Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          j0fPHVTU3vnUiHHKwNAUyo+HwIxJdX/2ErC8tpDf+24=
Subject key identifier:   88:AC:B6:33:08:21:11:54:57:B9:BD:20:D5:F7:97:C6:8E:90:C0:C1
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       019FA8D0697D892133321BAD9D05542AD7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          185C
Signing time:             Tue 28 Jul 2026 13:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:58 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: VU6urv5kFb7Kap8g3gkW28OFQidOAk/qEohlMx+NmlI=)
                          2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:69:7d:89:21:33:32:1b:ad:9d:05:54:2a:d7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Jul 28 13:00:58 2026 GMT
            Not After : Jul 29 13:00:58 2026 GMT
        Subject: CN=88acb6330821115457b9bd20d5f797c68e90c0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:0a:e6:e7:9d:e8:6e:23:bc:c6:ae:5b:45:
                    ac:46:9e:94:60:94:bc:45:00:b0:7d:b4:15:b9:bf:
                    83:74:6a:c0:ba:f0:b6:1f:12:bb:58:6a:ee:68:17:
                    78:f6:56:8c:aa:3a:f8:cf:4b:f4:5b:90:4c:53:6c:
                    39:49:88:10:1b:82:e4:8f:14:a9:f5:81:2a:52:7b:
                    c4:53:fe:31:7a:da:0f:f0:d0:56:9e:b7:a5:af:f7:
                    2b:7e:fe:72:0e:d3:d9:b2:1b:66:c2:41:4e:cf:56:
                    f8:cf:d5:4b:f4:e5:ff:c5:90:5b:84:cb:4f:a2:2f:
                    c0:b9:f3:c2:98:be:f4:d5:d5:0d:7e:47:3a:46:dd:
                    21:ca:06:ad:f1:1b:b7:86:6e:2c:a9:5d:c9:d4:e3:
                    55:5b:ac:b1:0b:96:97:87:08:3e:54:ca:f3:13:73:
                    1d:03:97:04:50:5e:43:ef:04:62:1f:4d:60:bb:df:
                    5d:13:4a:2b:d0:c4:72:f7:30:e9:fb:03:20:6a:11:
                    ae:c3:fa:c8:48:7a:5c:fd:44:66:d3:85:74:9b:fb:
                    82:b1:b3:33:46:53:29:94:fe:67:cb:66:20:86:f0:
                    02:f0:39:86:ac:a9:a5:0e:2b:76:92:62:84:9b:3a:
                    4c:6b:c7:3d:94:66:a5:72:04:b4:46:49:94:87:ea:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:B6:33:08:21:11:54:57:B9:BD:20:D5:F7:97:C6:8E:90:C0:C1
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:a7:c8:60:a2:b1:1e:f0:67:e1:cc:26:69:a8:36:4a:ff:
         60:81:d1:52:5c:10:0e:00:9f:be:fd:06:c1:bc:c3:b6:41:f9:
         29:f1:d7:04:a1:5c:08:db:7b:08:98:a8:49:32:31:37:e9:b3:
         50:be:41:0d:a0:65:18:46:d0:29:8a:ff:4d:8e:1d:c8:f0:64:
         9c:00:df:ae:22:19:26:fa:4e:4b:65:2c:45:ea:ba:36:71:02:
         33:0e:b2:f0:26:ac:e6:21:ec:9e:17:a3:9e:36:f7:52:69:28:
         d8:20:de:39:ff:70:13:55:dc:5f:2d:a2:82:9f:eb:8e:89:e1:
         c8:bb:24:e3:4d:1a:5d:db:bc:74:57:43:e4:b4:67:24:f4:5f:
         a5:66:f6:3c:7b:5a:31:c1:f2:98:35:f7:dd:c5:ec:2a:8b:5d:
         34:31:cb:b9:31:83:06:46:ea:12:9d:bc:e1:80:bc:85:72:b9:
         7c:ad:1e:dd:1b:03:b9:a9:db:37:f5:cd:aa:7d:91:78:79:21:
         23:36:94:ab:fa:a7:3c:2d:0f:74:88:ae:69:79:14:f0:03:04:
         9f:a0:ee:aa:13:23:57:cd:cf:d1:94:c7:32:5d:9c:75:9a:68:
         37:07:76:03:00:dc:30:d3:0e:71:e3:99:5a:f7:37:d7:cf:a8:
         c8:e1:62:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0Gl9iSEzMhutnQVUKtf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy
ZDM2YTUwHhcNMjYwNzI4MTMwMDU4WhcNMjYwNzI5MTMwMDU4WjAzMTEwLwYDVQQD
Eyg4OGFjYjYzMzA4MjExMTU0NTdiOWJkMjBkNWY3OTdjNjhlOTBjMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwsK5ued6G4jvMauW0WsRp6UYJS8
RQCwfbQVub+DdGrAuvC2HxK7WGruaBd49laMqjr4z0v0W5BMU2w5SYgQG4LkjxSp
9YEqUnvEU/4xetoP8NBWnrelr/crfv5yDtPZshtmwkFOz1b4z9VL9OX/xZBbhMtP
oi/AufPCmL701dUNfkc6Rt0hygat8Ru3hm4sqV3J1ONVW6yxC5aXhwg+VMrzE3Md
A5cEUF5D7wRiH01gu99dE0or0MRy9zDp+wMgahGuw/rISHpc/URm04V0m/uCsbMz
RlMplP5ny2YghvAC8DmGrKmlDit2kmKEmzpMa8c9lGalcgS0RkmUh+rvywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIistjMIIRFUV7m9INX3l8aOkMDBMB8GA1UdIwQY
MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt
MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk
LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI6nyGCi
sR7wZ+HMJmmoNkr/YIHRUlwQDgCfvv0GwbzDtkH5KfHXBKFcCNt7CJioSTIxN+mz
UL5BDaBlGEbQKYr/TY4dyPBknADfriIZJvpOS2UsReq6NnECMw6y8Cas5iHsnhej
njb3Umko2CDeOf9wE1XcXy2igp/rjonhyLsk400aXdu8dFdD5LRnJPRfpWb2PHta
McHymDX33cXsKotdNDHLuTGDBkbqEp284YC8hXK5fK0e3RsDuanbN/XNqn2ReHkh
IzaUq/qnPC0PdIiuaXkU8AMEn6DuqhMjV83P0ZTHMl2cdZpoNwd2AwDcMNMOceOZ
Wvc318+oyOFicQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:14 2026 by rpki-client