Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          /fpT/aERVmR0TBIJs1DXmvebbpQaGt9vp/ywLshqSWs=
Subject key identifier:   5B:EB:21:15:6F:39:DA:22:B4:E8:E3:9B:61:2F:CE:64:E2:4A:27:11
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019E2ADE9AF26B9BE2776DBE6F990F454F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0CAB
Signing time:             Fri 15 May 2026 09:01:32 +0000
Manifest this update:     Fri 15 May 2026 09:01:32 +0000
Manifest next update:     Sat 16 May 2026 09:01:32 +0000
Files and hashes:         1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
                          2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
                          3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
                          4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: VZ3ymnRLxFH5tlXv9Ji8bL8D7a0Di4fjVCYCalmPtJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:9a:f2:6b:9b:e2:77:6d:be:6f:99:0f:45:4f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: May 15 09:01:32 2026 GMT
            Not After : May 16 09:01:32 2026 GMT
        Subject: CN=5beb21156f39da22b4e8e39b612fce64e24a2711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:87:7f:7c:d8:96:5f:a9:a5:2b:0f:f1:e7:
                    b8:96:86:21:cd:a9:f6:fe:ab:3e:f1:5f:b5:a1:78:
                    88:12:18:a1:81:10:66:3c:6f:9d:75:41:f3:6b:46:
                    ad:db:21:0b:6a:41:27:4c:f8:16:0c:73:65:fb:98:
                    0f:28:97:bb:69:9c:ed:3f:48:32:5e:60:87:6b:3c:
                    ab:31:e8:80:73:57:0b:04:c6:c5:6b:98:c3:f1:34:
                    a2:d3:2a:55:c6:91:3d:97:dd:c2:00:23:5f:3c:36:
                    4d:6d:ec:a9:f0:6d:95:7d:54:26:a0:43:8f:3a:10:
                    a3:c6:83:43:c0:7d:04:17:8e:73:86:9a:a1:ee:cb:
                    7a:69:d1:f1:b4:9b:1b:a8:95:18:d9:c6:5f:e2:c9:
                    47:85:d5:08:33:96:70:e8:88:c4:75:fe:0f:11:f7:
                    13:37:f6:fb:a1:43:18:88:db:8a:70:2c:0d:c9:0d:
                    4f:bb:2b:61:1e:39:df:cd:6d:5c:50:c2:d4:76:db:
                    c7:21:3e:1c:77:58:96:58:07:d9:be:c4:f7:ec:2a:
                    9d:8e:c4:da:b8:42:17:8a:d7:db:eb:19:0e:28:e4:
                    7e:da:47:a2:89:f5:d7:5e:94:10:0d:c6:96:ef:95:
                    0b:c6:19:11:18:d7:29:7b:de:41:ff:c6:37:f6:ae:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:21:15:6F:39:DA:22:B4:E8:E3:9B:61:2F:CE:64:E2:4A:27:11
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:60:58:2e:cc:80:4b:5b:40:6b:61:b3:a4:03:e1:1f:54:78:
         30:90:af:f5:d7:66:aa:37:86:36:a8:fc:e9:08:cf:0c:18:3c:
         4e:8e:57:7f:e4:42:a7:f0:96:80:0a:8d:df:0d:a7:55:e2:b9:
         24:3c:d3:e0:1d:c1:26:b0:4c:33:22:a4:ee:0d:2d:95:67:3e:
         a7:ef:e1:de:a6:01:66:20:8b:87:08:6f:3a:27:7f:a8:64:92:
         2a:ce:a1:5c:db:23:f4:89:3b:f2:d6:c9:08:ce:0d:fa:d4:e8:
         c2:8d:c5:c1:42:dc:ca:58:db:50:b7:c7:07:07:af:37:31:7e:
         43:4b:8c:ab:dc:b5:44:4d:62:5b:ab:42:8d:72:a8:f0:d3:18:
         e9:f5:4b:e4:e7:04:05:78:b4:29:ea:60:84:6a:4b:3b:3c:98:
         ed:ce:cf:c1:32:1b:30:75:3d:33:fd:82:24:c0:42:0e:a4:98:
         d5:b1:bc:3a:47:19:4f:7d:89:79:70:60:a7:e1:00:e5:4b:22:
         17:da:b6:98:0c:ed:33:11:56:d9:71:53:d5:fb:78:f6:a4:95:
         49:9e:e2:3b:92:73:2a:d6:1c:65:7b:37:ff:42:68:92:4c:b1:
         49:90:02:8b:4c:02:e6:74:7a:61:02:ba:0c:6f:a1:87:36:19:
         2a:4c:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:24:44 2026 by rpki-client