Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File:                     V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier:          rwfPRewhGlp6NWL/fllqYJHGkdeoDGBgVJ0nqhDLHNQ=
Subject key identifier:   A9:6B:AE:5B:74:60:9B:D3:2E:43:AF:50:51:5A:D1:C7:D3:DB:35:FF
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       0199FC58C5E4E26A449684FF68DE90CE5E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number:          162B
Signing time:             Sun 19 Oct 2025 12:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:40 +0000
Files and hashes:         1: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (hash: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=)
                          2: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: X0KJPwIgnQo5K91I8DPTF2pylQiI60LeEp1YKRK4n+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:c5:e4:e2:6a:44:96:84:ff:68:de:90:ce:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Oct 19 12:01:40 2025 GMT
            Not After : Oct 20 12:01:40 2025 GMT
        Subject: CN=a96bae5b74609bd32e43af50515ad1c7d3db35ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:f9:ec:e8:88:a7:97:16:da:64:7d:c8:48:
                    15:ad:2a:ae:9b:7f:14:1e:d3:7d:7f:d7:cd:ed:12:
                    c4:8d:05:3c:95:69:22:8e:40:8c:f6:8e:79:11:00:
                    71:65:02:1d:2e:19:a4:69:0d:4e:d8:b9:b5:86:9d:
                    b4:7b:c4:9d:89:fb:9d:c0:a7:5e:e5:be:0d:f7:c2:
                    40:da:d4:79:0e:68:ec:34:19:e7:41:16:08:4c:4d:
                    f2:1a:50:ab:54:39:a9:2a:8c:98:24:25:29:07:1e:
                    62:db:5e:37:50:8c:58:e4:61:b0:51:f4:50:03:f2:
                    2b:e3:54:3f:4c:6f:76:08:8f:bc:ad:90:31:c4:21:
                    3d:cc:5c:90:14:ab:1d:bf:d5:25:16:66:ea:bf:da:
                    59:51:1b:f8:d8:fa:8a:31:09:43:0c:81:6b:24:ac:
                    12:2a:82:c4:08:1e:20:54:0f:a8:6b:cd:35:2d:42:
                    97:07:63:f7:66:71:30:e2:a6:1a:83:3e:b8:02:1c:
                    6a:00:5d:d8:73:11:4c:4e:e5:5e:7d:8e:a0:9c:40:
                    1f:a8:9c:8d:35:87:7e:c9:ea:9f:fd:90:55:70:85:
                    de:9a:55:00:58:4f:4d:a5:92:4a:75:66:31:d0:ae:
                    e9:f5:79:b8:84:c7:3d:46:b5:2c:c8:8d:6a:b9:ec:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:AE:5B:74:60:9B:D3:2E:43:AF:50:51:5A:D1:C7:D3:DB:35:FF
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:07:e8:65:8f:e1:c0:08:c8:01:3f:24:e2:d0:da:01:0c:ab:
         6d:ee:3a:a0:4c:c3:7c:ab:96:08:2e:cd:bb:9c:92:ad:8a:f6:
         c5:8e:40:30:c0:8a:c5:29:b8:64:be:01:72:c7:6b:8f:68:1e:
         61:c4:20:a7:e1:ae:f7:25:6b:4a:c6:f1:67:bf:a2:05:1f:69:
         69:bb:f4:3c:dd:13:90:6a:1f:54:ce:67:42:8e:d0:1f:fe:9b:
         41:71:01:5f:76:a4:c3:0b:bd:da:6b:1b:d4:27:6d:3a:fb:08:
         82:9d:30:74:f2:f0:91:8c:8d:8c:27:5c:54:22:0b:04:9a:2b:
         c4:40:7b:f4:8b:a4:c3:78:cb:ff:39:74:69:c1:39:82:ed:ba:
         23:af:96:76:7d:9f:88:2d:f5:d7:5d:55:b1:af:1f:45:65:96:
         8d:e1:a5:66:03:bf:3e:1d:65:5b:b4:eb:b1:dc:79:d3:b9:80:
         dd:0e:67:81:02:bd:3d:cd:aa:a1:44:af:1b:2f:15:e6:7a:0b:
         21:4a:68:fc:cf:c2:2d:b6:37:98:77:b8:56:96:76:cc:cb:ba:
         24:e8:ed:e4:28:b6:e4:05:57:ec:c2:d3:f3:4a:76:3c:99:22:
         39:9d:f8:95:82:16:55:f5:1e:31:04:6f:51:2f:29:f1:c4:0a:
         54:83:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:32 2025 by rpki-client