Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          aiU4sA7v8ohNzS2n5V6n9G26ATVvK4/MJeIGt30VHOc=
Subject key identifier:   C2:CD:16:B1:F9:B0:67:48:59:C1:CD:62:CF:33:95:39:D4:8C:96:F7
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       019F90C8349664386942E772AE381C5B2A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          05AE
Signing time:             Thu 23 Jul 2026 21:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:07 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: L+SM4kQOYDo2+I/vzE/H+r2vtacPAx1WKqonKuUsy9Y=)
                          2: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
                          3: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
                          4: v_sjZEWKqFNaPolplPEIVetQcjo.roa (hash: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=)
                          5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:34:96:64:38:69:42:e7:72:ae:38:1c:5b:2a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Jul 23 21:01:07 2026 GMT
            Not After : Jul 24 21:01:07 2026 GMT
        Subject: CN=c2cd16b1f9b0674859c1cd62cf339539d48c96f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:c4:63:f7:fd:f1:78:43:aa:b8:e8:07:8e:
                    0d:1c:dc:af:e4:41:8d:fb:0c:ea:95:d6:ab:76:49:
                    26:05:e2:ed:3d:08:a8:45:60:67:db:4d:9f:9a:55:
                    53:d0:aa:d6:cb:22:08:1d:e4:73:69:b9:d2:74:f5:
                    1e:65:52:98:15:84:8a:46:08:0a:b2:5c:8f:9f:c2:
                    86:21:90:a4:78:c5:76:10:d2:15:df:c8:16:41:ef:
                    3a:31:2f:41:81:b4:66:23:57:38:29:a3:d1:75:65:
                    f7:90:d1:58:6a:6b:78:c7:46:09:57:3c:0b:43:1d:
                    38:9c:94:37:63:b5:0a:ce:2b:9f:95:70:9e:e2:9c:
                    f6:82:bf:68:51:a3:50:1f:de:3f:41:12:00:fc:74:
                    d6:fc:e4:e8:56:55:fb:5d:ce:c9:14:2c:03:04:0a:
                    44:aa:42:e8:91:55:1c:2e:c8:29:32:4e:d2:6a:6c:
                    45:6b:f9:68:48:46:a3:59:8d:53:fb:9d:1d:3d:71:
                    4d:62:2d:0a:96:29:48:0d:3d:54:08:13:6c:a4:1f:
                    d6:87:86:2a:e8:86:35:b1:ac:bb:82:d7:76:b9:2c:
                    f8:cb:b0:c0:c7:38:74:cf:28:62:39:c4:03:db:ba:
                    f0:02:1a:7c:2a:54:04:b0:81:df:35:12:ad:aa:0c:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:16:B1:F9:B0:67:48:59:C1:CD:62:CF:33:95:39:D4:8C:96:F7
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:d2:99:44:00:d4:e0:12:06:fc:50:64:d7:6a:5a:27:29:
         c3:b2:82:5a:d0:0c:b4:9d:fb:07:b0:b0:96:a3:5d:9d:85:9e:
         f0:b1:1c:fd:83:1a:00:08:07:1f:ae:8d:87:f5:64:3c:35:5a:
         4f:80:e7:14:00:4f:c1:a0:e7:76:1b:b1:bb:fb:1b:30:ee:cb:
         ba:d5:b9:af:0c:47:0f:da:4a:7b:06:12:10:cb:21:6e:4f:f6:
         46:b2:99:8b:67:5b:ba:99:c8:55:9e:24:1c:cb:54:b1:6b:36:
         24:ba:ce:4e:19:aa:0a:52:1a:d1:60:9c:dc:3b:62:bf:dc:ae:
         ad:3b:1d:2b:df:48:34:2a:18:ca:d9:8e:c4:12:d1:a0:ba:45:
         f0:f2:d3:29:d4:26:a3:a6:b7:73:2c:85:c1:fd:bd:8b:3a:4b:
         a9:e4:bf:a4:a8:3f:37:d0:7f:73:8c:ef:08:51:bc:0d:a3:a8:
         41:d6:69:65:f6:53:74:59:f9:71:1c:95:87:5f:11:95:39:56:
         cd:86:30:f6:31:0e:85:c8:52:0c:39:fc:4a:72:24:61:fb:66:
         77:65:a9:97:7b:bd:5b:51:5b:a2:79:25:8a:ef:83:cd:66:fe:
         06:61:34:28:53:79:f4:67:f8:6e:e9:1f:b0:3a:15:4b:8d:1d:
         99:0a:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:08 2026 by rpki-client