Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File:                     V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier:          kodC2UvalgJzF0EeqVjpj6HYnbRzT4kcf2jnT9qDt3M=
Subject key identifier:   82:B3:6B:42:CC:FA:F8:EC:23:BC:FB:70:AE:06:E1:12:C2:46:D3:91
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       01A0C030D08B3F0EE6ECF294C87CDE3AC669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number:          19AF
Signing time:             Sun 20 Sep 2026 19:00:19 +0000
Manifest this update:     Sun 20 Sep 2026 19:00:19 +0000
Manifest next update:     Mon 21 Sep 2026 19:00:19 +0000
Files and hashes:         1: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: 3BqAUvQ9rd214JRwGzt0iuLv9yyZJuSIShutqd1ZJrI=)
                          2: esou6OQx2LjTBHffi2bAjGbVZsY.asa (hash: aICxQXMtWBc2GUb4AAAHnW02b7yVPYsZZ/aBymFo0CU=)
                          3: v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa (hash: pMY9nBh6/UwsDxDddCcVlI4vP8imr57XVjh9i41unRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:30:d0:8b:3f:0e:e6:ec:f2:94:c8:7c:de:3a:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Sep 20 19:00:19 2026 GMT
            Not After : Sep 21 19:00:19 2026 GMT
        Subject: CN=82b36b42ccfaf8ec23bcfb70ae06e112c246d391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:5e:d8:9c:fb:3b:47:6f:1d:9c:3b:a4:56:
                    c8:8b:41:3d:eb:49:c3:07:6a:43:f2:b2:aa:9a:cd:
                    89:10:da:bb:a5:81:8c:fa:c4:ce:55:9d:2b:d4:74:
                    da:8e:11:e6:1a:a3:94:9a:90:b3:8f:b1:13:3f:54:
                    44:84:e1:95:f4:dd:3e:84:f5:8e:92:b0:a6:ce:20:
                    36:3e:fd:2a:38:4c:13:74:d6:3b:67:5d:5a:c9:68:
                    b8:dc:16:52:44:47:4a:1e:a6:07:fc:1f:7d:44:fd:
                    d7:1d:85:85:6c:48:fc:12:df:12:51:ff:db:7a:61:
                    02:b1:3c:e2:27:f8:65:f8:ca:f2:64:d8:a2:04:b1:
                    40:42:3e:54:3f:0a:2d:2e:f1:ef:68:0c:75:da:2f:
                    c4:21:71:60:44:b1:32:12:40:8d:b0:7e:84:64:4a:
                    99:86:7c:79:82:58:7b:a6:c0:97:4a:05:3f:36:ce:
                    ac:96:3b:f9:71:9e:51:af:c3:ff:4d:60:a7:af:be:
                    58:0a:ca:f0:b6:60:26:92:51:f8:e1:db:d5:e5:8f:
                    f1:d5:db:e7:47:f0:69:c2:93:d5:d4:7a:d9:f5:26:
                    bc:f2:32:87:0e:ae:2a:b1:df:2c:1f:69:b6:88:82:
                    80:6a:a9:f0:5b:b1:41:cb:80:ae:cc:b2:40:ab:aa:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:6B:42:CC:FA:F8:EC:23:BC:FB:70:AE:06:E1:12:C2:46:D3:91
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:9d:1d:b3:71:c2:71:1b:e1:ce:51:7f:05:1f:38:56:41:
         fd:41:8e:fb:1a:d8:c2:db:56:9e:69:ba:ee:c5:e2:3d:1b:3b:
         3a:bc:84:e2:26:d9:ac:8c:f9:c1:a4:55:db:6f:83:78:9c:cd:
         62:c3:89:90:ea:1d:5a:17:e6:d2:d9:d0:90:a1:33:0c:54:ec:
         9a:04:a2:78:35:fe:34:c4:af:83:da:19:ee:9f:57:57:07:d9:
         5c:38:86:78:86:61:f4:2c:df:60:c9:48:ef:2e:d9:20:19:cd:
         24:e6:3a:c3:0f:31:43:aa:e0:64:bb:5a:1a:74:98:1a:2e:66:
         94:d3:b9:e9:e7:f9:45:9c:47:06:3f:bf:93:8e:98:88:1d:4f:
         ea:30:c7:60:87:d4:d0:d8:b1:a8:e4:af:c3:81:f5:c8:e4:ec:
         b8:ec:2e:24:ac:38:b4:c5:18:05:47:c1:98:85:68:09:f4:1c:
         61:6f:0b:83:c8:fd:f6:5f:ec:4e:a3:6a:e8:03:8d:88:20:63:
         18:e4:d5:12:a9:f2:6a:cb:33:6d:22:6d:b5:ac:1e:e5:69:33:
         f1:7d:c5:a1:50:21:94:24:72:11:cb:c3:62:37:dc:58:0b:80:
         fa:4c:49:7a:18:25:90:d1:50:9c:c8:1a:2c:ef:47:bf:e7:13:
         0c:90:1c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAMNCLPw7m7PKUyHzeOsZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmU4ZmM3OWM5MzUwNGZjMjFmZjcwZmJhNDY5YTRjYmJl
MmYwMjkwHhcNMjYwOTIwMTkwMDE5WhcNMjYwOTIxMTkwMDE5WjAzMTEwLwYDVQQD
Eyg4MmIzNmI0MmNjZmFmOGVjMjNiY2ZiNzBhZTA2ZTExMmMyNDZkMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPRe2Jz7O0dvHZw7pFbIi0E960nD
B2pD8rKqms2JENq7pYGM+sTOVZ0r1HTajhHmGqOUmpCzj7ETP1REhOGV9N0+hPWO
krCmziA2Pv0qOEwTdNY7Z11ayWi43BZSREdKHqYH/B99RP3XHYWFbEj8Et8SUf/b
emECsTziJ/hl+MryZNiiBLFAQj5UPwotLvHvaAx12i/EIXFgRLEyEkCNsH6EZEqZ
hnx5glh7psCXSgU/Ns6sljv5cZ5Rr8P/TWCnr75YCsrwtmAmklH44dvV5Y/x1dvn
R/BpwpPV1HrZ9Sa88jKHDq4qsd8sH2m2iIKAaqnwW7FBy4CuzLJAq6rYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKza0LM+vjsI7z7cK4G4RLCRtORMB8GA1UdIwQY
MBaAFFe+j8eck1BPwh/3D7pGmky74vApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEt
NTNjNjljMWNlNTBjLzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEtNTNjNjljMWNlNTBj
LzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPOdHbNx
wnEb4c5RfwUfOFZB/UGO+xrYwttWnmm67sXiPRs7OryE4ibZrIz5waRV22+DeJzN
YsOJkOodWhfm0tnQkKEzDFTsmgSieDX+NMSvg9oZ7p9XVwfZXDiGeIZh9CzfYMlI
7y7ZIBnNJOY6ww8xQ6rgZLtaGnSYGi5mlNO56ef5RZxHBj+/k46YiB1P6jDHYIfU
0NixqOSvw4H1yOTsuOwuJKw4tMUYBUfBmIVoCfQcYW8Lg8j99l/sTqNq6AONiCBj
GOTVEqnyasszbSJttawe5Wkz8X3FoVAhlCRyEcvDYjfcWAuA+kxJehglkNFQnMga
LO9Hv+cTDJAcGw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:49 2026 by rpki-client