Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          5xtfY9hxyjf7I3uxRTA7y79lphiZL3w26BBlT4wtPMQ=
Subject key identifier:   F7:5D:F3:E6:98:08:F8:96:2E:D0:FA:75:37:C7:72:B1:C7:3A:3F:34
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       019F17F90E1B48FED982AFCFCC1CFD606BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          1811
Signing time:             Tue 30 Jun 2026 10:00:25 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:25 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:25 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: f4INlrQVLdvj19H7yAc5+7rbNDsWnPdKpbPs8rXn8lc=)
                          2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:0e:1b:48:fe:d9:82:af:cf:cc:1c:fd:60:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Jun 30 10:00:25 2026 GMT
            Not After : Jul  1 10:00:25 2026 GMT
        Subject: CN=f75df3e69808f8962ed0fa7537c772b1c73a3f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:ec:d4:c7:e7:78:2c:7b:a4:22:58:21:62:
                    d9:ad:b8:f5:a6:3a:0b:7d:99:97:51:95:22:bd:f5:
                    03:37:a4:8c:20:c1:bc:55:5f:64:e7:ba:66:48:5a:
                    d5:2e:fc:bb:59:fb:a9:65:b5:d8:8a:d4:04:7e:53:
                    ac:21:0e:9b:de:f7:8b:ca:5e:23:cc:23:e7:9b:a7:
                    1e:85:c8:83:18:e3:b5:40:70:30:e0:6a:d0:dc:6b:
                    69:62:27:6a:7f:32:27:fe:8c:dc:e7:45:2d:c4:c2:
                    ca:80:7e:bd:40:86:50:43:df:7e:14:41:b9:eb:46:
                    45:a0:41:b1:b8:71:b2:95:23:b9:b9:31:79:e9:a5:
                    13:44:e7:ea:b1:ed:72:62:e0:17:c3:cf:ac:a9:11:
                    aa:39:1d:8e:e6:8e:c6:2a:47:c3:a2:b4:d4:5b:26:
                    09:10:73:2e:88:0a:57:d3:09:bb:eb:74:c5:aa:5f:
                    db:2c:32:b5:64:ad:61:bb:15:eb:c9:76:1b:2e:8b:
                    ef:da:a4:75:2f:e5:c0:5b:b9:8e:70:86:e4:5a:93:
                    b1:94:30:95:97:dc:75:c0:45:a5:b6:dd:6b:b2:68:
                    cd:2e:08:8c:61:e2:82:a5:5a:93:4a:47:e8:13:bf:
                    c8:f2:5e:d8:a5:fa:be:39:d6:ed:51:14:a7:ef:56:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:F3:E6:98:08:F8:96:2E:D0:FA:75:37:C7:72:B1:C7:3A:3F:34
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:fc:63:f3:e9:49:9a:98:07:f4:33:e7:2b:18:60:4b:40:
         13:b9:33:5a:e1:da:0d:fb:0d:f0:94:ed:d2:38:a1:54:1a:7f:
         cc:58:a4:d6:0b:e0:73:f3:90:5d:41:ee:fa:54:45:1f:2b:3f:
         41:58:90:a9:24:0d:2c:c1:6d:5e:ea:ce:71:56:f4:95:f1:13:
         88:10:19:4d:c5:af:12:32:b0:52:cd:25:8e:3e:9e:58:cb:f4:
         9c:8c:02:25:a3:c1:ff:62:a6:00:5e:0d:d3:3c:17:81:90:70:
         82:d1:7b:d7:63:4f:e8:57:a7:5a:8b:52:1a:37:43:42:d5:7b:
         25:27:c2:2e:4e:83:e2:03:ef:de:0a:e3:bb:e5:8e:48:b4:9e:
         b1:36:13:b1:4c:47:81:be:cd:fd:0f:47:50:37:03:ed:53:7c:
         f6:3b:d4:b6:af:44:b8:80:9c:84:42:0b:86:5c:33:40:5b:ef:
         f8:21:42:67:de:6c:b6:eb:28:34:ad:b3:21:ff:44:15:e1:58:
         7e:70:09:81:b8:9d:16:5a:40:8f:c0:59:71:bd:47:4e:12:29:
         60:38:2e:47:97:a8:72:c7:28:9e:16:ca:ca:6b:ef:46:89:15:
         9c:35:be:84:53:6f:0d:7b:22:85:f5:af:c7:56:f7:ac:4c:6c:
         9d:7c:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:23 2026 by rpki-client