Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          ALfxWBi5jBgdT1PrpuEVp4g29gqBi8IzP1HBbmIRBJk=
Subject key identifier:   63:54:AC:4B:B4:EE:E5:26:CA:D6:A6:E6:16:D7:AA:29:8A:2D:9E:C5
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       01A0CA7DF706EC98809FC8EA16618D22638C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          18F2
Signing time:             Tue 22 Sep 2026 19:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:47 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:47 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: 3oiT8iFPfqr5kM9WfuvLq1NgFoZVy9dDB07KWAg/sZ0=)
                          2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:f7:06:ec:98:80:9f:c8:ea:16:61:8d:22:63:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Sep 22 19:00:47 2026 GMT
            Not After : Sep 23 19:00:47 2026 GMT
        Subject: CN=6354ac4bb4eee526cad6a6e616d7aa298a2d9ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:18:6e:df:45:33:ac:bb:9d:79:00:a4:d7:
                    ff:09:f4:36:50:9b:7d:45:bc:b7:0b:02:07:f8:5c:
                    be:82:11:4d:5a:3c:14:6a:df:9a:aa:5b:af:2e:f9:
                    91:ae:e0:58:f4:9c:35:fd:11:54:fa:c3:ed:d8:77:
                    3d:b9:4a:bb:0b:5f:91:1a:0a:1a:5b:82:90:02:76:
                    dd:8c:3a:8a:a7:18:7d:65:b4:71:78:fa:2d:a9:bf:
                    60:54:98:53:f3:5d:a7:40:2b:26:74:de:9b:9f:6b:
                    e2:f8:b0:1c:f6:da:9e:f5:47:0f:bd:9e:94:dd:1f:
                    d7:fc:aa:09:a6:38:75:91:8a:95:b4:72:fd:2a:ee:
                    6e:74:c4:ab:f3:55:72:74:b4:43:74:bf:77:ce:28:
                    75:01:0e:a6:1b:39:0d:fe:69:c0:70:33:69:83:09:
                    d2:b4:17:d4:06:7b:b9:33:db:6b:a1:b6:98:01:b0:
                    4d:74:f4:08:24:ac:18:16:1d:5f:64:2b:6c:aa:b1:
                    37:1b:4c:6b:0f:ab:d5:ae:a3:0a:cf:6e:6c:85:52:
                    79:d8:85:b0:b9:cf:4d:e7:90:f1:ca:b6:77:6a:87:
                    4e:11:b0:7d:b5:c7:cc:19:76:cb:01:a3:c8:17:7b:
                    0e:4b:f4:35:48:38:fb:bb:45:a6:2a:9c:d2:e4:b6:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:AC:4B:B4:EE:E5:26:CA:D6:A6:E6:16:D7:AA:29:8A:2D:9E:C5
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:d9:2b:e4:ba:89:71:7c:72:2c:86:64:ca:a2:26:69:5f:
         b7:d0:50:30:7d:68:00:49:e5:37:c7:87:17:f1:ff:43:9a:6f:
         78:fe:63:5a:2e:92:f2:7d:70:39:43:b1:d9:67:89:12:65:09:
         16:60:87:c4:e8:20:2e:31:fb:ba:ea:af:55:53:41:a4:4f:21:
         a6:4d:68:6a:cf:c0:54:d6:43:07:41:8f:50:40:b6:47:0e:66:
         91:77:3b:72:e1:fe:6e:83:d5:a9:a2:40:5b:51:57:f4:74:75:
         38:9a:b5:5f:f6:67:3e:49:99:97:d0:70:ea:89:b3:67:e7:26:
         d0:50:ff:44:3c:f5:72:c0:66:5a:4d:b3:e9:8c:8c:8c:42:e4:
         96:af:23:37:31:b0:f4:44:a4:22:72:eb:cf:ae:9b:5d:08:41:
         a4:2a:b6:05:8a:b1:81:52:89:aa:22:ff:23:f2:01:69:3a:64:
         ad:13:74:9f:77:cc:6a:a0:ac:bb:09:ad:5a:ef:5b:e4:0f:88:
         03:4f:6e:71:c8:ee:cc:4e:ae:44:a7:e0:4b:da:31:1a:3f:04:
         9e:97:da:42:74:68:ad:8f:af:fe:d5:87:54:46:0a:f9:d5:f9:
         5b:a4:eb:28:7c:6b:32:17:c7:c4:a3:57:d7:6c:9a:89:3b:1e:
         57:94:1d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKffcG7JiAn8jqFmGNImOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy
ZDM2YTUwHhcNMjYwOTIyMTkwMDQ3WhcNMjYwOTIzMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg2MzU0YWM0YmI0ZWVlNTI2Y2FkNmE2ZTYxNmQ3YWEyOThhMmQ5ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRoYbt9FM6y7nXkApNf/CfQ2UJt9
Rby3CwIH+Fy+ghFNWjwUat+aqluvLvmRruBY9Jw1/RFU+sPt2Hc9uUq7C1+RGgoa
W4KQAnbdjDqKpxh9ZbRxePotqb9gVJhT812nQCsmdN6bn2vi+LAc9tqe9UcPvZ6U
3R/X/KoJpjh1kYqVtHL9Ku5udMSr81VydLRDdL93zih1AQ6mGzkN/mnAcDNpgwnS
tBfUBnu5M9trobaYAbBNdPQIJKwYFh1fZCtsqrE3G0xrD6vVrqMKz25shVJ52IWw
uc9N55DxyrZ3aodOEbB9tcfMGXbLAaPIF3sOS/Q1SDj7u0WmKpzS5Lbr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNUrEu07uUmytam5hbXqimKLZ7FMB8GA1UdIwQY
MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt
MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk
LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzrZK+S6
iXF8ciyGZMqiJmlft9BQMH1oAEnlN8eHF/H/Q5pveP5jWi6S8n1wOUOx2WeJEmUJ
FmCHxOggLjH7uuqvVVNBpE8hpk1oas/AVNZDB0GPUEC2Rw5mkXc7cuH+boPVqaJA
W1FX9HR1OJq1X/ZnPkmZl9Bw6omzZ+cm0FD/RDz1csBmWk2z6YyMjELklq8jNzGw
9ESkInLrz66bXQhBpCq2BYqxgVKJqiL/I/IBaTpkrRN0n3fMaqCsuwmtWu9b5A+I
A09uccjuzE6uRKfgS9oxGj8EnpfaQnRorY+v/tWHVEYK+dX5W6TrKHxrMhfHxKNX
12yaiTseV5QdjA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:26:09 2026 by rpki-client