Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File:                     CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier:          f+E/0hsdpOozqYv+3s3YbrOAv9R4MSuNrbQgrN6JP3c=
Subject key identifier:   24:88:D7:D7:AC:2A:59:2B:E9:F9:55:4D:4D:40:13:32:16:7C:D8:F1
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer:       /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial:       019E1DC70944E18937BCAF903ACF6DC571C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number:          1489
Signing time:             Tue 12 May 2026 20:00:43 +0000
Manifest this update:     Tue 12 May 2026 20:00:43 +0000
Manifest next update:     Wed 13 May 2026 20:00:43 +0000
Files and hashes:         1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: ajTC/+ppZ878dyc+vAjm2Ib2P4WFArY8udfxbZemxSU=)
                          2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:09:44:e1:89:37:bc:af:90:3a:cf:6d:c5:71:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
        Validity
            Not Before: May 12 20:00:43 2026 GMT
            Not After : May 13 20:00:43 2026 GMT
        Subject: CN=2488d7d7ac2a592be9f9554d4d401332167cd8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:19:73:ce:e5:22:ee:5a:e8:23:1c:f6:23:
                    25:3b:ff:0f:59:af:66:c7:a7:b6:33:ce:39:cf:6d:
                    d5:f4:b1:79:83:74:dd:31:1f:6a:b9:3f:61:ea:5e:
                    e4:56:d0:39:f0:20:9b:10:dd:55:2f:8d:cb:8b:60:
                    4a:f8:11:9f:b7:ff:d8:7c:92:c0:98:d0:4c:fb:55:
                    fc:25:b5:16:75:68:1a:b9:ba:10:7d:d2:ad:a0:67:
                    cd:e8:08:53:5d:e7:91:87:ee:29:e3:4e:4f:cb:16:
                    90:e1:14:cc:b0:de:03:25:3a:7e:82:49:50:78:f7:
                    46:1f:82:c0:02:77:af:ae:fa:38:02:31:51:85:30:
                    01:38:73:00:d1:ab:ee:00:4c:1b:69:07:d8:67:64:
                    d5:6e:d9:3b:3b:b6:db:f2:63:61:99:7d:3c:a0:e7:
                    a0:46:35:2c:45:ca:be:f8:4a:22:26:c2:a3:28:ae:
                    82:3a:fe:e7:3f:0d:a2:18:f5:db:bd:12:18:f2:3a:
                    69:14:e1:19:b4:01:05:ca:5a:09:4b:a7:46:e0:c7:
                    d4:cd:2b:f5:ac:22:fb:76:57:cc:cc:cd:b9:cd:5f:
                    50:bd:01:12:68:15:e2:39:e6:37:de:c1:00:ac:5f:
                    27:bb:51:c9:2e:7c:67:9d:7a:ff:46:1d:0d:82:2e:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:D7:D7:AC:2A:59:2B:E9:F9:55:4D:4D:40:13:32:16:7C:D8:F1
            X509v3 Authority Key Identifier:
                keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:d2:cc:39:77:64:6a:e0:f0:8a:09:4f:e8:a0:d2:eb:03:
         27:a3:d5:18:f9:c2:39:11:58:b6:57:06:4e:21:91:33:7a:6d:
         ab:55:75:61:f2:71:60:5d:2e:9f:4e:b2:8a:8e:91:e3:ed:c5:
         68:23:da:cf:11:b4:6a:b1:34:b5:33:2b:f4:22:76:a9:8d:58:
         3d:e4:ad:06:e9:2f:84:fa:7e:f1:33:d6:83:b3:ae:b0:2b:f4:
         63:54:77:db:b6:fe:09:47:af:5f:35:2d:c7:3e:6d:68:37:b6:
         76:8a:af:4b:02:ec:f7:7c:7a:6f:d7:0d:48:3a:69:de:ad:a5:
         2f:a9:fc:54:48:1c:36:99:be:15:e6:2a:9c:66:a9:19:36:b1:
         3a:7e:dc:96:90:5e:a5:c2:17:ce:a2:3c:69:3d:be:de:52:6e:
         2f:6d:8e:b3:53:c5:dc:5a:59:01:30:25:8a:b1:02:c7:61:ae:
         5c:82:66:96:bb:54:0e:17:5e:ab:f9:1d:2e:71:07:58:fe:3b:
         2d:11:45:ff:b0:ab:3c:9e:b5:78:27:d8:b0:26:bb:09:11:df:
         f8:4a:e3:6e:80:9c:44:ca:23:4b:4d:bf:7f:d6:1e:63:ab:b6:
         37:19:64:bc:c8:b4:21:e0:d0:84:81:15:b1:42:a5:eb:c3:b8:
         5c:2a:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:32 2026 by rpki-client