Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          7m6B4ArkTCDU5rw6HcmcPJb7wkV44ppS7Hqj+eldyjc=
Subject key identifier:   31:10:F0:84:69:50:55:22:A2:F2:E9:BA:5C:6E:1F:DD:80:4A:D1:50
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       019D2D055A88531AA77E4690B1F29EF140EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          0BBC
Signing time:             Fri 27 Mar 2026 02:00:18 +0000
Manifest this update:     Fri 27 Mar 2026 02:00:18 +0000
Manifest next update:     Sat 28 Mar 2026 02:00:18 +0000
Files and hashes:         1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: ugOvpBNObD4pO8xerxVOXlTk9mSLXtuVKfHU5LCRlqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:05:5a:88:53:1a:a7:7e:46:90:b1:f2:9e:f1:40:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Mar 27 02:00:18 2026 GMT
            Not After : Mar 28 02:00:18 2026 GMT
        Subject: CN=3110f08469505522a2f2e9ba5c6e1fdd804ad150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:04:66:34:b7:9f:84:06:06:77:54:68:69:
                    01:a6:03:9b:ae:2b:94:c0:14:83:9e:4d:73:54:44:
                    47:ff:a1:03:89:e4:ac:79:0a:ea:d2:58:16:b5:7e:
                    c7:3f:e8:4d:67:1e:82:b5:0b:bb:15:c1:70:73:cd:
                    fd:5c:cb:c6:dc:42:22:87:23:f1:b9:e1:cb:4e:c3:
                    d2:ca:19:00:a4:65:1e:74:a4:d1:f3:dd:6a:28:36:
                    ba:87:7b:f0:35:94:2b:aa:cf:2f:86:ee:a9:e0:13:
                    33:8d:88:6f:f5:0f:62:0b:65:0d:b1:e3:37:ff:21:
                    07:d0:18:f9:b5:74:59:9a:ad:99:86:cf:da:bf:83:
                    f5:ce:54:23:a4:04:b8:56:1b:cb:93:6d:35:46:a2:
                    d8:3f:5a:d3:70:c0:21:e7:ae:92:8e:81:59:b9:8f:
                    7d:f7:98:26:81:c2:b4:62:86:28:5b:cf:01:1b:59:
                    45:56:bb:f7:90:e7:64:a4:0d:f1:ab:d3:65:b3:aa:
                    02:e9:cc:82:e6:7d:a3:e1:4c:e4:38:b4:8c:47:4d:
                    62:e5:60:f1:04:b9:2f:1f:c1:f9:2e:db:a7:0b:b1:
                    26:aa:7b:c6:f2:ab:13:49:03:8d:e5:bd:7d:09:f5:
                    94:8f:b5:a8:cd:54:39:32:60:91:71:8d:fb:57:c2:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:F0:84:69:50:55:22:A2:F2:E9:BA:5C:6E:1F:DD:80:4A:D1:50
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:3f:18:aa:4d:4c:b3:56:4a:a1:ff:e1:ab:dc:8b:59:79:
         48:64:7f:78:70:ac:6e:0e:08:5f:73:cb:a0:9a:87:8f:5b:4d:
         ec:38:a7:26:15:03:a1:2c:bb:e8:27:46:44:3f:13:e3:54:49:
         1e:bd:89:e4:e9:11:7b:db:4f:dc:0a:14:bf:1f:e5:b5:f7:36:
         b8:79:d0:d3:25:95:46:c5:31:1b:1c:7e:12:02:34:10:3d:1f:
         c5:c9:5b:c5:72:e3:d7:a9:c6:48:cf:b1:e3:8a:f3:cd:88:17:
         b2:0e:62:3f:ba:c2:29:1e:db:d6:e9:2e:25:3d:72:84:c3:f9:
         47:81:8f:24:b4:e2:09:c1:eb:45:77:27:3c:f2:65:14:5c:31:
         0b:b8:ba:61:f0:ec:17:10:a9:07:a5:bc:c6:06:3d:4f:87:81:
         7e:6e:a7:d9:8e:25:b8:a2:57:0e:77:f8:f3:5d:6d:76:8a:aa:
         75:83:46:bf:c0:22:de:63:95:c2:3a:1a:07:32:c1:21:fb:ca:
         60:5e:60:74:05:5a:a1:d1:15:07:55:e2:b5:f5:e0:c6:d8:9f:
         e1:1d:8b:b9:31:df:81:1a:b2:5a:3a:3c:e9:cb:cc:db:b7:76:
         7b:74:6e:a0:12:a8:d9:45:10:e3:fb:a2:1a:c7:10:de:fc:8a:
         c3:26:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:59:58 2026 by rpki-client