Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File:                     CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier:          wDZ4DX1CVAGjo8wUG/yVyUtgE/Olh1m7Pv1k3XhRpC4=
Subject key identifier:   A4:6B:77:B0:A2:34:0C:9C:41:94:7F:74:C4:93:5C:11:3E:F9:01:3E
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       019EBE7F7CC831DADEDC6B93A982BC5B09E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 01:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:26 +0000
Files and hashes:         1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
                          2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: LuGaMiR76WVtXuuI0EK6GuHG4SZRms1SuUmVUPDN8lM=)
                          3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:7c:c8:31:da:de:dc:6b:93:a9:82:bc:5b:09:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Jun 13 01:01:26 2026 GMT
            Not After : Jun 14 01:01:26 2026 GMT
        Subject: CN=a46b77b0a2340c9c41947f74c4935c113ef9013e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:b8:6f:a5:a8:de:de:cd:73:e3:83:65:4f:
                    fd:f6:03:72:61:4f:d9:c8:5e:1a:0a:9b:17:49:48:
                    80:bc:05:0d:39:0e:b0:ec:80:d9:cd:59:66:7e:8c:
                    6e:5d:59:a0:87:c6:b9:a6:1e:3c:88:7d:0b:19:c5:
                    b3:9d:d5:f6:88:0b:e6:e8:70:bd:99:e6:da:33:ce:
                    b3:0c:04:0d:10:7c:a4:d1:2c:d2:20:e5:f4:fc:47:
                    80:67:ed:e7:80:fd:7b:ed:12:17:09:d5:50:38:9d:
                    a0:4e:57:2b:85:63:ef:0b:ec:fe:a3:ba:c4:37:af:
                    b6:73:ae:09:61:84:4a:e0:e8:e6:85:72:a1:b8:e7:
                    26:d2:1c:9c:c9:af:d0:c0:7a:5a:e5:8b:a5:4d:9b:
                    ab:a7:db:4d:74:4f:6b:9b:a8:26:70:dc:73:cb:65:
                    1b:f4:98:84:a3:35:46:82:44:1e:f4:a5:4a:70:c1:
                    8a:31:88:cf:b5:f4:84:33:7f:b1:96:36:21:14:a1:
                    9d:d3:0a:59:95:e8:8d:e2:64:38:8e:55:37:22:62:
                    cc:b6:83:a7:19:e2:c3:c0:5b:99:07:7c:61:76:d0:
                    cd:65:95:76:d8:20:ea:72:4d:1f:43:40:37:f8:f5:
                    f7:1d:93:1c:85:6d:84:89:e1:76:af:1e:52:8c:8d:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:77:B0:A2:34:0C:9C:41:94:7F:74:C4:93:5C:11:3E:F9:01:3E
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:76:1c:30:ca:c9:b7:15:87:72:4f:4c:e5:39:06:94:67:78:
         e2:37:d2:04:48:88:df:e0:14:cf:86:4f:e5:25:11:aa:31:c3:
         02:f4:a6:e1:22:26:95:f6:5f:96:b4:a6:fb:62:aa:2f:3d:ec:
         35:2f:3a:05:fb:4a:1a:d8:ad:3b:c9:ef:80:61:62:8f:b1:2f:
         4b:dc:53:af:9b:dc:0c:24:85:09:ef:ba:ad:35:ce:6b:0f:f5:
         21:e2:f4:d9:35:64:20:5d:a0:8d:09:33:a1:5e:6f:c2:e3:25:
         c8:bd:b2:03:0c:d5:c9:48:76:6a:2e:2b:bd:73:55:07:59:1e:
         aa:fc:31:d5:e5:47:8d:70:27:59:a9:b5:61:9f:84:64:ce:0d:
         28:57:c7:02:d6:75:46:a9:ef:76:e4:49:1d:0d:86:b3:c8:d3:
         ee:d1:de:37:47:45:39:92:af:cf:b5:2b:af:b1:57:c0:cc:16:
         30:4b:41:87:43:53:37:ed:b0:71:eb:7b:b7:5a:a8:ba:ca:82:
         02:65:4d:6a:a6:a1:b9:38:35:d2:cb:c9:9e:5f:17:76:33:11:
         19:d0:64:60:6e:a6:dd:4b:ba:eb:8b:50:50:9e:50:db:dc:30:
         3f:be:63:41:85:c8:de:3f:44:19:22:16:77:62:6b:8a:d9:6c:
         76:1a:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:03 2026 by rpki-client