Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          olIufeQSFyfbv4nK3YzriRagToKRgPRn1ZLKsBXP/40=
Subject key identifier:   EB:D5:EF:FC:37:A5:05:A7:51:2B:F8:3E:0A:94:C0:41:0C:34:45:60
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       019D9999264F1BFB3A6291F5F674390FEFA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          174B
Signing time:             Fri 17 Apr 2026 04:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:43 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: iQRwAT9f+qLrHsi1K+sQpfN5X8I9xRum58jjvR5XwAc=)
                          2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:26:4f:1b:fb:3a:62:91:f5:f6:74:39:0f:ef:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Apr 17 04:00:43 2026 GMT
            Not After : Apr 18 04:00:43 2026 GMT
        Subject: CN=ebd5effc37a505a7512bf83e0a94c0410c344560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:2d:40:05:61:e7:8a:b4:0e:37:61:0f:93:
                    a4:8d:40:2b:90:be:ca:d4:e8:a9:c3:d9:1d:72:b7:
                    f8:dc:ab:70:83:c1:0d:38:eb:95:ca:18:56:d4:5f:
                    8f:a2:14:2c:7e:6b:4b:3b:09:6e:17:22:b7:2d:ba:
                    dc:f5:4c:78:5b:9a:7a:d5:72:01:56:ce:03:a6:9e:
                    8f:03:85:97:f9:9f:5f:50:22:85:87:e9:98:9d:1c:
                    9d:3f:bf:4f:6b:06:60:97:1e:dd:b5:88:8d:6d:bc:
                    71:b4:0d:d7:7b:45:4e:73:b3:2e:2b:87:27:9a:90:
                    d6:f4:56:4d:04:71:07:c8:24:28:23:f6:57:91:5f:
                    a2:f5:77:02:c1:59:4f:8c:81:65:24:8b:90:5d:ed:
                    ea:e0:ff:6f:08:d2:fa:dd:13:b4:a7:88:b7:94:ad:
                    b9:36:fa:3b:b4:a3:37:bb:63:24:f0:b1:6c:78:34:
                    4b:6c:93:4b:a1:06:44:9b:3c:8b:e4:a1:3e:46:e5:
                    c9:6a:cf:86:fa:54:a7:e4:fa:c7:b6:45:d5:26:f9:
                    ce:78:49:7a:fe:20:91:0c:a8:b2:02:8d:f0:7c:fe:
                    9c:76:4a:2c:2a:1c:68:37:63:ca:94:ec:62:e1:e0:
                    e3:05:23:7b:01:b6:c3:1d:7f:50:5a:a7:95:37:75:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:EF:FC:37:A5:05:A7:51:2B:F8:3E:0A:94:C0:41:0C:34:45:60
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:85:9b:89:ce:ae:af:12:e0:a0:af:a8:a0:f2:51:cc:8a:
         d5:ab:f3:f4:ad:47:66:04:42:a9:e6:94:34:20:60:f0:32:fd:
         76:e1:ae:9a:a4:fd:5b:f6:c5:fe:2c:f8:9a:d1:85:0c:4e:16:
         4f:7a:a0:5d:68:41:7a:51:f8:08:1e:b4:97:05:15:93:59:b2:
         37:4b:4e:a0:16:71:ca:b0:2a:06:84:88:04:8e:e8:d7:d6:21:
         ee:20:89:27:67:6c:a0:6d:99:da:11:98:60:0e:d5:da:30:6a:
         7f:0f:4b:0b:fd:c6:86:cd:08:4e:23:e8:e7:02:61:2f:e1:84:
         af:3b:d0:7e:e2:20:ab:a1:ed:db:07:a3:f9:87:39:97:b1:74:
         67:f9:21:b3:67:34:02:8f:37:e6:c3:b9:f2:3e:61:50:87:62:
         4e:2d:28:9d:69:6d:da:27:d2:a6:f6:fa:4e:bc:e1:84:48:eb:
         cc:88:64:3c:cb:05:22:46:71:63:29:e4:8a:e0:e2:8d:b7:1a:
         08:cc:57:9f:30:fb:36:07:2d:f7:4f:ce:dd:b7:96:3a:64:f2:
         64:25:75:79:51:f0:a9:9c:b4:a1:18:f5:9a:65:9c:7e:4d:94:
         fc:c1:7f:a1:4f:08:50:e5:cf:ea:4d:be:3e:b2:39:3c:3a:fa:
         3d:7f:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:17 2026 by rpki-client