Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File:                     h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier:          ae+ZEVw9hAmG82ByiEKQEBcIc3Wp+hLfM0VYSAXDWdQ=
Subject key identifier:   CA:DD:E3:64:69:A9:A1:EE:AA:9E:72:6D:E5:6B:19:9D:09:6C:80:35
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer:       /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial:       019EBF23A170F5A4229D379C2DF29C5E022A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number:          E4
Signing time:             Sat 13 Jun 2026 04:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:43 +0000
Files and hashes:         1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
                          2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: 97tMemqYGKd9jnA/spv223t/flTnZy5BoGyDjZ1mPfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:a1:70:f5:a4:22:9d:37:9c:2d:f2:9c:5e:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
        Validity
            Not Before: Jun 13 04:00:43 2026 GMT
            Not After : Jun 14 04:00:43 2026 GMT
        Subject: CN=cadde36469a9a1eeaa9e726de56b199d096c8035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:bf:99:79:c7:c2:92:62:2f:9e:cb:b2:53:
                    9f:d7:07:c7:42:53:1a:6a:78:b2:47:0e:c1:e9:62:
                    66:7b:ee:05:f5:fd:d5:60:88:24:e0:d0:e7:b3:d1:
                    cd:81:13:c5:bd:3e:fb:ee:ba:0d:48:7f:dc:c6:78:
                    46:ab:a3:d0:53:84:42:30:b3:1b:33:38:2f:94:b9:
                    77:e6:c9:f2:fa:33:78:40:09:81:f4:2b:6a:d4:27:
                    54:c7:e4:d2:a3:46:70:56:0e:60:70:7e:de:84:0f:
                    f7:fe:d7:bd:d4:a1:ae:f3:6b:85:d9:27:1b:66:71:
                    9c:37:88:68:b7:9d:f7:4e:d3:06:95:61:35:62:ef:
                    81:c7:78:06:49:34:35:22:07:ff:99:aa:ec:76:ab:
                    b3:d4:34:d3:fd:05:7f:91:f8:37:4d:b1:c1:cd:0e:
                    a8:32:dd:a2:f4:20:bb:b7:6a:50:e4:8f:5b:c9:5d:
                    9b:ed:63:98:f4:8f:e2:4a:8b:e8:41:1e:06:f5:7a:
                    5f:27:30:c4:ad:3f:e8:6c:64:c7:1b:cf:fc:4c:f6:
                    c4:fb:69:03:89:55:00:2e:e8:74:24:41:a1:40:f1:
                    78:38:f7:00:b1:24:f5:25:d7:bc:6a:12:69:81:1d:
                    6d:8c:30:32:c1:36:97:8e:6d:27:c0:8f:69:eb:5d:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:E3:64:69:A9:A1:EE:AA:9E:72:6D:E5:6B:19:9D:09:6C:80:35
            X509v3 Authority Key Identifier:
                keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:5a:a2:cf:50:b1:ba:65:9b:31:ac:b5:8d:20:98:f6:88:
         82:c0:13:8b:c0:97:4b:e3:da:55:cd:2b:98:da:16:07:1a:b8:
         da:04:c2:7f:a9:65:31:81:a8:bd:dc:93:82:64:b4:02:d2:9f:
         ff:04:e0:aa:3f:22:5a:9c:18:4f:3e:b5:7a:fc:28:08:50:90:
         2d:db:07:9d:2f:e8:3e:53:49:be:9d:78:49:45:b4:42:17:0b:
         6e:34:66:5a:42:a0:f5:fd:f2:58:30:b0:1f:0e:51:95:4f:24:
         64:dc:83:a6:fe:b8:9b:b2:8c:34:39:09:46:41:c1:85:64:7c:
         43:37:b8:50:1f:84:fa:4e:e5:ea:2d:b0:21:a6:23:24:2a:39:
         1e:78:ec:56:f5:04:0f:75:75:7e:3b:86:d0:fe:83:7a:5a:ed:
         9b:6e:77:19:ce:8f:92:8d:2d:7d:a6:66:eb:a6:0c:eb:ac:4f:
         90:1f:ac:f6:84:13:09:1b:73:6c:0a:47:79:21:c4:ce:88:e1:
         8a:72:ea:1e:85:ba:24:58:3c:95:93:68:30:38:17:e8:47:89:
         c8:ee:9b:f5:be:dc:39:4a:b6:a7:53:f6:5d:3e:e7:d9:0f:d0:
         57:10:52:08:32:9f:4c:7d:a2:c4:a5:14:9b:18:b4:72:ea:82:
         dd:a6:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:13 2026 by rpki-client