Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          0sgvkLTs/veLLOoCPxNFonnSH1upqjYZi0bv2V6m2ww=
Subject key identifier:   5C:4A:7C:69:91:0B:23:D1:AB:F0:0A:65:E7:21:9B:E2:27:4C:EC:EC
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019FA907680ACF61986169889236DD757707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1713
Signing time:             Tue 28 Jul 2026 14:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:02 +0000
Files and hashes:         1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
                          2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: Qvkhfulszy64jX25b82VtiyKEcd2XGkSH+P/+8PwuM4=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:68:0a:cf:61:98:61:69:88:92:36:dd:75:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jul 28 14:01:02 2026 GMT
            Not After : Jul 29 14:01:02 2026 GMT
        Subject: CN=5c4a7c69910b23d1abf00a65e7219be2274cecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:e1:2a:44:c4:57:0a:b0:07:79:71:f5:96:
                    26:06:da:32:e6:f3:1e:49:64:d1:55:1f:a8:8e:0f:
                    2d:8b:2d:f0:bd:92:a8:db:28:1e:21:2c:e9:c1:8b:
                    2a:d9:70:63:db:25:d7:50:d4:a9:7a:01:ef:72:24:
                    95:58:13:ae:29:d0:fc:df:e9:49:23:24:cb:1d:a2:
                    f8:38:db:58:1a:d1:8e:d3:74:88:6a:43:4f:92:1e:
                    ab:96:06:83:27:ec:3a:ac:28:c4:0b:fc:10:15:cc:
                    73:9e:12:d5:9c:bc:15:19:7b:e5:99:ef:df:eb:fd:
                    34:8e:22:24:7e:7b:2b:d3:1b:44:be:6d:e2:3a:a8:
                    d0:97:77:fb:11:40:89:09:5b:e7:89:8e:90:fb:ec:
                    9d:6b:21:99:0a:26:22:d0:38:6a:a9:4e:2f:33:3e:
                    1b:67:87:53:38:14:80:81:d9:f9:6e:6f:8d:32:46:
                    f8:f1:5f:33:ef:37:a5:0d:cf:6c:a7:8a:47:72:48:
                    17:a1:21:ef:5f:5e:c0:f8:13:09:bf:a2:0a:b8:42:
                    66:f0:24:44:c6:b4:40:32:0c:4b:22:dc:d8:9f:63:
                    34:7c:36:34:33:c0:52:2b:32:70:05:ec:9a:39:28:
                    93:65:e9:02:08:41:1b:dc:e6:13:27:b3:fe:a1:f7:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:7C:69:91:0B:23:D1:AB:F0:0A:65:E7:21:9B:E2:27:4C:EC:EC
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:08:52:27:ef:69:5c:55:bc:0f:fd:1a:5f:d1:b3:17:3b:b9:
         a1:70:f5:c4:44:fe:5b:c6:8f:07:f0:ca:36:42:60:3d:69:05:
         1d:9a:18:92:75:4e:3b:7d:a4:33:bf:19:80:07:7a:23:3c:d8:
         4a:0f:50:a5:ac:4a:fa:1c:f8:2a:97:17:db:04:d1:c6:a7:68:
         4e:3f:f5:52:9c:94:4e:c3:dc:21:c6:44:ba:19:fa:84:5b:cc:
         3c:a7:2e:59:64:6d:20:60:fd:f4:51:b7:d6:31:2a:2f:c3:af:
         60:9b:2f:8b:e4:b1:87:13:93:c5:93:fe:f5:e3:c1:63:87:28:
         cf:70:fd:be:cd:93:6c:81:11:39:8c:72:de:c4:0d:01:01:d4:
         2c:14:80:7b:82:b1:cf:72:c8:89:dc:5f:e2:65:52:5b:02:b5:
         cd:c5:64:25:11:5d:7f:1b:3f:7b:fa:82:41:d3:cb:c4:25:ef:
         c5:01:b0:0c:fe:01:00:cb:43:53:47:0e:14:65:ff:59:95:4b:
         33:e3:63:b4:12:57:7d:30:8b:78:71:eb:ba:c3:b7:81:2f:9c:
         16:20:a7:12:e2:ab:2e:8a:fe:cc:b9:b3:1e:a8:f7:60:88:cf:
         75:1c:06:de:da:09:04:d1:d2:ff:2e:76:7b:10:2a:05:be:6f:
         9b:70:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:54 2026 by rpki-client