Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          slWlMFrXKsU46ZgN70tpWiT0lzmCYHublPrFCYCK3z4=
Subject key identifier:   C4:6A:19:01:D7:14:9B:7B:62:E1:17:B2:D0:46:39:9C:21:83:96:FA
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019EBF5B3A02CD20452245355BC08B7F96CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          169A
Signing time:             Sat 13 Jun 2026 05:01:27 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:27 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:27 +0000
Files and hashes:         1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
                          2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: dGeb+XX8SIlKpu8vySzZLJCFYb44BLTQkYXP+62nXaY=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:3a:02:cd:20:45:22:45:35:5b:c0:8b:7f:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jun 13 05:01:27 2026 GMT
            Not After : Jun 14 05:01:27 2026 GMT
        Subject: CN=c46a1901d7149b7b62e117b2d046399c218396fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:0f:5b:1e:3e:6a:9e:5f:ff:03:05:aa:40:
                    59:4c:f6:d6:f0:9a:a8:e1:5a:09:43:3d:e3:da:14:
                    cf:02:63:a6:58:2b:cd:8f:5e:bd:8c:98:68:a7:53:
                    0d:81:2b:44:6f:f3:ec:13:86:fb:35:5e:df:ca:c6:
                    e9:aa:5d:a4:14:85:33:cd:c3:4c:2d:1b:ae:82:d2:
                    2d:fd:7c:10:00:57:84:21:0e:eb:52:fd:65:2e:ef:
                    15:dd:35:61:01:ae:a6:63:0c:07:97:02:b2:3f:61:
                    e9:43:c9:d6:15:00:83:e2:c8:17:94:33:ac:b2:ba:
                    c4:76:0a:e2:c5:4e:0b:00:64:e8:56:b9:7d:37:b0:
                    7f:50:17:dd:b5:30:c4:f4:77:2e:9c:d8:50:f0:33:
                    1b:b5:01:8c:4b:6b:7f:da:09:f3:65:ff:08:32:dd:
                    9c:df:51:7d:00:82:82:16:18:ed:5e:a8:10:5d:75:
                    30:f1:5e:0d:f3:c6:04:cf:98:41:25:96:9b:a8:a0:
                    9c:eb:e3:35:b3:a2:82:06:33:1e:35:49:94:8b:24:
                    1e:21:e2:5b:4b:a7:ef:5d:f2:3e:b9:b0:0b:80:ff:
                    03:d5:7a:cc:0f:ee:df:40:4d:d8:79:1b:7e:72:66:
                    7f:15:24:8d:9e:8c:bb:67:38:f7:53:e5:6f:92:d8:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:19:01:D7:14:9B:7B:62:E1:17:B2:D0:46:39:9C:21:83:96:FA
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:59:a1:42:96:1b:7a:f8:3e:9a:5c:20:fd:09:fb:d5:b2:
         6c:5b:b0:5e:4b:19:a2:00:86:0f:2e:52:4d:ed:7f:4e:19:fc:
         95:73:e9:6e:3f:98:55:fd:67:32:10:de:ce:00:0d:cb:f0:fd:
         ee:8c:0b:1d:9a:d2:d3:8e:d0:72:f4:ef:c6:cf:0d:b1:ff:38:
         7b:45:93:cf:08:e5:42:05:63:c0:06:b6:b9:d3:2e:42:11:c0:
         8e:8f:1a:fc:8f:b9:e9:26:ed:b3:93:06:6e:f7:64:9b:b3:42:
         f5:3e:bf:59:04:f8:20:21:b6:fc:ae:ef:f2:7f:9d:74:cf:e6:
         7b:7b:e8:c9:21:f0:1e:93:46:55:b4:28:7f:b8:d0:dd:d7:fe:
         21:ad:ec:f1:a8:b5:b6:61:ef:5b:6d:1a:a8:de:e7:d7:bd:46:
         4a:73:5b:d0:32:ae:cc:b9:d5:bc:a6:b0:4d:93:29:7d:60:a8:
         98:c9:32:67:8c:41:70:59:35:0e:9d:6b:dd:ce:8f:4e:11:a3:
         7f:39:55:9a:98:da:95:0f:a1:00:e6:ee:f5:62:44:e6:58:33:
         01:71:c9:4e:d9:6b:64:c0:94:03:97:b9:a8:ee:b7:cb:4b:d2:
         fe:7f:df:81:93:41:91:cb:66:6b:20:d0:e1:1a:50:e8:34:ad:
         1e:b8:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:26 2026 by rpki-client