Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File:                     VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier:          IZqrVdkvS3YvudurOHBwuJmWgj9Ift7tAFBI/YV+Th0=
Subject key identifier:   03:CD:E7:2E:3A:F1:CE:AE:8F:9F:00:2E:57:63:65:81:BB:EA:75:B4
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer:       /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial:       019E314E78A23DCC1243F2B0EAE674FE5EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number:          0296
Signing time:             Sat 16 May 2026 15:01:26 +0000
Manifest this update:     Sat 16 May 2026 15:01:26 +0000
Manifest next update:     Sun 17 May 2026 15:01:26 +0000
Files and hashes:         1: H6jqDEJRJpVr93f9cwyj02eDJQY.roa (hash: mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=)
                          2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: GdngxTME2pjiATicYoJP2xJ9w/SZltavdkkIuGhgV8k=)
                          3: iYM-FIy7T-G9R6n2wd4TYw9TnIk.roa (hash: PXUoRcNc7FF2/MrTmkvz/siqH/fXjLpzh1E05qTAFP8=)
                          4: uUGoEjdfbBo-jF6U1dwSdm-Vmro.roa (hash: zwHsLDdeMuR8VmDXVFWRldbxh4F8eqhJM3STNDr64Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:78:a2:3d:cc:12:43:f2:b0:ea:e6:74:fe:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
        Validity
            Not Before: May 16 15:01:26 2026 GMT
            Not After : May 17 15:01:26 2026 GMT
        Subject: CN=03cde72e3af1ceae8f9f002e57636581bbea75b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:a8:7b:96:be:b8:0d:08:25:1d:71:50:fe:
                    f9:2d:c6:c0:44:2f:93:b5:c4:cd:70:b7:dc:3e:5a:
                    34:2c:30:3e:93:ff:43:fa:e6:0b:5a:85:74:da:da:
                    de:d3:0c:79:4c:71:ad:ba:b9:a5:e5:e7:b3:16:47:
                    9d:d1:c0:ce:84:a5:34:69:20:ee:b6:29:fc:cc:38:
                    eb:b9:39:d5:ad:3d:bf:f5:62:ff:0a:cd:62:1b:3f:
                    60:38:cb:fe:ae:9f:58:2e:3c:b1:68:5d:69:6d:1e:
                    f5:0a:71:05:21:92:ae:12:ef:fb:7f:f1:00:df:40:
                    b4:58:0a:b1:b4:47:81:17:15:e9:83:14:0f:28:ae:
                    9c:11:78:7d:cd:81:20:8b:f6:5e:4f:ac:c0:c7:de:
                    22:b6:6d:83:a8:a0:43:c0:8a:5f:c2:d7:ec:94:b0:
                    9f:78:76:58:15:72:0e:ee:05:8c:0c:2c:96:1b:48:
                    bf:90:96:e1:30:ea:08:59:c3:0e:94:2a:0c:82:6b:
                    88:e6:44:aa:2c:13:35:a0:5f:7e:ac:01:ae:19:e8:
                    5d:42:5a:6e:6e:de:62:74:8f:63:17:5d:a8:07:3f:
                    ee:ea:1f:eb:2b:56:f2:a0:ef:22:0a:a3:ff:39:90:
                    6b:df:c9:2d:c5:82:89:f7:d7:ec:4a:0a:37:87:06:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:E7:2E:3A:F1:CE:AE:8F:9F:00:2E:57:63:65:81:BB:EA:75:B4
            X509v3 Authority Key Identifier:
                keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:fd:4d:01:7b:f7:a8:0b:f3:6c:59:03:ac:eb:31:e0:b9:
         27:9e:83:eb:b3:bf:4a:d3:a7:51:1c:f6:46:bd:6f:dc:0a:3e:
         b2:89:8b:68:45:5c:02:cb:f2:08:25:64:11:e3:21:d0:16:a0:
         ab:eb:97:f4:02:8f:d1:98:27:72:f1:42:2c:d4:aa:2e:7b:0e:
         03:80:6d:50:b1:4e:bc:fe:c6:f4:87:f0:0e:47:3d:41:e2:cb:
         e9:2a:24:5c:ae:4f:e6:90:2b:71:6b:a2:cd:5f:a3:72:c4:da:
         dc:96:23:1d:41:ce:5e:a8:56:6d:43:30:86:96:0a:88:90:17:
         9f:1f:df:dd:f3:ab:8b:ec:b2:66:9b:1d:0b:f3:3d:7b:6e:e0:
         84:29:72:2b:f6:f7:cf:47:e0:68:09:78:0b:83:51:12:e4:7b:
         52:08:7c:f7:e0:0f:a7:d9:7b:30:10:86:f3:42:e1:cd:3e:d2:
         50:50:54:2d:78:b0:af:cc:b8:88:a1:97:1b:ae:8d:de:35:1a:
         06:6b:48:71:5e:74:3f:c4:7f:a7:4b:65:48:8c:8f:58:82:e3:
         d5:9b:06:fc:64:5c:9f:4d:b5:4b:06:6f:a2:b3:80:fc:8c:8c:
         8c:e9:03:29:de:75:b3:e8:ab:fe:4c:23:50:e1:07:88:e8:98:
         d3:be:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:34 2026 by rpki-client