Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          4PUMD+KOOhHeQNScPjt2aUtE5pucQvqdX1/AcKGS7pA=
Subject key identifier:   EF:35:FD:73:5F:70:DB:13:69:EC:AE:B1:0A:45:D9:17:20:A4:53:30
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       01A1DE395AB14C568725FFA6BB86C2A14B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          1982
Signing time:             Sun 15 Nov 2026 08:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:03 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: 9mHpc2RM80Ni4DbyqVb7LHHeixasYemaer0V61aUfDU=)
                          2: fLKMO8hs3PDpZkd8GtOpwqvqVu8.roa (hash: 4kQpIHT40JntKpu1JXiZTJm5zqdCdOd4w+rgU958suQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:5a:b1:4c:56:87:25:ff:a6:bb:86:c2:a1:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Nov 15 08:01:03 2026 GMT
            Not After : Nov 16 08:01:03 2026 GMT
        Subject: CN=ef35fd735f70db1369ecaeb10a45d91720a45330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:e6:ed:d9:c9:c6:6d:b9:23:4b:c9:17:2f:
                    a0:30:4c:0d:13:8f:a8:d3:e3:c6:da:ee:9b:5f:ba:
                    36:06:58:83:7b:2c:0d:4b:99:d8:71:a0:cb:f4:44:
                    28:11:0e:00:0b:7c:28:4d:ff:fb:49:74:84:99:72:
                    4d:a9:b0:a3:62:8a:72:8d:08:6c:28:a7:59:58:ad:
                    a1:9f:ff:95:2b:ef:a6:5b:71:6a:d5:6d:14:98:dd:
                    9e:d3:fe:de:c1:97:82:4e:a1:b8:f0:d5:39:51:b3:
                    e3:1f:f1:46:57:f1:5c:dc:94:a2:c0:76:34:20:b9:
                    8e:79:ee:4c:39:3e:fc:d5:fd:06:52:e0:8c:53:bd:
                    a6:41:f4:40:d5:b6:79:ec:73:34:a7:7c:ac:6a:a9:
                    0f:35:6d:87:99:b6:e7:aa:be:41:61:08:30:a5:4c:
                    75:05:11:ac:f1:84:0a:87:0e:6f:0d:a4:94:a6:68:
                    3d:04:54:37:43:14:c6:ea:10:48:78:1f:c7:0f:f5:
                    b0:f3:a5:c2:51:2f:d4:28:dd:4b:27:e2:34:9f:27:
                    3a:eb:9a:05:ea:62:90:e1:25:ee:2e:a6:a5:bf:58:
                    32:2f:2c:ed:94:d5:f3:a0:14:a5:7d:b4:6c:1e:68:
                    17:6b:87:b0:3e:b9:63:dd:8c:83:54:54:56:e2:2a:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:35:FD:73:5F:70:DB:13:69:EC:AE:B1:0A:45:D9:17:20:A4:53:30
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:0c:bf:43:b4:3a:fa:f8:54:2b:f8:bc:f0:a0:d2:57:54:
         e0:81:a4:d9:f2:01:db:ad:f8:a9:d3:a0:14:0b:cf:85:f1:d7:
         ab:8d:4c:90:8d:3b:91:41:43:7f:06:0d:b4:47:4a:74:e2:a5:
         f2:3a:43:c1:d4:68:a0:1e:01:3e:85:62:2b:9b:ef:4d:3f:83:
         87:17:3b:34:b5:45:86:29:b4:86:e3:58:2e:73:33:b3:b9:67:
         c2:e7:26:a6:13:92:55:ec:56:a0:cc:8e:31:a2:0f:67:7b:d3:
         75:7e:7b:ec:24:d8:d0:b0:ef:44:56:58:c0:f4:96:e2:f6:0a:
         e3:5e:d0:ee:88:fe:f1:4e:05:a0:69:2b:95:3d:b8:8a:84:dd:
         c4:bf:be:d5:9c:35:c6:d9:de:a0:a5:ef:77:5d:a5:5a:11:c7:
         7c:0d:12:4d:a1:dc:d6:2e:42:fa:5e:69:36:10:12:45:e7:43:
         52:3b:43:1e:26:66:b2:f6:28:66:49:90:bc:4b:cd:2b:5a:95:
         c4:37:ec:86:1a:c1:40:b4:e2:c0:82:7d:f8:29:fa:59:81:76:
         ab:d1:72:3a:93:93:ee:b1:2e:c0:de:ad:c9:19:88:77:19:5b:
         4f:ed:9a:ec:05:54:6b:7b:5c:59:db:f4:ec:a0:12:2e:84:9a:
         24:9f:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:36 2026 by rpki-client