Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          3v35cUSG70o8QwU/fxmbc/SuZgwgeK08jlwQcWAMLC4=
Subject key identifier:   17:36:85:A4:D5:0F:2D:C0:14:97:3E:67:34:59:A1:8D:3F:89:36:1F
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       019EBE47EA44F67A9E2F79A2D3076E4FBD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          0541
Signing time:             Sat 13 Jun 2026 00:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:44 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: /WUrYOiTBI9nh8R8wFv12WlxmcfP5NSvOLw7vDGpEpA=)
                          2: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
                          3: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
                          4: v_sjZEWKqFNaPolplPEIVetQcjo.roa (hash: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=)
                          5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:ea:44:f6:7a:9e:2f:79:a2:d3:07:6e:4f:bd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Jun 13 00:00:44 2026 GMT
            Not After : Jun 14 00:00:44 2026 GMT
        Subject: CN=173685a4d50f2dc014973e673459a18d3f89361f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:b0:a4:de:47:6d:27:36:9e:1d:a2:cb:57:
                    e8:99:c2:f4:a6:c3:73:61:6d:e9:9a:fa:2a:e3:40:
                    f6:55:97:31:86:5b:72:ec:09:9a:6e:55:c9:d1:7c:
                    bf:b4:db:c8:2b:ae:52:11:9c:52:85:39:11:a5:8e:
                    d4:b3:65:ab:8d:ad:e1:48:14:64:43:43:f7:8d:e1:
                    46:10:ba:45:2b:b4:3b:4a:cf:2e:ef:3d:54:6d:15:
                    ef:3b:bb:60:a2:19:a1:25:68:d4:4c:55:57:d2:b5:
                    db:98:96:2c:31:4b:fa:2a:ed:64:1b:cb:c5:2e:69:
                    6c:a6:c4:cd:46:35:9f:52:86:74:06:da:59:35:6a:
                    1f:70:22:f4:5c:ea:b1:d8:a5:3e:e8:10:84:73:5f:
                    42:ed:86:5e:3c:43:a4:ca:7e:a4:48:d0:37:c2:9d:
                    6f:49:99:18:31:0e:79:b6:b5:e7:e2:fb:8f:9e:98:
                    b7:db:2d:f5:22:88:dc:99:c0:17:75:b2:63:95:9c:
                    4c:a7:e8:52:9d:41:ff:53:3c:cc:5e:61:0a:22:a7:
                    c6:98:a3:cc:d2:a6:62:b9:39:81:93:94:ff:00:04:
                    e5:b1:11:57:0e:85:c9:9d:55:d3:ff:1a:54:a0:14:
                    0e:3b:37:b5:b4:96:29:21:7c:43:a4:28:16:f2:8e:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:85:A4:D5:0F:2D:C0:14:97:3E:67:34:59:A1:8D:3F:89:36:1F
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:88:b3:1f:33:cc:a7:4c:21:76:25:52:10:9e:fe:7c:0a:d0:
         80:15:73:b9:aa:32:fd:d3:ef:67:7e:2a:d2:10:97:8d:88:89:
         1c:56:14:0a:8a:95:a6:e7:c8:a3:7e:57:69:7f:28:20:6d:4b:
         99:ef:56:af:22:18:1b:cb:d7:94:c7:5c:8b:62:7c:c1:de:5b:
         4a:2e:8c:f2:e5:09:52:40:b9:bd:99:e8:c3:ba:db:4e:d5:33:
         dd:96:ea:39:e1:ae:d4:c9:b0:bb:ce:02:82:91:b1:f0:a8:76:
         f4:12:fa:1e:05:1c:f5:3e:8a:3a:b0:7b:c5:2e:80:1d:c4:45:
         d6:6c:48:f9:20:ba:73:ff:0e:d5:ea:2d:8c:5a:21:72:1a:b5:
         bb:99:30:64:69:ab:3f:13:dc:79:66:a0:e6:e0:63:1d:a0:b8:
         5e:f2:88:2f:90:2c:c9:03:83:1a:32:01:47:ff:5b:3d:3e:40:
         eb:e9:28:05:a1:ba:b6:76:9c:a0:6f:58:56:6a:ac:cf:ae:d7:
         7c:52:77:99:57:1a:ad:f4:46:2e:86:4f:dc:d6:74:f1:d4:53:
         d2:8d:3c:b8:f2:fd:8f:b4:72:92:97:0b:53:ac:99:f2:3e:b1:
         0f:67:4f:30:72:45:d9:b2:4e:62:d0:38:bb:b6:a7:77:05:5a:
         e6:3c:80:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R+pE9nqeL3mi0wduT71CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz
Y2U3ODIwHhcNMjYwNjEzMDAwMDQ0WhcNMjYwNjE0MDAwMDQ0WjAzMTEwLwYDVQQD
EygxNzM2ODVhNGQ1MGYyZGMwMTQ5NzNlNjczNDU5YTE4ZDNmODkzNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnESwpN5HbSc2nh2iy1fomcL0psNz
YW3pmvoq40D2VZcxhlty7AmablXJ0Xy/tNvIK65SEZxShTkRpY7Us2Wrja3hSBRk
Q0P3jeFGELpFK7Q7Ss8u7z1UbRXvO7tgohmhJWjUTFVX0rXbmJYsMUv6Ku1kG8vF
LmlspsTNRjWfUoZ0BtpZNWofcCL0XOqx2KU+6BCEc19C7YZePEOkyn6kSNA3wp1v
SZkYMQ55trXn4vuPnpi32y31IojcmcAXdbJjlZxMp+hSnUH/UzzMXmEKIqfGmKPM
0qZiuTmBk5T/AATlsRFXDoXJnVXT/xpUoBQOOze1tJYpIXxDpCgW8o7eiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc2haTVDy3AFJc+ZzRZoY0/iTYfMB8GA1UdIwQY
MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt
YWQ0YTFkYTM5M2ExLzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex
LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYizHzPM
p0whdiVSEJ7+fArQgBVzuaoy/dPvZ34q0hCXjYiJHFYUCoqVpufIo35XaX8oIG1L
me9WryIYG8vXlMdci2J8wd5bSi6M8uUJUkC5vZnow7rbTtUz3ZbqOeGu1Mmwu84C
gpGx8Kh29BL6HgUc9T6KOrB7xS6AHcRF1mxI+SC6c/8O1eotjFohchq1u5kwZGmr
PxPceWag5uBjHaC4XvKIL5AsyQODGjIBR/9bPT5A6+koBaG6tnacoG9YVmqsz67X
fFJ3mVcarfRGLoZP3NZ08dRT0o08uPL9j7RykpcLU6yZ8j6xD2dPMHJF2bJOYtA4
u7andwVa5jyAaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:38 2026 by rpki-client