Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File:                     CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier:          gmbGipHwEI/qbp+MsBCX3eZgP4ODHeZHCm2NfYxHoxA=
Subject key identifier:   33:53:E5:A4:BD:4F:EB:39:4E:3B:44:05:C1:3A:75:E4:EE:FF:5A:3F
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer:       /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial:       01A14082B433D697F4C24029072462AFE031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number:          090E
Signing time:             Thu 15 Oct 2026 17:01:09 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:09 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:09 +0000
Files and hashes:         1: 177Mk1AVlniYqoBQnaXYI4Vpgjg.roa (hash: GVoqQRdpz3B/4adthgW8dLMcjC/7VRwkH7qkvRK1NHs=)
                          2: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: gUJMH73Tv5K7X3T5CMjR51s7+jxbYugcYHhSpQ5W4Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:b4:33:d6:97:f4:c2:40:29:07:24:62:af:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
        Validity
            Not Before: Oct 15 17:01:09 2026 GMT
            Not After : Oct 16 17:01:09 2026 GMT
        Subject: CN=3353e5a4bd4feb394e3b4405c13a75e4eeff5a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:88:d2:2d:86:2b:56:da:9d:f9:32:bc:6b:
                    f1:dc:0a:22:d4:0a:63:e8:ae:f6:e1:7e:62:63:57:
                    b2:fa:94:8d:93:d8:c2:aa:e7:f5:78:92:b8:c4:85:
                    da:68:46:df:9d:5d:57:01:be:7f:8e:ec:10:8e:17:
                    1a:e6:11:25:c7:17:b0:b8:6a:01:27:3b:94:27:9a:
                    9d:20:a9:a6:c4:49:10:d4:5b:07:1a:35:0c:53:89:
                    d3:0e:95:27:4d:30:3e:75:6c:7a:d5:32:b0:57:57:
                    6d:bd:ed:a4:94:ec:f4:4a:0d:e5:ac:bf:1f:fd:1c:
                    b2:2f:e2:65:24:08:99:c7:56:dd:ab:bc:69:4b:03:
                    06:9c:69:ef:5b:95:21:3c:7a:9b:21:a0:cf:1c:c7:
                    23:a8:8d:e2:5c:21:88:67:28:44:eb:a3:9e:3b:ad:
                    9b:9e:64:3c:1f:56:d2:74:2e:b2:f9:eb:9f:9a:ca:
                    56:28:df:6c:df:4d:c1:09:e7:60:15:fa:9a:68:a4:
                    25:f7:06:83:c7:af:4a:11:22:69:cf:74:15:10:72:
                    52:a0:ac:83:b1:87:bb:89:21:2a:bc:f2:cc:f4:20:
                    35:e4:1e:01:0d:12:51:f1:10:be:c6:80:e1:28:f3:
                    17:60:80:02:54:b2:ae:08:25:a3:a4:e8:d1:eb:0d:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:E5:A4:BD:4F:EB:39:4E:3B:44:05:C1:3A:75:E4:EE:FF:5A:3F
            X509v3 Authority Key Identifier:
                keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ba:a9:db:23:cc:3d:c9:a5:03:5d:5e:8b:2f:c9:a8:26:b7:
         f0:de:0e:de:71:94:5d:0f:9f:a2:f7:d5:d8:a1:c7:74:7b:96:
         b2:ce:b0:9c:72:22:cd:5a:89:08:ed:73:25:09:63:0f:99:13:
         af:07:a2:af:39:db:fc:4b:1a:b7:fa:b8:28:e7:aa:71:a8:c5:
         86:1c:aa:a4:49:3d:20:2c:d9:13:28:17:b1:fa:8a:d9:6e:b8:
         b6:1f:1b:10:03:88:df:c5:92:16:1f:64:d0:27:44:62:d6:50:
         d5:c6:f5:be:83:46:be:d7:87:4b:74:1d:30:91:99:2c:ba:56:
         40:ce:33:3f:ca:e8:23:54:9a:33:fe:c0:77:f9:6d:88:97:cf:
         94:2e:06:8b:1b:93:1c:1c:ac:59:bc:72:b7:bf:b1:e4:60:59:
         63:ba:4a:c2:00:5a:af:91:26:2e:79:3c:f3:6b:a2:55:80:6e:
         1b:1b:d4:4f:90:53:68:d0:51:6c:1d:db:b7:75:ad:9b:71:1a:
         fc:e1:90:ef:28:91:a8:66:09:e9:e0:56:3f:eb:54:b1:ca:60:
         47:3b:2d:9b:3a:86:26:1e:62:51:f3:bb:d6:9a:b7:57:3c:ff:
         d1:2b:ed:92:c2:c1:7c:5f:0a:9a:49:4c:d6:dc:c3:10:a0:b2:
         7e:8b:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:46 2026 by rpki-client