Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File:                     CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier:          6UQy0afEyaTq1uHDXLAAIk+P59tl3lzZLn7tGXYPWRo=
Subject key identifier:   56:63:E8:12:09:E8:81:46:BB:51:CE:3F:5B:73:FA:BF:23:08:B0:72
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer:       /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial:       019D27DF88BCB620666A2210D398B7F86651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number:          06EF
Signing time:             Thu 26 Mar 2026 02:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:53 +0000
Files and hashes:         1: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (hash: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=)
                          2: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: eHZv79iqVlW3hKoX8hoQJU7F9ji4TT0bYTLOGu9fN8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:88:bc:b6:20:66:6a:22:10:d3:98:b7:f8:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
        Validity
            Not Before: Mar 26 02:00:53 2026 GMT
            Not After : Mar 27 02:00:53 2026 GMT
        Subject: CN=5663e81209e88146bb51ce3f5b73fabf2308b072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:b2:e9:1d:b3:9e:2b:66:72:ca:51:04:1f:
                    d9:25:24:da:88:83:2b:4b:13:3c:31:43:d2:61:50:
                    61:16:e2:d6:37:0f:ca:ca:a1:8b:70:48:22:98:e5:
                    76:d9:65:46:03:ef:5c:ac:1c:1b:44:5b:90:95:20:
                    20:15:82:5b:31:80:a0:ad:9c:69:b3:60:57:8e:c3:
                    92:70:b5:1f:08:41:37:09:56:8c:02:d3:e5:d2:22:
                    96:2a:69:eb:12:dd:88:ab:8c:68:63:e6:22:16:27:
                    2f:74:a2:cf:d5:25:ab:c6:72:bc:14:61:5d:c3:3c:
                    6f:29:8f:02:ed:9d:24:bb:eb:5d:fe:70:c9:85:5c:
                    72:8c:84:93:11:63:03:a8:b1:2f:ea:8b:d1:3f:77:
                    85:05:5d:41:80:29:1f:d8:eb:f4:f8:7f:b9:ed:d2:
                    93:ee:c5:9b:79:da:69:2d:49:0e:ed:a7:6e:77:a0:
                    39:24:8c:71:66:8a:d6:55:ac:d6:dd:48:b8:dd:f3:
                    47:47:7f:16:47:77:b3:33:fa:cc:1f:c1:8c:c3:f1:
                    b0:aa:4c:37:96:ab:e4:a9:12:62:7e:48:c6:6e:2b:
                    fc:b8:2a:f2:9c:0e:8e:a3:04:84:73:13:bd:6e:f2:
                    2d:58:fb:94:bf:75:66:b5:48:d5:bb:f0:8a:4c:34:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:E8:12:09:E8:81:46:BB:51:CE:3F:5B:73:FA:BF:23:08:B0:72
            X509v3 Authority Key Identifier:
                keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:72:79:9b:0d:01:66:1a:92:b0:05:b8:ab:ea:ba:25:92:
         2b:c0:50:43:48:43:7b:86:31:6d:33:4c:32:58:e0:8b:14:9a:
         1e:37:7f:e2:33:a2:9b:c7:a0:51:96:94:99:b5:75:24:15:07:
         3a:2d:b0:41:a0:70:25:5c:53:25:a6:37:21:2e:df:ed:2c:5d:
         c3:d0:7e:3c:2c:fb:7a:db:9b:45:d5:91:89:84:04:4c:01:be:
         95:5d:27:f3:ac:ae:be:fe:89:af:57:dc:bb:1d:e1:b5:29:97:
         2a:28:81:eb:ec:79:cc:8a:fa:67:3b:68:23:0a:c1:54:61:6e:
         9b:b3:9e:95:51:74:11:69:61:42:43:ea:0a:63:06:bd:6c:cf:
         6b:f2:97:47:86:0b:2f:6d:66:ba:f8:59:54:2b:c4:00:bc:16:
         5d:5d:23:46:b9:0c:e6:05:9b:7b:b9:1d:8d:a6:6b:4a:a7:15:
         9e:86:23:23:f9:b7:c7:47:33:68:65:c2:c2:04:01:f7:e3:24:
         37:2a:c5:48:24:3f:c5:1b:37:b8:24:f6:0d:7d:fc:58:0b:af:
         1e:7e:cc:23:f5:b5:a2:c1:4e:b0:60:a4:6f:02:4c:6c:22:60:
         70:b9:84:51:48:3c:77:03:02:23:8f:be:ed:a4:8b:20:7b:09:
         f8:4c:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:34 2026 by rpki-client