Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          cBHUVJp0d4sb/bosABuR3nFDDXTNenqs1bxkeRvyEyc=
Subject key identifier:   9F:FA:B0:EF:41:C3:73:83:34:6C:1A:41:43:B8:C2:8B:05:32:C5:7C
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019FA3A9ECCAE25A9CB0293C362A9A6E5F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 13:00:50 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:50 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:50 +0000
Files and hashes:         1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
                          2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: Zk/xGVdbrhPjk0eSB9XuaMy9JOJ/yE2PgQbeaMeJfc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:ec:ca:e2:5a:9c:b0:29:3c:36:2a:9a:6e:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Jul 27 13:00:50 2026 GMT
            Not After : Jul 28 13:00:50 2026 GMT
        Subject: CN=9ffab0ef41c37383346c1a4143b8c28b0532c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:19:ab:50:78:b3:e7:7c:d1:28:07:cb:88:
                    95:12:8f:ae:29:0e:74:25:23:73:dc:0a:c6:b9:be:
                    fd:8b:32:2a:3d:d2:e9:63:be:cf:f4:17:00:0a:67:
                    d3:1d:26:ea:1f:78:a0:16:22:09:a0:44:35:85:cc:
                    0b:18:8b:50:f6:8f:dc:05:a7:c1:cf:19:df:aa:2b:
                    d1:a1:7e:76:e3:5d:f9:0f:c1:20:e1:d0:58:7f:7f:
                    60:33:74:c7:8b:3f:15:c5:75:be:3c:ee:ea:0b:d0:
                    9b:4a:95:2b:6b:be:b2:9c:c1:ca:76:19:07:de:7f:
                    c7:b7:df:35:6f:f5:c8:fb:3d:91:8e:60:23:85:5a:
                    31:56:5c:04:4f:99:a6:32:a6:7f:0e:3d:94:b3:73:
                    f7:6e:56:7d:12:fc:67:df:37:9c:92:a3:71:eb:0c:
                    e3:ef:dc:2a:1a:92:90:28:24:ee:ec:75:7e:99:1f:
                    a3:a6:11:d9:bc:d0:ee:57:49:8b:9e:c7:84:d3:e7:
                    56:38:87:7c:26:b6:bf:8b:3d:1b:ea:df:3d:17:e8:
                    92:b1:cb:97:dd:58:52:3e:a7:fa:23:ae:5b:b8:a9:
                    68:f3:89:db:2f:87:2c:44:dd:f1:57:00:7e:fa:fa:
                    fb:f4:6b:5a:31:74:fa:c1:f3:49:fa:13:53:11:cb:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:B0:EF:41:C3:73:83:34:6C:1A:41:43:B8:C2:8B:05:32:C5:7C
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:79:64:42:4b:9f:2c:57:41:f3:c6:20:1b:8d:6a:b8:e0:4f:
         c8:a0:24:e6:09:da:54:5a:8c:52:7d:41:14:a9:a1:d5:5b:a5:
         2a:f6:cb:ea:2c:46:02:1c:88:18:d9:e7:b0:ca:33:91:db:a7:
         63:0b:d3:c5:01:98:f7:42:17:87:2a:ee:9c:67:9f:b8:ee:fc:
         6a:73:fb:3a:3e:3b:d1:7a:90:dc:8c:b5:53:91:74:47:2d:6c:
         d8:63:12:26:97:cb:1b:1b:ea:72:57:37:32:2a:b9:e9:9c:d4:
         0f:0c:23:32:e4:d0:b1:dd:f9:db:0f:92:79:31:2a:25:55:6b:
         86:39:fa:e6:e2:1a:a9:05:a6:78:68:43:76:d6:7b:17:83:04:
         d6:fc:f1:0e:6a:b8:0d:ec:2a:7a:49:c8:4b:73:a5:b2:07:b5:
         bd:fe:56:4a:41:f2:49:55:45:eb:a5:2e:bd:be:e5:b2:cd:3e:
         74:f2:ab:2e:e4:66:03:ee:2d:c6:83:29:f9:df:fb:69:0c:26:
         2c:ad:ad:25:0f:32:d6:19:8e:51:1b:ce:a0:b6:40:3a:c9:e5:
         b6:b1:aa:44:60:95:e7:c7:b7:b8:bb:eb:64:bc:1f:53:1a:99:
         0c:cf:e1:e0:67:46:91:77:5b:ed:c9:bd:50:e8:51:e1:ef:eb:
         ee:2a:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:28 2026 by rpki-client