Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          Q8AD/o6yn6tfq6IZ/WADQ6IXJ+Un86JMooMzTKuiFDg=
Subject key identifier:   9F:16:C3:2B:2E:CB:CE:0A:E8:54:70:BC:53:A4:11:8D:85:0D:2D:9E
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       01A08AFA56D1521E00B5A7C3F62B5E03A178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1788
Signing time:             Thu 10 Sep 2026 11:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:57 +0000
Files and hashes:         1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
                          2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: mFTg7aV3bsSug1yIiow3Hzvj2rrKNY8+cUpcGVRLWBE=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:56:d1:52:1e:00:b5:a7:c3:f6:2b:5e:03:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Sep 10 11:00:57 2026 GMT
            Not After : Sep 11 11:00:57 2026 GMT
        Subject: CN=9f16c32b2ecbce0ae85470bc53a4118d850d2d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:cd:7a:b0:54:ea:d6:2e:84:61:f0:4f:b8:
                    67:8b:20:26:ff:c8:83:3d:e6:08:cf:f6:5f:22:6d:
                    5a:a5:f5:cb:1c:98:f0:02:33:44:42:9d:11:20:c0:
                    dd:df:e2:c3:f0:0a:fb:be:ea:0e:66:18:98:a0:89:
                    34:04:b6:ad:4a:65:e6:e2:8c:bb:61:4e:34:1a:73:
                    ff:80:08:e9:93:84:5a:76:ef:7a:ff:23:09:87:e2:
                    dc:bd:ad:24:8f:c7:07:65:40:55:66:10:0b:c3:27:
                    ad:97:ca:58:05:fa:6e:63:08:c8:4f:ea:35:ed:04:
                    4d:9e:69:3d:ea:e0:39:14:20:d5:79:7c:e8:81:aa:
                    5c:9e:b4:20:fb:f0:fb:c0:f4:53:66:e2:aa:7a:83:
                    5e:0f:ca:2a:51:25:93:d8:39:36:b2:27:da:6c:fe:
                    1f:b7:1e:48:a8:c1:f5:ac:bf:61:3b:58:ea:8d:c8:
                    0f:18:ab:b5:9b:c9:8f:2b:2f:99:94:b6:96:3b:cc:
                    ed:02:5f:a2:88:89:19:18:ea:3b:a2:10:e5:de:af:
                    32:f2:a7:9d:34:6d:8b:86:7a:e5:48:d7:05:fb:8a:
                    ab:ab:7f:aa:6f:f0:a3:57:78:d9:ce:22:a5:48:76:
                    6b:a6:90:90:33:83:d8:b4:af:1d:fc:43:d6:df:d7:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:C3:2B:2E:CB:CE:0A:E8:54:70:BC:53:A4:11:8D:85:0D:2D:9E
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:3d:d5:46:53:19:c9:bc:2b:de:43:55:a9:e6:28:6e:50:
         de:95:69:b3:b7:7a:9d:dd:0d:d1:82:74:54:c8:d8:b3:78:35:
         17:ed:d8:6d:cf:b4:e4:49:65:d0:10:50:7f:3c:57:f5:70:81:
         84:4f:73:0b:9a:15:7e:70:02:6c:06:08:33:76:4f:53:03:1d:
         90:16:46:54:39:ed:3e:34:09:db:cf:27:b1:c8:a4:eb:ce:19:
         1d:1c:65:73:71:7a:97:57:af:c4:95:91:c1:19:80:34:7d:7b:
         79:f6:62:d2:ca:90:6d:e1:07:31:68:89:4c:69:e7:ae:8b:66:
         45:5c:66:e4:77:62:5c:8a:58:b4:48:d8:32:36:e7:31:51:1d:
         25:94:29:b5:2e:94:5e:5c:bf:25:d5:cd:76:c8:70:0a:28:68:
         ab:4a:b7:1b:3b:12:bc:be:51:7a:79:3e:e4:c9:55:91:ea:eb:
         ea:2a:12:13:b7:97:0f:a0:13:bf:37:e1:a3:62:52:a2:97:6b:
         18:4e:5a:17:3a:d3:2b:9c:1f:0c:a5:41:8e:96:33:e3:f9:6d:
         e7:de:fe:cc:2f:56:44:23:dc:0a:59:22:b2:bc:2d:f5:ab:3a:
         52:2b:03:5e:2b:c0:0a:79:8d:62:e2:b0:d0:23:60:a1:48:23:
         68:66:05:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+lbRUh4AtafD9iteA6F4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjYwOTEwMTEwMDU3WhcNMjYwOTExMTEwMDU3WjAzMTEwLwYDVQQD
Eyg5ZjE2YzMyYjJlY2JjZTBhZTg1NDcwYmM1M2E0MTE4ZDg1MGQyZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDzNerBU6tYuhGHwT7hniyAm/8iD
PeYIz/ZfIm1apfXLHJjwAjNEQp0RIMDd3+LD8Ar7vuoOZhiYoIk0BLatSmXm4oy7
YU40GnP/gAjpk4Radu96/yMJh+Lcva0kj8cHZUBVZhALwyetl8pYBfpuYwjIT+o1
7QRNnmk96uA5FCDVeXzogapcnrQg+/D7wPRTZuKqeoNeD8oqUSWT2Dk2sifabP4f
tx5IqMH1rL9hO1jqjcgPGKu1m8mPKy+ZlLaWO8ztAl+iiIkZGOo7ohDl3q8y8qed
NG2LhnrlSNcF+4qrq3+qb/CjV3jZziKlSHZrppCQM4PYtK8d/EPW39e3mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8Wwysuy84K6FRwvFOkEY2FDS2eMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1891UZT
Gcm8K95DVanmKG5Q3pVps7d6nd0N0YJ0VMjYs3g1F+3Ybc+05Ell0BBQfzxX9XCB
hE9zC5oVfnACbAYIM3ZPUwMdkBZGVDntPjQJ288nscik684ZHRxlc3F6l1evxJWR
wRmANH17efZi0sqQbeEHMWiJTGnnrotmRVxm5HdiXIpYtEjYMjbnMVEdJZQptS6U
Xly/JdXNdshwCihoq0q3GzsSvL5Renk+5MlVkerr6ioSE7eXD6ATvzfho2JSopdr
GE5aFzrTK5wfDKVBjpYz4/lt597+zC9WRCPcClkisrwt9as6UisDXivACnmNYuKw
0CNgoUgjaGYFIA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:10 2026 by rpki-client