Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          LbVlutMAa3SRE1UwMSCsEpYGwG4z1YBgCDyaXlKoz4g=
Subject key identifier:   08:8C:E1:8C:03:81:F9:35:CD:8F:41:05:E8:C2:1F:38:1C:5F:34:6D
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019E1E34FAE89DC95E019DA710556CB452DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1646
Signing time:             Tue 12 May 2026 22:00:48 +0000
Manifest this update:     Tue 12 May 2026 22:00:48 +0000
Manifest next update:     Wed 13 May 2026 22:00:48 +0000
Files and hashes:         1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: +nhu3EU5g18T3GH8K3ptPKpZJmIhkgno0KzdlSNCx8s=)
                          3: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          4: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
                          5: mEdwgIPRh23OxSoHlQNJuRMghjc.roa (hash: F8DBsuD0LXSZtLRp2HPMhvbe4OQSD53Wc5fBou6rnO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:fa:e8:9d:c9:5e:01:9d:a7:10:55:6c:b4:52:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: May 12 22:00:48 2026 GMT
            Not After : May 13 22:00:48 2026 GMT
        Subject: CN=088ce18c0381f935cd8f4105e8c21f381c5f346d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:82:3f:32:46:3d:0f:ec:11:8f:e7:ef:3e:
                    c1:85:b4:90:eb:21:04:8f:f0:b3:bd:97:a7:29:33:
                    5c:5b:3e:a1:c7:87:18:1d:9f:fa:ce:51:a9:1f:f8:
                    34:34:4f:55:39:3a:0c:78:52:72:4f:fb:59:92:3e:
                    ad:84:33:11:83:03:36:88:c5:6b:1b:16:c7:50:a0:
                    b3:96:dd:fb:21:cb:f8:41:e3:22:e9:5a:87:09:1c:
                    4e:ba:a3:37:e6:f4:a8:77:f1:77:df:f8:d8:58:21:
                    ec:e0:31:f4:c0:53:17:54:38:9c:bf:f2:c8:4b:0b:
                    7a:51:35:43:8a:bc:2c:ca:dc:61:15:00:ca:b5:d9:
                    9b:40:d2:55:5b:cb:e7:6c:61:1a:b5:e6:9d:bd:73:
                    a5:df:dd:18:38:7d:69:ea:55:d4:1a:74:6b:30:93:
                    88:a7:e8:8b:72:0b:f4:ff:97:85:1c:ab:d1:4c:d0:
                    1f:e0:67:b4:52:ec:fb:6a:8e:71:63:1d:b1:b4:7e:
                    0c:ad:70:b5:a5:9b:0d:1c:10:ad:a8:78:30:93:97:
                    c9:e2:45:4f:66:b3:c2:76:34:ad:cb:69:65:a8:39:
                    5a:c7:23:bb:83:7f:06:24:1b:41:53:a8:8f:f3:d6:
                    e4:10:f6:93:0f:fb:b8:86:c8:ba:ca:66:d4:3d:84:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:E1:8C:03:81:F9:35:CD:8F:41:05:E8:C2:1F:38:1C:5F:34:6D
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:a9:65:84:d8:ac:3c:29:12:fc:99:66:e4:39:38:77:71:
         94:76:98:43:b6:0d:3e:86:af:8b:1d:73:93:6a:62:e2:c5:4d:
         f5:aa:a5:4d:5d:a0:38:c2:a1:f1:fd:83:b8:be:6a:c9:03:bc:
         94:a3:fb:ac:52:91:ab:1a:2d:d5:63:21:3f:2b:2c:04:d0:cc:
         ae:5b:f5:e9:7d:12:0a:b5:9e:5b:15:fc:12:02:6f:55:da:f4:
         46:ce:a9:86:22:c2:bf:42:b6:c9:a5:cc:14:3a:68:01:01:98:
         cd:a5:5c:5d:cb:a3:77:99:b9:fd:ef:9a:89:c6:b6:c7:cd:c0:
         da:3d:70:71:44:5e:4f:c8:01:78:5e:0b:0d:9b:82:a0:94:3a:
         99:a5:c7:37:da:c4:e7:d0:94:9d:cd:b4:0e:32:3c:94:5d:31:
         7a:82:27:12:d7:28:ec:0c:11:a7:92:a3:81:7e:21:70:fa:a9:
         f1:38:c4:36:d8:c1:68:9b:ba:70:f4:18:e2:6d:7d:a1:06:e9:
         b1:4f:09:92:67:90:3e:f1:fa:b8:c9:39:41:21:80:1b:41:5f:
         36:09:7e:bc:cb:ea:06:25:28:84:8e:78:90:cb:11:db:94:f8:
         fe:ba:90:44:5c:ed:67:bf:8c:23:4f:e6:f2:d3:8a:30:08:86:
         4a:2a:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:40 2026 by rpki-client