Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          k8fa0K5gD9iwLe1Dkpv0XewKJLkHilrnikEbPAjRlIs=
Subject key identifier:   98:C9:4F:ED:99:8D:49:77:B1:E2:F7:97:6C:BF:35:0B:FF:7D:4D:E9
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       01A040F2817D2B6CDCD5A9C13F2D3D85529F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          0D54
Signing time:             Thu 27 Aug 2026 02:00:29 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:29 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:29 +0000
Files and hashes:         1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: ilcIGUK2MxDbepLjRrrMFTZRLqhpDQl8nkybGPJAQJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:81:7d:2b:6c:dc:d5:a9:c1:3f:2d:3d:85:52:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Aug 27 02:00:29 2026 GMT
            Not After : Aug 28 02:00:29 2026 GMT
        Subject: CN=98c94fed998d4977b1e2f7976cbf350bff7d4de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:77:68:b7:45:e2:25:c1:2c:66:11:2c:a1:
                    8e:14:bb:b4:a3:15:6c:4d:ac:53:6e:69:b2:de:3d:
                    49:87:95:91:7f:27:0c:ff:26:56:d9:77:25:94:89:
                    72:f0:37:a3:52:e6:01:cf:fe:dd:78:b9:58:d9:87:
                    fd:dd:25:8b:b9:e4:aa:fb:34:18:92:ea:12:1c:bf:
                    7a:45:08:fc:bf:00:9f:3e:29:54:a1:ae:a5:93:19:
                    09:74:e5:22:9c:2e:2c:42:e9:9e:a4:d3:ac:58:fa:
                    bd:48:ba:4d:88:82:d6:3a:7b:7d:9d:5e:7e:4f:53:
                    cb:14:c1:68:c2:c8:b0:d5:d4:99:2c:6e:4d:99:9f:
                    19:ef:f3:54:13:d8:1d:78:ca:6f:15:8e:28:0e:8d:
                    a3:31:93:b5:85:cf:de:c8:85:0d:ad:81:57:6d:44:
                    f6:20:f3:32:8b:33:ff:59:fa:35:71:85:31:73:ec:
                    f9:9c:99:6d:52:76:09:75:45:fa:13:3a:8e:0f:ca:
                    a9:de:a2:8d:e0:f6:01:20:84:2b:22:ea:ae:e2:00:
                    e0:b4:d3:68:a1:2c:a6:b0:c3:81:70:a9:12:a8:97:
                    40:59:ce:c7:80:42:1f:f4:ea:e1:91:3c:bf:8c:36:
                    b3:51:fe:5f:7d:d7:1a:b4:47:89:19:e1:7b:11:57:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:4F:ED:99:8D:49:77:B1:E2:F7:97:6C:BF:35:0B:FF:7D:4D:E9
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:10:c0:a8:44:78:a0:c2:2e:d3:10:a2:f1:2f:97:50:e6:
         96:30:04:18:1e:c9:b6:32:93:1f:97:95:16:37:b4:c7:71:1a:
         01:23:82:4e:52:87:30:c6:57:5e:31:9a:e6:bf:32:ba:ac:56:
         0d:64:b0:cc:79:9f:f1:e4:13:e3:ae:37:3a:dd:1d:c8:69:6f:
         fa:21:6e:19:e0:61:e8:e3:07:5f:2d:a9:a2:b5:cb:ae:13:30:
         92:d2:f7:e7:b3:a4:53:49:4e:e8:5f:7c:73:dc:ff:c3:a3:aa:
         a0:3c:62:78:53:11:c1:58:dd:0e:65:56:b2:f0:c3:2c:c5:76:
         8c:47:83:70:d8:e9:ea:b9:f4:43:a7:24:0d:48:62:9c:80:88:
         e6:df:72:dc:64:b6:69:12:a4:cb:bd:be:f1:d8:a4:91:c6:67:
         2b:bb:01:34:b8:f5:27:8c:8e:0c:89:3f:d8:ab:0d:b6:4c:19:
         27:fd:cb:a8:0c:dd:9a:e4:c2:35:e5:32:46:cf:b2:9c:e5:10:
         9d:22:b0:a8:36:30:3f:9e:17:04:a6:a1:55:71:4f:d2:ac:2b:
         b6:4f:09:44:31:11:e8:24:20:18:c2:73:6b:b1:9b:dc:1f:75:
         67:59:73:81:ac:c3:70:34:20:08:74:8f:11:80:8f:95:f8:f4:
         f7:d1:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:44 2026 by rpki-client