Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          9jFTkcnsXe1yO+zNJppYjQU16hDyLQkuurM3rTKlAfg=
Subject key identifier:   48:29:EC:26:12:3C:87:FC:21:2A:AF:72:15:AC:A0:9D:A0:10:35:5E
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019A270ACE24C25E7BDA4DEDF35D43E187B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          16FC
Signing time:             Mon 27 Oct 2025 19:00:10 +0000
Manifest this update:     Mon 27 Oct 2025 19:00:10 +0000
Manifest next update:     Tue 28 Oct 2025 19:00:10 +0000
Files and hashes:         1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: W/IUUxpEiVPswyVp/y3j65enRlByosralJCiHr8BMRQ=)
                          2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:0a:ce:24:c2:5e:7b:da:4d:ed:f3:5d:43:e1:87:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Oct 27 19:00:10 2025 GMT
            Not After : Oct 28 19:00:10 2025 GMT
        Subject: CN=4829ec26123c87fc212aaf7215aca09da010355e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:d7:5a:c1:72:76:26:dd:b1:04:0b:1c:39:
                    15:1f:d5:b2:ef:c7:21:1c:7b:ea:36:fd:a0:c0:0d:
                    a3:3b:fb:33:11:ed:88:4f:4f:36:42:ef:30:13:0b:
                    99:14:3a:63:6b:c2:a8:cd:8b:57:8e:d9:73:01:e2:
                    5f:24:a3:ff:50:95:34:d4:ce:ea:17:ae:25:d0:94:
                    5a:22:39:ae:6b:ca:13:34:67:d7:70:39:80:ea:2e:
                    61:53:a6:28:13:ca:e6:62:c9:9f:35:f4:52:bf:b4:
                    db:ab:02:16:3e:f3:f5:dc:e6:a0:37:b9:8c:8c:7c:
                    08:5f:df:2e:c7:d4:f7:d6:7d:ee:ba:64:3f:45:09:
                    ec:ad:87:0b:30:9f:d3:b5:2f:86:9b:cb:20:bd:8e:
                    a9:81:35:03:7a:77:84:43:d4:cd:43:a4:3c:ab:44:
                    ce:7a:61:66:71:22:58:7e:7e:36:85:31:a1:8c:36:
                    96:3e:23:71:54:33:84:2e:a0:c0:a3:f2:1f:88:84:
                    d6:f1:5c:28:a7:76:31:ee:04:17:a0:97:f2:66:fc:
                    fe:cd:a8:7d:ba:40:be:c8:39:45:91:10:0b:a9:4d:
                    27:1e:cd:0e:40:32:0d:fc:88:2c:43:10:9f:6d:c6:
                    65:00:2b:06:0c:bf:ce:da:eb:df:49:a9:70:40:0d:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:EC:26:12:3C:87:FC:21:2A:AF:72:15:AC:A0:9D:A0:10:35:5E
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:e5:df:55:8c:45:d7:f3:c9:62:0e:55:89:78:bf:76:33:
         eb:a2:53:1c:87:d2:8e:c8:44:48:d2:8f:30:25:a2:e9:5e:cc:
         fc:cc:8d:75:80:8c:c6:b2:17:01:88:8f:d2:34:f4:57:6d:c6:
         a3:fb:ea:91:58:e8:93:8a:85:4f:4a:42:d4:33:9f:e0:3d:99:
         59:3d:51:89:9b:68:43:d7:7e:21:7b:56:c9:ff:70:6e:46:57:
         08:f7:08:98:0d:0b:4c:ab:a5:29:48:49:ac:11:8e:ae:45:26:
         b5:97:e3:88:19:10:9b:77:5f:63:b9:a2:4d:c3:ea:a5:b2:eb:
         4b:16:c1:cb:6a:5a:a9:8b:d1:4c:87:15:e6:0c:df:b0:c5:94:
         2b:2a:2b:8e:29:53:a6:d1:49:93:dc:43:34:e9:09:25:8f:20:
         72:00:f3:67:ce:d9:39:7b:04:6c:a5:39:31:8c:12:4b:d1:ee:
         eb:34:38:cb:13:60:07:71:36:ba:35:45:a4:62:60:6a:cc:1f:
         42:6f:e7:63:95:27:84:74:87:74:e5:bb:c0:77:b5:fe:af:e4:
         d1:3d:19:b9:2f:e6:4b:88:da:d8:63:23:6e:e7:7b:2c:40:20:
         29:25:cd:8c:b0:53:3e:df:ae:ec:b6:24:c7:1d:b1:7d:4a:34:
         5a:4d:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:56:17 2025 by rpki-client