Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File:                     chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier:          Dj+kwrBO+DN82QN4ku4MKo/REFoi4HWT1spi3ux3yQs=
Subject key identifier:   A4:F2:83:56:91:90:69:84:19:7B:91:56:8C:18:C6:11:57:FF:25:74
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer:       /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial:       019EB8B437CDA1432178475B7C6CBFBA0141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number:          103B
Signing time:             Thu 11 Jun 2026 22:01:18 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:18 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:18 +0000
Files and hashes:         1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: jVtNHXHvF0fZ4yQQSkJpBmy4u/QMb8o2QnGViZFbTTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:37:cd:a1:43:21:78:47:5b:7c:6c:bf:ba:01:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
        Validity
            Not Before: Jun 11 22:01:18 2026 GMT
            Not After : Jun 12 22:01:18 2026 GMT
        Subject: CN=a4f2835691906984197b91568c18c61157ff2574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:4e:b2:71:bf:06:27:1d:b2:e8:20:86:9c:
                    a7:ed:45:12:3b:df:3e:52:5c:e0:8e:fc:b6:80:ea:
                    28:cf:34:51:a1:9d:d2:26:74:e8:38:52:97:e5:87:
                    62:17:f1:95:b2:60:11:ad:cc:24:f2:ed:f9:92:e9:
                    1f:5e:3f:2f:43:55:c3:21:44:08:22:50:a2:ec:d4:
                    b2:e9:2a:38:f5:a6:ac:50:9a:67:c3:54:ea:bc:5f:
                    8d:b1:5e:5d:0a:df:ad:f3:43:ab:25:5a:ef:e8:1f:
                    d2:28:10:ce:84:d6:cd:e1:93:d8:38:54:67:33:36:
                    2f:b2:87:fb:55:73:0e:20:df:41:36:0b:8a:1c:e9:
                    e7:4c:1c:c2:6c:cb:bc:d4:07:7b:4c:75:2b:71:f3:
                    e4:9b:00:d6:97:9e:50:d8:65:52:9c:0a:c9:8b:6f:
                    a5:4a:c2:21:6b:08:f7:2e:53:fb:c1:24:67:3d:ff:
                    63:ba:12:23:ce:2e:dc:b8:c5:73:e3:97:ab:31:e1:
                    62:3f:2b:3e:16:8c:2d:7d:c4:09:15:46:b4:d9:21:
                    d7:6b:99:c7:20:68:92:10:82:0c:54:f1:97:da:cb:
                    06:04:66:c3:86:b3:1f:14:ce:1d:c1:5e:6b:a9:c2:
                    bd:c8:31:9e:71:64:88:07:c4:40:68:6c:50:a2:37:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:83:56:91:90:69:84:19:7B:91:56:8C:18:C6:11:57:FF:25:74
            X509v3 Authority Key Identifier:
                keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:18:80:74:0c:99:7a:a0:93:c6:33:34:ea:a2:bf:0b:0b:f8:
         97:17:b8:cb:34:09:1c:9d:d4:6e:d6:c0:29:c6:cd:4d:a2:8d:
         ef:b0:26:b1:8d:86:61:f2:5c:c3:69:4e:c4:ca:4d:6d:a9:98:
         b4:9d:16:a7:f0:c9:cb:9b:3f:74:7e:ae:11:75:5a:ef:b3:96:
         76:17:32:08:6e:e9:8e:ec:57:05:b5:11:ed:19:43:7b:32:bc:
         6e:68:8f:79:d9:5e:5f:fc:f9:e2:01:23:29:63:9e:4e:29:03:
         81:ba:4b:9f:b3:9b:9f:3a:c2:62:98:6d:7a:05:a2:89:97:6f:
         2d:9f:26:a4:1a:c9:eb:a0:1c:a6:c7:07:ef:c6:07:2a:d8:42:
         88:76:a4:47:9f:5a:79:fc:e5:db:10:04:ec:3b:1a:2d:72:a4:
         81:0f:9a:5e:98:de:ca:30:f2:5d:59:01:43:15:88:e2:1e:c5:
         c6:2a:af:91:ba:42:bc:35:1c:83:3e:2d:79:86:69:bf:00:3e:
         14:6d:b5:3c:92:3d:cb:9e:74:e7:88:ee:ad:3a:ba:7f:63:f9:
         2d:b0:f0:c0:ee:81:b3:bb:9e:69:d5:df:0c:99:d3:2a:9c:85:
         7c:8e:ad:a6:33:66:b8:aa:62:02:c3:18:83:1c:fd:d5:54:ec:
         6c:68:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:04 2026 by rpki-client