Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File:                     V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier:          TE7qGPUSbdO0HSBHLbDN1eAUqIBstYphCn9LEmqw36k=
Subject key identifier:   57:71:CB:C6:F1:58:2C:F9:0F:36:74:1C:9C:E2:8D:38:CC:CD:22:FB
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       01A1A9DE3E8F3FFA3B41C18FE9FA0E7D22DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number:          1A28
Signing time:             Thu 05 Nov 2026 04:01:16 +0000
Manifest this update:     Thu 05 Nov 2026 04:01:16 +0000
Manifest next update:     Fri 06 Nov 2026 04:01:16 +0000
Files and hashes:         1: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: CQ8j+Ut5p6N3yNGwbCjq57ruq1ZPL7/GyAK2U+3Bg5Q=)
                          2: esou6OQx2LjTBHffi2bAjGbVZsY.asa (hash: aICxQXMtWBc2GUb4AAAHnW02b7yVPYsZZ/aBymFo0CU=)
                          3: v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa (hash: pMY9nBh6/UwsDxDddCcVlI4vP8imr57XVjh9i41unRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:de:3e:8f:3f:fa:3b:41:c1:8f:e9:fa:0e:7d:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Nov  5 04:01:16 2026 GMT
            Not After : Nov  6 04:01:16 2026 GMT
        Subject: CN=5771cbc6f1582cf90f36741c9ce28d38cccd22fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:13:e2:79:a8:c9:8b:2e:9b:cd:11:5b:22:
                    49:bb:15:70:2e:5a:ec:9d:17:a1:47:6d:5f:f0:b5:
                    5c:53:d5:16:9a:48:23:dd:ef:ad:ac:b1:58:40:09:
                    55:47:02:2a:53:fc:d1:64:12:1e:04:b5:ea:3e:48:
                    73:62:66:b8:80:95:51:91:87:9d:be:83:de:df:84:
                    b2:cc:17:5c:ea:b0:8e:7b:95:41:eb:1c:ae:29:f3:
                    d8:e2:cb:c2:b8:47:bc:e1:be:b3:a2:b3:00:71:fa:
                    20:f3:f0:57:e3:9e:1c:d4:57:a4:9f:aa:89:d0:60:
                    4a:cf:9e:6e:b0:75:e0:e8:96:1c:5b:c3:74:a4:be:
                    3e:81:de:36:9c:fe:3f:bd:fc:18:18:4a:68:2d:ff:
                    e9:ce:70:90:07:16:dc:2f:72:c4:e9:92:7f:a5:03:
                    b5:53:66:01:89:90:b9:7f:de:50:a7:fe:d8:68:86:
                    d1:41:88:2b:5a:50:7c:29:b7:7b:de:9b:a2:35:de:
                    40:f8:53:fb:38:0e:ab:81:15:63:12:52:31:43:41:
                    19:89:36:c1:78:0d:35:28:77:68:51:83:9b:fd:c3:
                    74:60:52:83:b4:db:65:44:ba:f6:ed:42:81:f5:83:
                    af:14:b2:25:bc:f1:d7:6f:d5:6d:69:f8:78:5f:2c:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:CB:C6:F1:58:2C:F9:0F:36:74:1C:9C:E2:8D:38:CC:CD:22:FB
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:d4:1a:b0:b0:51:45:00:b6:cd:fc:e4:a2:7a:34:18:84:
         e2:e3:3e:29:63:e2:1c:c4:18:b3:3b:a8:40:c4:45:18:29:04:
         50:bb:b4:27:4a:86:de:e9:8f:61:22:b6:8f:51:b5:8b:71:ac:
         07:a4:42:dd:37:db:9b:33:48:7e:0e:21:3d:eb:18:a3:c4:ac:
         dc:c3:a8:63:58:ac:46:35:82:71:6d:c0:43:e2:90:b6:39:b9:
         e6:ae:75:55:a2:ad:56:95:06:9a:e9:38:ae:3d:9c:39:bf:2c:
         ff:39:4c:aa:18:1e:0b:40:0a:22:b7:4a:b1:f0:6c:ca:58:b3:
         77:f2:af:50:1e:de:2b:a5:d8:48:bc:74:b6:67:29:ec:4d:b9:
         08:98:07:bd:fe:f2:dd:75:32:a5:a4:b9:5f:b8:50:8f:21:8a:
         05:31:1a:43:47:c3:dd:49:e0:88:e8:fc:12:29:a6:c2:7d:e9:
         34:82:8c:cd:27:ab:a3:c2:ae:5f:1c:8e:43:f6:a6:da:7e:50:
         9b:86:5e:91:75:db:17:89:9a:4b:62:7d:1a:6e:c1:35:cf:eb:
         b9:c0:5e:c1:0a:2e:04:0d:a8:68:d9:70:1b:cd:9b:d5:c3:17:
         81:a7:1a:63:87:a8:7d:04:b3:01:b7:09:f4:1d:75:17:cc:34:
         8d:64:88:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGp3j6PP/o7QcGP6foOfSLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmU4ZmM3OWM5MzUwNGZjMjFmZjcwZmJhNDY5YTRjYmJl
MmYwMjkwHhcNMjYxMTA1MDQwMTE2WhcNMjYxMTA2MDQwMTE2WjAzMTEwLwYDVQQD
Eyg1NzcxY2JjNmYxNTgyY2Y5MGYzNjc0MWM5Y2UyOGQzOGNjY2QyMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkT4nmoyYsum80RWyJJuxVwLlrs
nRehR21f8LVcU9UWmkgj3e+trLFYQAlVRwIqU/zRZBIeBLXqPkhzYma4gJVRkYed
voPe34SyzBdc6rCOe5VB6xyuKfPY4svCuEe84b6zorMAcfog8/BX454c1Fekn6qJ
0GBKz55usHXg6JYcW8N0pL4+gd42nP4/vfwYGEpoLf/pznCQBxbcL3LE6ZJ/pQO1
U2YBiZC5f95Qp/7YaIbRQYgrWlB8Kbd73puiNd5A+FP7OA6rgRVjElIxQ0EZiTbB
eA01KHdoUYOb/cN0YFKDtNtlRLr27UKB9YOvFLIlvPHXb9Vtafh4XyzLQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdxy8bxWCz5DzZ0HJzijTjMzSL7MB8GA1UdIwQY
MBaAFFe+j8eck1BPwh/3D7pGmky74vApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEt
NTNjNjljMWNlNTBjLzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEtNTNjNjljMWNlNTBj
LzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfjUGrCw
UUUAts385KJ6NBiE4uM+KWPiHMQYszuoQMRFGCkEULu0J0qG3umPYSK2j1G1i3Gs
B6RC3TfbmzNIfg4hPesYo8Ss3MOoY1isRjWCcW3AQ+KQtjm55q51VaKtVpUGmuk4
rj2cOb8s/zlMqhgeC0AKIrdKsfBsylizd/KvUB7eK6XYSLx0tmcp7E25CJgHvf7y
3XUypaS5X7hQjyGKBTEaQ0fD3UngiOj8Eimmwn3pNIKMzSero8KuXxyOQ/am2n5Q
m4ZekXXbF4maS2J9Gm7BNc/rucBewQouBA2oaNlwG82b1cMXgacaY4eofQSzAbcJ
9B11F8w0jWSIlw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:40:52 2026 by rpki-client