Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          2PwDvCs63kxQMJH0OCGmmtG2+180H49Tr2kLctRVCI8=
Subject key identifier:   77:D4:50:BC:06:9B:B2:60:A6:F2:33:26:86:AD:9E:75:03:3F:07:F5
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       01A180AB2EB61E802EF90DD05663AF269ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          1ACB
Signing time:             Wed 28 Oct 2026 04:01:04 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:04 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:04 +0000
Files and hashes:         1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
                          2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: R5ecSV2T39ek7O6gRsMHIrcMtWHIZlaDTV9WhoVef9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:2e:b6:1e:80:2e:f9:0d:d0:56:63:af:26:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Oct 28 04:01:04 2026 GMT
            Not After : Oct 29 04:01:04 2026 GMT
        Subject: CN=77d450bc069bb260a6f2332686ad9e75033f07f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:9d:1b:0e:b6:37:37:37:a2:56:57:2c:f1:
                    e2:99:6d:cd:62:5f:ee:07:89:fa:f2:42:c9:11:fc:
                    6b:4e:0a:a8:15:58:68:70:36:c6:cb:86:5a:7b:b6:
                    c2:2a:c9:db:e7:50:74:ee:80:21:c2:4f:fe:d0:b0:
                    a5:1f:53:a8:0b:a9:87:81:9e:b7:68:b5:ec:ab:7f:
                    2e:5d:ab:34:85:c8:53:d8:15:36:9b:40:70:cc:f2:
                    6c:ba:bd:e5:5f:bd:4f:00:00:91:c2:34:37:12:71:
                    91:b6:b6:6f:62:8f:13:fb:aa:29:11:84:de:83:50:
                    92:33:2d:3d:6b:3c:93:56:74:2f:b0:af:d4:40:d5:
                    46:2a:02:74:4b:e3:f7:c2:a9:65:93:25:83:c0:49:
                    94:e3:ed:4e:14:42:7b:f7:01:27:6d:e8:f0:c4:b9:
                    01:11:13:4c:20:38:2f:a6:8e:59:4e:b2:43:df:ce:
                    fb:53:c3:01:46:98:44:64:d2:28:1e:a9:93:bd:22:
                    19:ee:51:f4:86:8f:5d:70:d2:19:ac:b8:67:27:af:
                    ec:37:a1:9c:8f:12:45:99:d0:e2:74:61:08:72:3a:
                    eb:45:e5:9e:7d:fe:40:94:b2:ef:02:b7:70:b2:a0:
                    77:74:58:33:70:dc:7f:27:1c:2b:b5:4a:cb:76:2b:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:50:BC:06:9B:B2:60:A6:F2:33:26:86:AD:9E:75:03:3F:07:F5
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:e0:e7:b3:ae:9c:30:66:13:2f:ca:03:5c:59:b2:e1:58:
         91:8e:37:92:1b:72:91:29:fe:4e:d1:bc:71:4c:d7:06:eb:7f:
         6c:d9:26:0e:92:fa:54:2b:87:c2:e3:99:38:8c:09:e2:d6:25:
         10:d6:fe:b3:a1:a8:6b:e1:0f:c6:6f:1c:50:46:44:0b:5f:ce:
         9f:83:5d:32:75:2b:5e:44:f3:82:06:e8:09:e3:f5:39:9b:bb:
         40:05:3a:e4:ee:69:95:c8:7a:7c:74:90:90:87:52:ea:e6:7f:
         57:9f:7c:d5:bb:35:6c:bc:45:e1:5f:99:a1:e6:f4:44:5e:d4:
         88:15:41:74:dc:69:17:b1:20:a0:99:89:d9:ca:82:d2:dd:63:
         e7:d2:fc:00:9b:08:80:4e:23:f9:a6:f8:2c:86:ca:04:fb:fe:
         3f:fe:a2:92:ea:8b:ca:e0:db:8a:44:46:2b:ad:1e:25:f0:7e:
         0a:45:4c:f4:ae:da:47:26:bc:2d:db:e7:ea:e5:97:7c:61:8f:
         df:1f:87:02:a1:2b:f3:9f:ba:b5:ea:6d:df:e5:e1:28:da:71:
         c7:14:ce:06:94:31:d3:41:f4:37:36:0a:cf:68:25:3f:ab:5c:
         13:e3:88:a8:27:b6:f4:3e:e0:06:af:71:7a:98:d8:71:38:de:
         95:4e:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:34 2026 by rpki-client