Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          nkPq6heAbLcZL9DMUSAMAuzYEAO6WPMxF2F1ecLSd0w=
Subject key identifier:   23:6F:22:F6:9A:18:D6:EF:93:15:43:A2:A0:94:4C:BE:05:AD:74:37
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019CE3A344E2B4F6A6A04474CA542B025FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          15A3
Signing time:             Thu 12 Mar 2026 20:00:53 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:53 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:53 +0000
Files and hashes:         1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: kS+fzUMnk2rmkA+IAFZFG3GMMj+/kWRxIAWlZ/nYAAE=)
                          3: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          4: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
                          5: iMMDQPxmEunva-6qW_k1RXMrqUw.roa (hash: DVv/oLi42dPU7BobBX5SMJzy6a3Iz8NREOdCrON/nfA=)
                          6: mEdwgIPRh23OxSoHlQNJuRMghjc.roa (hash: F8DBsuD0LXSZtLRp2HPMhvbe4OQSD53Wc5fBou6rnO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:44:e2:b4:f6:a6:a0:44:74:ca:54:2b:02:5f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Mar 12 20:00:53 2026 GMT
            Not After : Mar 13 20:00:53 2026 GMT
        Subject: CN=236f22f69a18d6ef931543a2a0944cbe05ad7437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:16:77:ff:28:b6:59:39:7b:23:de:95:0a:
                    e5:8e:82:97:53:a3:24:95:54:60:51:83:58:70:d8:
                    91:46:5f:fe:8b:02:c9:53:94:c2:a6:45:07:1a:69:
                    7c:76:61:f2:72:7c:1f:66:c5:ae:db:b0:13:f9:39:
                    46:bc:2a:54:86:d1:5c:d8:78:8f:b1:6c:2a:a7:17:
                    ef:81:6a:d0:c9:79:cf:0f:4c:05:db:ab:d3:36:1c:
                    dc:52:0b:2d:8a:b4:23:e0:29:81:a4:8f:c8:f8:1c:
                    7d:73:ba:c6:bf:2c:0f:5f:35:2b:23:b2:71:38:fc:
                    b7:09:db:dd:9f:24:58:2a:4b:a3:0b:fb:45:65:b0:
                    21:23:09:42:13:31:85:60:3b:06:e3:9e:a2:4b:69:
                    86:fb:b4:00:d1:93:cd:43:b6:31:dd:6f:07:47:67:
                    0e:2e:5b:fa:18:28:c7:9a:2a:c0:45:29:92:3c:b9:
                    b8:22:b0:d4:55:1b:b3:4d:49:11:e5:fd:c8:c6:3c:
                    e6:05:3e:a5:de:6c:0b:56:cb:41:46:2d:a2:43:bf:
                    f2:fa:8d:71:22:93:30:f8:80:4f:51:d7:84:fb:47:
                    76:79:e5:cc:7a:76:3b:a5:54:39:cb:4a:d9:3c:34:
                    3d:72:9e:eb:34:cb:7c:cc:44:a1:c4:42:ab:ac:5f:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:22:F6:9A:18:D6:EF:93:15:43:A2:A0:94:4C:BE:05:AD:74:37
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:ea:5f:5d:7b:49:c2:d4:0d:a7:e0:44:d0:45:bc:9f:d1:
         c4:9e:1d:08:83:fc:1c:8b:a6:c5:e3:ff:91:d9:50:fc:ef:72:
         6d:a7:93:60:3d:e5:05:f9:b8:79:08:22:b3:8d:61:60:f0:40:
         01:06:d9:ca:04:5d:0c:c0:76:92:d8:fb:7c:3e:fc:2f:03:9d:
         a0:84:aa:51:2d:0f:7c:29:e1:4e:66:13:dc:dd:cd:2b:d8:d1:
         0f:3d:eb:60:5d:73:e8:15:94:2d:d6:d5:62:c3:a2:01:d8:ab:
         a2:65:1f:48:be:77:c7:c2:37:fe:50:40:d3:27:b8:76:ff:d0:
         02:06:9f:50:fe:65:e9:d3:a1:3e:c8:91:c4:84:c6:34:17:d1:
         81:fd:79:51:36:c4:41:0f:ab:1e:3f:3c:4b:c5:a0:0b:55:7f:
         1c:68:4b:33:92:c2:6a:50:ac:b3:02:3b:15:79:6a:b8:96:c7:
         5d:e3:a0:71:40:86:94:26:a8:7f:63:5e:55:86:f2:ae:f9:09:
         8d:a8:1d:06:ea:90:28:cd:e6:ca:09:b5:79:f6:dc:ff:25:67:
         e9:66:08:e9:17:e5:9e:6a:f3:69:e2:29:b3:9b:84:ba:45:97:
         13:35:32:4e:6d:e0:73:87:65:58:95:f1:9d:3a:05:6f:fc:0a:
         01:55:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:37 2026 by rpki-client