Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          ja0vB2NjCJykUfKjVrG9KUnrpR/4XGVBJAenx5yXsJI=
Subject key identifier:   55:B0:71:7B:4B:CE:7C:8A:50:A2:4B:8F:F9:3B:CB:A3:55:BD:2A:A2
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       0197B77C3978DFB062AF72030D98437B35E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          143E
Signing time:             Sat 28 Jun 2025 17:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:00 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: 0F/6J+osGvDdhm8MI3S60yBaDitjBEetA4ToA0Jmy1U=)
                          2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:39:78:df:b0:62:af:72:03:0d:98:43:7b:35:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Jun 28 17:01:00 2025 GMT
            Not After : Jun 29 17:01:00 2025 GMT
        Subject: CN=55b0717b4bce7c8a50a24b8ff93bcba355bd2aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:fc:00:d2:0c:a8:3d:2f:e7:00:70:61:83:
                    85:87:7c:fe:56:16:ea:5d:4d:4d:9f:4d:e5:ee:2b:
                    52:8d:c4:28:6c:f5:25:cb:42:84:eb:77:6f:ee:a5:
                    77:48:80:7b:94:8c:2a:92:13:2a:0b:81:74:9b:64:
                    28:30:f1:2a:24:b7:63:af:8e:16:c9:0f:9a:8a:fc:
                    24:0e:ed:5f:75:88:16:4f:55:2a:b5:f3:83:56:99:
                    22:46:54:f0:73:b4:90:b4:4c:3d:30:92:3e:36:22:
                    b5:d4:39:62:f4:5d:b7:25:9e:af:3d:19:19:a2:ed:
                    f9:bd:d4:2c:94:1c:b9:15:9e:4e:1f:5c:34:35:6c:
                    96:6d:9d:25:53:02:7b:b4:64:a9:63:e3:28:a6:75:
                    3e:4a:2b:bb:62:40:3b:55:6f:ca:6e:c2:a5:13:ca:
                    d1:95:93:92:59:19:d7:8a:3e:d9:cc:df:25:eb:03:
                    b9:08:ac:9e:6a:ce:89:b2:34:c5:d3:a1:5b:d4:eb:
                    0a:70:f5:28:e7:9b:d7:99:cc:ff:01:4d:f5:6e:f4:
                    1b:10:c9:8e:cf:5d:4a:3c:63:0f:fd:ac:19:5d:d5:
                    79:21:2d:c0:99:14:de:8a:98:41:50:44:10:07:79:
                    0e:56:60:b9:a6:e7:1f:92:86:a9:0b:4d:19:c9:e0:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B0:71:7B:4B:CE:7C:8A:50:A2:4B:8F:F9:3B:CB:A3:55:BD:2A:A2
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:24:db:35:40:ce:10:dc:96:4a:c4:f0:28:9b:2f:2a:ca:b7:
         d6:ae:40:2f:d1:6e:0d:c8:4c:53:54:08:29:02:97:ce:0e:3f:
         6e:74:ac:c9:7e:e2:ca:8b:43:97:b6:92:93:d7:53:5b:d9:b4:
         bb:fa:38:88:1c:5f:9a:c9:53:9a:ae:1b:83:3e:19:bc:cf:8d:
         8f:b8:75:3b:b2:27:7d:c9:f6:48:f9:0c:74:ad:e6:30:5c:c1:
         4d:95:08:b7:ed:02:70:57:3d:f5:e5:36:3a:ab:5f:a2:34:cd:
         85:be:b7:cc:da:a3:06:77:8f:90:d7:ba:5e:4c:26:d9:6b:17:
         53:e1:c9:21:67:77:1e:fc:1b:99:04:15:34:5a:fd:13:52:78:
         1a:1c:8c:70:41:75:dc:f9:e9:c1:90:30:07:a2:b4:df:8a:07:
         70:01:86:d2:5d:db:01:55:1d:55:12:f7:31:36:dc:99:7d:64:
         5d:df:3c:17:dc:85:77:ab:41:46:de:11:5f:de:e0:ac:c2:3e:
         75:83:f8:bd:e1:a0:60:2f:bb:b9:f1:f0:55:c7:5f:1f:4a:f2:
         05:99:64:63:2b:3c:00:43:51:5e:89:de:3b:7b:9f:7f:20:33:
         29:8e:3c:95:23:ae:8e:e1:4c:c2:31:c0:46:3f:e6:d8:ed:c0:
         db:fe:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:08:08 2025 by rpki-client