Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          4aeKAuFeH821UCaVw8vkVT0w85YN/XFgkJQWygsPRCA=
Subject key identifier:   5C:3D:BE:98:96:87:D3:D8:EB:02:81:E9:61:04:82:11:E2:02:97:B1
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       01A08B688E788692A0981DEFD5A4BA8F2574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 13:01:20 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:20 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:20 +0000
Files and hashes:         1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
                          2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: FbsFsepmG5tX1cK1misSp1VF+pV5xOkbHjjAGGqUIOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:8e:78:86:92:a0:98:1d:ef:d5:a4:ba:8f:25:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Sep 10 13:01:20 2026 GMT
            Not After : Sep 11 13:01:20 2026 GMT
        Subject: CN=5c3dbe989687d3d8eb0281e961048211e20297b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:52:d2:2d:66:32:88:77:38:b7:eb:5b:16:
                    44:32:d5:df:75:6b:70:ab:a6:d3:0d:2e:a0:c2:0e:
                    91:9d:d3:07:0c:58:6d:bf:90:13:61:13:4d:3b:70:
                    3d:2a:d2:08:fa:9a:9d:20:56:94:36:06:ab:60:ee:
                    c3:26:01:5c:a7:e1:86:c6:13:4b:70:2a:22:60:0b:
                    f8:6a:f8:09:ed:63:17:e8:8d:28:62:5e:fd:e0:d5:
                    ea:1b:86:0e:23:7e:be:19:80:23:e5:5a:0b:82:94:
                    a5:63:a6:74:e7:34:50:19:b1:68:36:f0:ef:b9:38:
                    98:20:8a:7f:63:4e:74:5a:bd:00:91:e5:1e:9d:f5:
                    21:df:3d:91:18:6b:cb:12:1e:7a:33:50:6c:56:47:
                    74:ef:80:5e:70:be:b3:38:68:f2:5c:a7:72:6c:ec:
                    f1:20:44:2e:f9:fc:a4:86:58:8f:fb:da:32:93:1f:
                    a2:f1:6e:59:ed:da:5e:7c:38:06:52:bc:2a:a1:f9:
                    41:c1:a7:5d:51:e5:81:d8:e9:e2:f9:c1:36:9e:a0:
                    57:4c:34:9c:ec:75:cf:e5:92:a4:bc:74:2e:05:a1:
                    76:ee:1e:af:92:86:b5:e3:df:61:25:e4:40:9b:f4:
                    e2:0c:a8:d8:10:73:5a:28:f6:0a:53:fd:d5:e3:a2:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3D:BE:98:96:87:D3:D8:EB:02:81:E9:61:04:82:11:E2:02:97:B1
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:68:64:2c:72:76:39:d5:62:41:7a:09:fd:74:f6:af:d0:
         b4:d9:50:9c:82:a6:f7:a1:14:94:01:b5:28:a4:cb:79:bf:e4:
         f3:84:74:e9:bb:3a:60:5e:5e:20:59:f1:66:e1:b7:06:10:24:
         c9:a0:c4:14:31:f5:29:3b:62:32:4f:ce:17:51:2b:e8:6f:8c:
         c2:62:40:81:4e:5f:39:ce:e7:ac:99:d4:0d:a7:d0:ef:3c:77:
         48:9e:3e:6a:6e:e5:51:42:e3:8b:39:06:2a:e1:82:94:48:b0:
         b4:34:6a:99:20:62:49:cd:ab:da:a5:9c:35:c4:6d:16:42:eb:
         5b:a1:ee:5f:cf:5d:b1:d0:88:ef:f5:1a:70:d4:a1:1a:78:8e:
         c1:c9:b4:58:ce:1d:47:45:bd:8b:55:24:56:a9:3c:37:75:ce:
         c1:6e:dc:55:15:db:dc:ed:19:cd:d7:46:ae:b7:e0:24:b3:6b:
         cc:86:7a:09:97:98:1f:05:19:64:d3:ff:26:c2:43:a7:cf:38:
         96:2d:fd:ff:4b:46:0e:d2:63:08:6e:73:26:af:7e:ac:96:6b:
         54:ff:cc:48:31:a5:62:91:d8:23:f6:5a:0c:95:11:c7:a7:2b:
         d2:5f:29:c5:db:48:95:82:f0:64:3b:2c:77:3b:af:5d:e5:c2:
         cd:6b:ff:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaI54hpKgmB3v1aS6jyV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm
ZDQ5NzAwHhcNMjYwOTEwMTMwMTIwWhcNMjYwOTExMTMwMTIwWjAzMTEwLwYDVQQD
Eyg1YzNkYmU5ODk2ODdkM2Q4ZWIwMjgxZTk2MTA0ODIxMWUyMDI5N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneBS0i1mMoh3OLfrWxZEMtXfdWtw
q6bTDS6gwg6RndMHDFhtv5ATYRNNO3A9KtII+pqdIFaUNgarYO7DJgFcp+GGxhNL
cCoiYAv4avgJ7WMX6I0oYl794NXqG4YOI36+GYAj5VoLgpSlY6Z05zRQGbFoNvDv
uTiYIIp/Y050Wr0AkeUenfUh3z2RGGvLEh56M1BsVkd074BecL6zOGjyXKdybOzx
IEQu+fykhliP+9oykx+i8W5Z7dpefDgGUrwqoflBwaddUeWB2Oni+cE2nqBXTDSc
7HXP5ZKkvHQuBaF27h6vkoa1499hJeRAm/TiDKjYEHNaKPYKU/3V46K9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw9vpiWh9PY6wKB6WEEghHiApexMB8GA1UdIwQY
MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt
MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1
LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcZoZCxy
djnVYkF6Cf109q/QtNlQnIKm96EUlAG1KKTLeb/k84R06bs6YF5eIFnxZuG3BhAk
yaDEFDH1KTtiMk/OF1Er6G+MwmJAgU5fOc7nrJnUDafQ7zx3SJ4+am7lUULjizkG
KuGClEiwtDRqmSBiSc2r2qWcNcRtFkLrW6HuX89dsdCI7/UacNShGniOwcm0WM4d
R0W9i1UkVqk8N3XOwW7cVRXb3O0ZzddGrrfgJLNrzIZ6CZeYHwUZZNP/JsJDp884
li39/0tGDtJjCG5zJq9+rJZrVP/MSDGlYpHYI/ZaDJURx6cr0l8pxdtIlYLwZDss
dzuvXeXCzWv/CQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:37 2026 by rpki-client