Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File:                     cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier:          ePWEbOCL6s1P7AXRj5vJ5BbW6DnoCqdJ0byt7bIMMrw=
Subject key identifier:   51:74:4C:33:88:88:3F:4A:FF:AE:10:B2:DD:E2:0C:FB:6A:9C:AB:01
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer:       /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial:       019EBF914316B847A4D060FA2A11EED68561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number:          0273
Signing time:             Sat 13 Jun 2026 06:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:28 +0000
Files and hashes:         1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
                          2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: C1ZnQk8L6JxguvIEdQwzZfHxcZypZRDVYidEvuk9hWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:43:16:b8:47:a4:d0:60:fa:2a:11:ee:d6:85:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
        Validity
            Not Before: Jun 13 06:00:28 2026 GMT
            Not After : Jun 14 06:00:28 2026 GMT
        Subject: CN=51744c3388883f4affae10b2dde20cfb6a9cab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:60:ad:3a:08:e1:6b:31:c8:25:6e:a1:2d:
                    92:9f:b7:07:db:16:3b:1c:6b:c2:e1:51:15:bb:f6:
                    8f:d0:99:c9:66:fd:6f:8c:39:91:fb:49:d3:33:a8:
                    02:6b:d5:f6:b9:64:39:77:31:30:d0:1d:41:6d:c8:
                    2e:a9:ad:82:a8:28:94:5b:ff:c3:5c:ca:85:f7:6a:
                    85:06:ec:34:ac:55:05:48:35:8e:cf:67:cb:a7:da:
                    7e:38:07:61:3b:af:9a:3e:65:a9:d6:b7:e4:2e:11:
                    3c:0e:fd:70:e2:b7:03:ca:7b:ec:2c:98:ef:9f:e3:
                    c0:58:1d:ba:8f:ea:a6:a3:3c:d9:ad:2c:46:6c:d3:
                    b5:2a:8b:db:e6:87:9a:bd:e6:6a:67:f1:b3:99:41:
                    5d:8a:eb:98:87:26:1f:28:ef:a2:27:47:86:a8:f9:
                    ac:ff:bb:c5:92:12:dc:03:5e:09:87:2e:8c:98:30:
                    26:1a:30:ec:3b:12:d8:76:b4:63:16:fd:65:16:1b:
                    3e:fa:69:f4:5a:be:b7:92:0e:09:51:af:7b:11:7a:
                    c1:c2:9a:5d:87:00:99:f9:f6:1a:29:9b:47:0d:b1:
                    af:bf:a8:28:74:ea:bd:fa:aa:13:00:87:f1:db:44:
                    c1:a8:c8:52:7f:f1:dd:3b:4c:91:34:c3:84:8e:57:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:4C:33:88:88:3F:4A:FF:AE:10:B2:DD:E2:0C:FB:6A:9C:AB:01
            X509v3 Authority Key Identifier:
                keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:87:82:05:87:49:41:a6:42:ee:40:8c:33:4e:eb:0a:87:aa:
         54:55:1c:4d:99:ad:32:fb:1e:e1:c6:dc:b6:13:27:92:43:a7:
         f9:88:13:f0:e1:83:fe:00:53:3c:4c:c0:ab:e4:c4:0f:95:65:
         ef:d6:76:5c:ae:fd:1d:af:86:b7:c7:95:58:45:9e:2e:5e:af:
         f0:85:2f:56:4c:d4:10:79:2b:73:41:cc:fb:ae:04:60:77:2d:
         41:f1:63:91:a8:56:c4:d5:30:e3:1e:35:98:a1:a8:09:19:6b:
         7d:18:44:eb:17:06:ac:93:9d:95:0a:9f:05:ed:fe:33:0f:56:
         e0:ac:c7:98:69:1c:78:82:97:e0:5e:df:07:45:65:8c:ec:37:
         1d:e3:18:06:15:35:b5:88:14:58:10:f2:cd:f7:4e:26:19:33:
         3e:25:86:80:51:de:ff:e0:41:e0:3f:f7:90:95:72:4f:96:e9:
         d9:51:4a:70:d4:ed:ca:6e:1c:ad:11:d0:fc:dc:ef:9a:cf:94:
         25:41:1f:0c:f2:ac:f9:84:a1:e9:4c:de:af:4f:e8:f3:9f:bd:
         44:e6:bd:72:3f:39:e8:63:2e:3b:54:71:24:12:c0:9b:79:d6:
         30:69:e1:8e:c2:e3:a4:02:ea:90:29:13:45:68:55:28:d1:e0:
         66:f7:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:25 2026 by rpki-client