Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          +OZfaws5Q6o/3aifTiIfaiepIbQXIf+YWxhZv9d7KgU=
Subject key identifier:   6E:CD:68:1E:04:7C:14:4A:1F:61:C6:FC:3C:27:CC:E0:64:99:36:58
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       01A001A67B3604FBF55F4536888A39070E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          188A
Signing time:             Fri 14 Aug 2026 19:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:22 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: GOMm2MK1FKUC6BxFcZdLrJnDEadWbYKyqvwxRZVOqNo=)
                          2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:7b:36:04:fb:f5:5f:45:36:88:8a:39:07:0e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Aug 14 19:01:22 2026 GMT
            Not After : Aug 15 19:01:22 2026 GMT
        Subject: CN=6ecd681e047c144a1f61c6fc3c27cce064993658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:db:6f:af:84:fa:5e:26:dc:2a:a6:23:11:
                    a1:91:1f:97:ab:95:c0:cb:d3:46:b8:b5:47:3d:e7:
                    fc:19:f5:11:8c:75:a3:f9:a8:05:a1:a8:46:c8:9d:
                    7f:e8:02:07:9d:20:4e:5d:1b:b6:92:a9:7f:f5:bb:
                    ab:0c:fe:53:ac:62:12:11:ad:3a:13:b4:b0:e4:9d:
                    d1:0d:87:c9:56:4b:87:b4:b6:9d:b6:e3:72:92:af:
                    a8:d9:07:a2:cc:bf:21:47:68:74:7c:a2:ee:2f:e6:
                    d2:9e:74:dd:5f:66:2e:27:d9:fb:3f:af:2b:fa:56:
                    dd:d0:17:38:00:27:77:09:7e:48:91:df:a4:6a:45:
                    8c:e0:62:91:7b:1c:e5:5b:7f:c8:92:ad:3e:62:0d:
                    f4:b2:d1:fa:f2:ba:fb:f4:de:15:c1:65:8e:95:37:
                    44:d0:03:42:ae:e8:3b:48:30:bb:0d:11:6e:3e:8a:
                    90:f9:c3:a0:20:32:ce:bc:46:bd:cb:f6:1b:86:c2:
                    ed:e7:67:ec:39:bc:67:4f:f1:f6:ad:d0:90:dc:e5:
                    93:5f:70:a2:f0:21:13:7c:20:ba:56:20:3b:eb:83:
                    32:34:8a:6a:9f:36:31:ec:08:6f:ad:56:1e:2d:d4:
                    02:2b:0f:92:71:c6:c4:b4:89:24:35:9e:b4:61:28:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:68:1E:04:7C:14:4A:1F:61:C6:FC:3C:27:CC:E0:64:99:36:58
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:45:fd:6a:2a:a1:01:33:aa:2b:47:23:48:0c:bb:0d:9e:ba:
         49:97:cf:4f:4d:ec:d7:99:ea:a0:18:72:16:fa:41:44:d2:9c:
         da:49:c2:d2:07:de:f6:b3:ae:53:69:33:7d:fb:02:0a:49:61:
         d9:b8:c9:24:ec:8e:9e:c9:ef:87:9f:d9:f3:2d:ae:f0:32:3c:
         d4:87:42:bf:39:d2:58:b2:dd:05:61:14:41:cf:25:ca:c2:82:
         cf:cc:00:f6:cc:12:f2:5e:63:cc:a1:35:8d:10:56:e1:75:bb:
         6a:f2:f2:80:2a:c2:34:81:5e:11:dc:fc:5a:55:06:9a:cb:0e:
         2e:b9:ba:3d:45:24:56:5c:6a:52:9f:e7:f6:23:c1:be:18:22:
         a4:69:75:6e:76:c9:eb:eb:a7:28:c3:21:6f:0d:6e:59:82:cf:
         0e:64:d5:3f:f3:9f:a3:1d:0c:a4:66:b9:05:a8:2c:c6:dc:44:
         e8:9a:25:63:1d:0e:6c:00:6d:a1:49:af:10:c2:57:ba:6f:ac:
         dc:ee:69:54:78:f8:b3:b8:e8:56:0b:9c:04:8b:7c:05:8f:cb:
         76:2b:ec:8b:b6:73:8a:ab:56:58:5c:fd:f9:f0:fe:32:63:2b:
         d7:a7:f7:08:6c:d7:d7:6b:70:75:f3:81:9e:e8:c1:32:dd:54:
         a3:11:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:33 2026 by rpki-client