Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          eCLW8OmU9XhGXwO4nWFd2+3v6NAEpgTvW3uAm/Damp8=
Subject key identifier:   64:F9:FC:A4:83:98:51:6C:C4:A0:1A:25:39:E4:C0:F5:FC:36:86:09
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019F9F5F70ABAD8D3182EFE53985E1F37A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          170E
Signing time:             Sun 26 Jul 2026 17:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:59 +0000
Files and hashes:         1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
                          2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: 94kvz/FcZ24GLVLYw2iGXxb24Tu105jMMoMErOvMUn0=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:70:ab:ad:8d:31:82:ef:e5:39:85:e1:f3:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jul 26 17:00:59 2026 GMT
            Not After : Jul 27 17:00:59 2026 GMT
        Subject: CN=64f9fca48398516cc4a01a2539e4c0f5fc368609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:06:65:7d:30:73:1a:ef:02:e0:1d:ac:9e:
                    7d:3f:18:f6:50:57:ee:e1:86:0a:5a:74:98:f1:44:
                    70:c1:18:d8:97:02:10:e1:b4:c4:e3:34:b2:e8:33:
                    6d:81:b5:a0:0f:7e:3b:be:4e:a8:12:f2:1e:3a:db:
                    3a:20:35:96:4f:b0:83:d0:54:36:c4:7d:45:12:7d:
                    93:af:b5:1a:1d:02:ef:69:94:d2:21:61:9d:2d:ea:
                    59:38:1f:82:75:5e:f0:47:1e:f0:75:d5:12:fc:b0:
                    da:e6:bd:d4:aa:db:09:00:22:8c:17:c7:4d:fa:9c:
                    c2:9e:f6:f7:08:11:81:6d:24:9c:24:86:f6:1d:d8:
                    d0:85:5e:91:74:41:41:de:19:93:87:73:ee:e7:54:
                    64:f3:90:be:d2:95:4d:e1:0d:08:8f:1a:26:84:7b:
                    b1:30:27:96:e0:70:5c:0f:3c:85:67:29:dd:8f:0b:
                    7f:63:ab:b6:d8:79:34:e3:a1:3f:01:28:ed:1e:20:
                    b9:0a:a2:29:ed:8f:6a:3b:df:4d:37:cb:4c:9e:9c:
                    5f:7b:cc:cb:8a:9b:5c:19:a4:eb:ae:9c:26:61:47:
                    98:e3:e9:82:3b:bb:b1:33:26:1b:43:57:d5:79:da:
                    1a:6e:29:4a:4c:4e:23:25:fb:44:37:ef:c5:ea:b6:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:FC:A4:83:98:51:6C:C4:A0:1A:25:39:E4:C0:F5:FC:36:86:09
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:30:72:72:d9:18:f5:f3:87:bf:ee:4a:86:d3:5a:b5:8f:
         e8:3d:e8:9d:a9:f6:4d:80:ce:ea:6e:15:f3:5f:28:0b:6a:0b:
         e7:a5:8f:e0:4f:d8:56:aa:32:86:43:37:bd:af:ef:3f:80:b0:
         4b:7f:3e:a9:1f:f9:3a:0f:93:2e:63:60:39:81:62:12:ec:e7:
         2b:da:4b:b4:af:b0:96:f6:72:c6:5b:b3:bb:f6:3b:dd:62:04:
         ce:09:94:3a:71:11:a4:ca:4f:29:23:9b:a4:62:57:2e:7d:bf:
         fb:a8:a8:f2:41:f7:1c:c5:43:0d:51:17:78:b5:0f:7f:d3:4e:
         61:45:4c:c9:98:b0:85:ed:f7:39:7f:61:af:38:36:db:1b:0b:
         48:55:56:61:6b:72:50:5a:a7:1e:8e:46:41:5b:e3:05:a5:77:
         ae:16:a8:d2:e3:cd:ef:ba:3a:41:68:1c:ff:e6:d0:a2:2e:0b:
         80:c1:7d:b6:3d:5a:38:b1:cb:2b:73:d9:12:08:90:fc:56:21:
         2b:62:b9:70:28:4b:d5:d6:fe:14:e0:7a:a9:0a:dd:05:d4:bf:
         45:ab:02:9c:33:ef:12:48:b2:2c:02:e5:27:a2:5e:3e:90:4c:
         43:f9:f3:b4:61:4f:e4:54:db:49:09:4a:33:31:9f:31:96:31:
         11:3e:1a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fX3CrrY0xgu/lOYXh83oaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjYwNzI2MTcwMDU5WhcNMjYwNzI3MTcwMDU5WjAzMTEwLwYDVQQD
Eyg2NGY5ZmNhNDgzOTg1MTZjYzRhMDFhMjUzOWU0YzBmNWZjMzY4NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6oGZX0wcxrvAuAdrJ59Pxj2UFfu
4YYKWnSY8URwwRjYlwIQ4bTE4zSy6DNtgbWgD347vk6oEvIeOts6IDWWT7CD0FQ2
xH1FEn2Tr7UaHQLvaZTSIWGdLepZOB+CdV7wRx7wddUS/LDa5r3UqtsJACKMF8dN
+pzCnvb3CBGBbSScJIb2HdjQhV6RdEFB3hmTh3Pu51Rk85C+0pVN4Q0IjxomhHux
MCeW4HBcDzyFZyndjwt/Y6u22Hk046E/ASjtHiC5CqIp7Y9qO99NN8tMnpxfe8zL
iptcGaTrrpwmYUeY4+mCO7uxMyYbQ1fVedoabilKTE4jJftEN+/F6rZrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT5/KSDmFFsxKAaJTnkwPX8NoYJMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhwwcnLZ
GPXzh7/uSobTWrWP6D3onan2TYDO6m4V818oC2oL56WP4E/YVqoyhkM3va/vP4Cw
S38+qR/5Og+TLmNgOYFiEuznK9pLtK+wlvZyxluzu/Y73WIEzgmUOnERpMpPKSOb
pGJXLn2/+6io8kH3HMVDDVEXeLUPf9NOYUVMyZiwhe33OX9hrzg22xsLSFVWYWty
UFqnHo5GQVvjBaV3rhao0uPN77o6QWgc/+bQoi4LgMF9tj1aOLHLK3PZEgiQ/FYh
K2K5cChL1db+FOB6qQrdBdS/RasCnDPvEkiyLALlJ6JePpBMQ/nztGFP5FTbSQlK
MzGfMZYxET4a4w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:11 2026 by rpki-client