f7:f5:8b:87:19:13:2f:69:a2:18:eb:13:f7:d5:f2:
                    78:cc:8a:79:68:e6:77:4a:ba:5f:0a:45:95:24:ac:
                    b9:b4:e5:53:e7:04:64:df:9a:28:cc:5b:38:bb:fe:
                    3f:a0:52:ab:ed:1b:37:3e:f1:da:19:a2:d7:e8:1d:
                    ba:34:53:91:cb:17:5b:91:ef:89:3a:f7:7f:fb:d3:
                    ac:67:1b:54:20:7b:b1:17:b2:36:24:be:25:88:04:
                    df:c7:e6:94:51:26:b1:46:93:56:0c:ff:0e:22:c1:
                    49:c7:60:f7:9d:ff:d6:68:fa:d3:fa:5f:b8:b4:67:
                    26:14:16:18:5b:3c:4f:a1:c4:df:c3:08:2b:64:04:
                    f4:63:09:1c:f7:12:a3:24:cd:fe:e2:da:a6:bd:19:
                    5d:20:d9:c4:5f:73:72:31:b6:76:9d:f8:8d:ad:9d:
                    6f:45:de:00:58:49:a2:76:67:d6:77:ef:4f:d4:f2:
                    f2:e4:45:12:7f:8f:69:23:8a:2c:73:15:a1:94:73:
                    20:d0:78:e6:aa:06:5d:c8:e9:c5:63:94:62:35:33:
                    59:0d:7f:f0:b8:0a:c3:4a:ba:98:01:07:41:99:57:
                    27:74:01:47:f7:7d:e3:c2:aa:43:f3:d8:95:21:0e:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:7E:0C:2C:89:38:22:64:8B:D3:CF:FF:C0:82:27:F9:59:91:9E
            X509v3 Authority Key Identifier:
                keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:e5:64:a0:e4:9b:9a:db:62:a6:e8:64:61:a0:fc:d0:27:
         7f:3d:19:a6:89:81:d0:5c:f6:87:48:6b:62:26:c8:ee:70:76:
         ce:24:ae:b8:04:11:2a:81:e3:0c:6a:07:47:0c:38:ea:e4:1d:
         91:de:56:38:a7:03:3f:9c:b5:73:8c:d4:80:58:be:b5:bd:39:
         e3:f4:79:08:9b:75:ee:80:98:bf:d8:04:89:7c:ec:e8:ef:bb:
         74:8e:fb:3d:8d:9c:94:08:f5:1d:25:19:76:d9:4a:04:c0:6f:
         da:41:5e:fc:56:5a:d9:de:68:a6:b1:12:ed:80:f6:d1:2b:d2:
         ad:7c:22:1e:c2:ed:a0:72:33:18:16:51:b9:8a:2b:c5:d3:11:
         93:42:e8:80:ff:97:f2:17:89:87:6e:9c:bc:3f:39:e2:0f:f6:
         22:7a:6d:14:d0:21:f7:55:c6:df:27:b6:1a:ad:34:3c:c2:64:
         40:95:b1:a0:80:f0:28:c7:bb:fc:aa:70:36:d1:e4:77:48:4c:
         c8:86:ab:70:02:03:ee:44:8a:10:da:24:53:a8:bd:58:9a:f7:
         9d:a2:6b:f2:65:98:0c:bd:64:17:76:86:bd:35:b2:f8:a9:c0:
         6d:da:d8:6d:56:87:68:05:ba:98:b4:2e:d2:50:83:31:41:f4:
         55:d4:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:47 2026 by rpki-client