Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File:                     V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier:          RmTHdUARLiZ66LcT0mj8Hepk0VJp/UfQg5w8r5Oj9hA=
Subject key identifier:   02:6F:83:BE:57:41:E4:32:EA:53:25:2E:A1:8B:C0:7B:38:6B:F8:8E
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       0198D4DFEB536F173507085A4FF242E3675F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number:          1592
Signing time:             Sat 23 Aug 2025 03:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:41 +0000
Files and hashes:         1: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (hash: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=)
                          2: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: WNZwHNlPBvhqJJNpF/5+Pnfsf7P6EAl92ZyjJZD/aJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:eb:53:6f:17:35:07:08:5a:4f:f2:42:e3:67:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Aug 23 03:01:41 2025 GMT
            Not After : Aug 24 03:01:41 2025 GMT
        Subject: CN=026f83be5741e432ea53252ea18bc07b386bf88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:33:f9:91:4d:f7:2f:58:f7:8d:f2:be:0f:
                    ed:84:a0:b1:a5:45:8e:7a:58:da:49:41:00:0e:51:
                    74:fc:9d:54:b1:c0:62:00:e8:b1:02:8e:1d:5f:d7:
                    ba:ed:d7:cc:f2:fb:74:c8:7e:c1:d7:a5:20:50:fd:
                    d0:30:3b:c2:47:6e:b3:45:c6:78:9f:5e:e2:2e:80:
                    ad:d3:d5:28:36:ae:20:12:72:5a:e6:51:2b:d5:ed:
                    76:7d:44:90:2c:47:3a:85:bf:57:62:56:9f:fa:c3:
                    2a:f2:28:ac:63:e6:ec:e7:7f:5a:b8:c8:f1:cf:1c:
                    8d:5e:2d:57:1b:9c:c9:ed:24:92:5c:64:fe:57:3f:
                    e4:1b:e9:a1:f4:0b:a9:19:43:f0:c4:9f:81:8c:a0:
                    1f:08:f6:59:b3:65:1a:93:a6:3f:ba:ee:dd:1d:5b:
                    0b:03:2e:2e:31:14:b7:5e:16:ae:aa:47:b5:53:03:
                    68:a5:de:6d:ac:73:75:d2:69:46:d5:a4:f3:c8:78:
                    bd:76:e2:fb:a5:99:42:21:5a:cc:48:fa:41:9e:ef:
                    fe:38:db:e6:09:01:cb:c3:b1:4f:9a:6a:69:02:f2:
                    aa:c1:dd:3a:43:0c:ba:c3:41:56:94:e4:c2:fc:d7:
                    a3:22:fc:81:6f:b4:07:0b:ff:56:28:2d:37:c2:97:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:83:BE:57:41:E4:32:EA:53:25:2E:A1:8B:C0:7B:38:6B:F8:8E
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2f:3f:6a:7b:ef:cd:02:9e:50:e2:78:82:b1:83:d1:42:13:
         1e:0f:09:09:06:24:c4:43:4f:d1:81:bc:f7:07:89:68:66:77:
         8d:76:b3:bc:05:1c:0b:0f:48:1c:b5:6f:f8:ff:fb:63:1d:a0:
         e8:e6:b0:72:e5:57:09:8c:6f:5f:37:a0:19:3c:db:1b:ad:7f:
         79:50:44:92:8f:ca:8d:1e:01:e2:05:e2:14:fe:c6:e9:14:fa:
         42:ad:33:6d:69:4e:d3:f6:48:e7:97:98:c0:be:ee:3c:24:e0:
         99:74:1b:8b:c3:22:70:c5:95:1b:9c:c8:ec:3b:b5:91:ce:52:
         18:0a:d0:05:00:27:c2:df:ac:ec:f0:de:3c:83:ac:20:06:4b:
         51:68:aa:56:78:89:f2:64:fe:83:41:a9:b7:d8:51:e8:07:25:
         04:e3:8d:4a:f5:a1:18:3e:bf:de:12:96:bf:01:44:61:65:e8:
         13:f5:d9:a8:95:8a:9b:3a:31:c3:0d:c1:12:42:c0:b7:4d:f5:
         6e:9f:8e:9a:ec:17:e2:2d:1d:6f:2e:02:64:0e:2a:af:58:21:
         52:76:de:71:e8:8c:24:57:a8:ba:9c:48:99:c8:ff:3b:b3:2d:
         d0:cf:98:05:e9:20:e8:e3:71:92:57:35:89:17:d2:c5:17:89:
         e3:c2:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:54 2025 by rpki-client