Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File:                     h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier:          yWNv0/DMiDzVz9RZ3wpEI9wEzV90ZkZtaesW1yucK5M=
Subject key identifier:   F1:74:46:D1:A5:77:2C:31:0B:AD:59:9C:64:D4:28:F6:42:E5:91:E7
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer:       /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial:       019F8FB4E6BDCB4D9705FA0542BE81C0C612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number:          0150
Signing time:             Thu 23 Jul 2026 16:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:25 +0000
Files and hashes:         1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
                          2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: Qr77As6sVTB/suWtnY1SVbjyQnzybVfkddnwReGcARk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:e6:bd:cb:4d:97:05:fa:05:42:be:81:c0:c6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
        Validity
            Not Before: Jul 23 16:00:25 2026 GMT
            Not After : Jul 24 16:00:25 2026 GMT
        Subject: CN=f17446d1a5772c310bad599c64d428f642e591e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:8c:f6:2b:ba:ae:8b:c0:78:64:f5:e1:d0:
                    35:4d:7a:31:c1:0c:39:c1:48:7b:1b:1a:65:8b:21:
                    ce:27:12:30:ca:12:7a:a3:ea:57:f3:18:4b:25:51:
                    6b:f7:1f:0d:a1:3b:6a:f3:47:1c:85:39:36:fb:e1:
                    23:63:f0:98:16:25:6b:43:c5:89:0d:0c:f1:e9:6b:
                    49:ac:c7:49:df:11:b5:b4:59:d2:7a:ea:01:83:fa:
                    15:52:d8:e4:aa:0a:77:93:19:b9:67:88:59:99:04:
                    fb:dd:df:5e:f0:47:b4:16:5c:dc:e4:e6:29:45:ac:
                    6e:0c:6e:47:4c:f1:1e:7b:f3:f6:66:b6:87:a5:bf:
                    a9:02:17:bf:09:0f:6a:5b:f2:03:7d:fb:e9:60:18:
                    e3:83:10:89:ce:d2:a9:79:88:02:ed:e7:92:0f:1a:
                    ac:66:99:eb:4a:65:c3:d5:ca:5e:e3:dd:6c:2d:41:
                    dc:5b:ac:c0:da:dd:79:13:59:b6:35:0b:dc:d5:37:
                    8c:6a:70:33:58:ae:19:85:82:df:cf:69:49:df:6f:
                    07:48:74:e3:a1:0f:82:00:ad:73:92:4d:5a:4e:99:
                    2f:73:9b:23:fb:53:7a:b1:8a:15:9e:ab:7c:80:d9:
                    d9:eb:cb:0c:42:7c:46:f4:e3:28:6e:30:17:a5:eb:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:46:D1:A5:77:2C:31:0B:AD:59:9C:64:D4:28:F6:42:E5:91:E7
            X509v3 Authority Key Identifier:
                keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:01:9f:b8:8d:cb:ed:49:91:c3:de:6b:ab:8b:48:2a:05:08:
         9b:37:b1:b3:42:af:fc:fb:49:c5:57:6a:32:81:fb:7b:7e:ff:
         22:c9:31:58:89:c2:61:96:61:a7:ba:7d:b1:39:f0:26:75:59:
         27:08:96:8a:ff:44:84:71:20:fa:d9:92:42:26:d8:68:f7:ab:
         b5:a9:70:1b:d0:ed:99:60:c0:5f:f8:a0:e6:50:87:1b:b9:4d:
         42:0e:1a:c1:dc:18:eb:d1:cb:c0:9b:5a:3d:56:fb:4d:eb:cb:
         3b:93:92:8d:d2:2c:95:e2:5b:63:35:e2:ee:41:92:75:00:22:
         04:2b:5f:9f:b2:07:ad:92:18:4b:88:52:5c:59:3b:40:ce:5c:
         cc:98:4b:03:37:b4:17:c7:64:21:fe:43:ec:86:4f:e4:0b:9d:
         72:01:ec:a6:b7:57:35:1f:f7:b5:9b:2e:c1:b5:00:63:fe:5d:
         01:71:c4:d8:9b:c9:14:a6:e7:c0:d5:30:60:9b:0c:f8:f0:8b:
         76:21:c0:1e:c8:d4:b1:b3:6a:2e:cb:69:a8:3f:7d:81:30:1c:
         57:09:bc:81:e7:1f:de:6b:10:13:b7:01:92:17:32:0d:17:90:
         5b:f7:cd:d8:dd:08:ee:1a:f5:8c:6c:35:e4:38:bd:2c:b4:42:
         17:76:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:16 2026 by rpki-client