Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          rRGXxHIdGY4VT24S1eaG04hYvhi6r7dAUusTaZLmZow=
Subject key identifier:   8C:27:4B:C8:84:D2:82:7C:D3:1D:AC:EB:34:1B:5B:80:F3:B4:4D:2E
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       019F55584883B64A4CB087CAF9DC2CF8089F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          0CDA
Signing time:             Sun 12 Jul 2026 08:01:16 +0000
Manifest this update:     Sun 12 Jul 2026 08:01:16 +0000
Manifest next update:     Mon 13 Jul 2026 08:01:16 +0000
Files and hashes:         1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: bq//lc9qhqNSOerMv84EdbHyLL5+O6NpWniGhuhy0kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:55:58:48:83:b6:4a:4c:b0:87:ca:f9:dc:2c:f8:08:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Jul 12 08:01:16 2026 GMT
            Not After : Jul 13 08:01:16 2026 GMT
        Subject: CN=8c274bc884d2827cd31daceb341b5b80f3b44d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:32:ca:a6:57:63:2a:bc:81:51:be:5a:4b:
                    89:8c:c7:cb:66:cf:0d:2b:89:ed:56:ea:a5:85:e8:
                    fa:0b:3d:89:da:57:e7:c3:e9:8f:88:21:32:73:52:
                    ea:e7:1b:6c:6e:ab:3d:fa:13:68:71:63:c1:8d:8b:
                    f5:76:0f:d1:da:0f:9c:de:51:a5:99:65:04:0d:8f:
                    f9:6e:20:50:af:4c:71:05:38:0f:91:0c:ba:ce:ef:
                    09:61:19:b2:9e:06:83:b0:8a:1e:0e:21:89:14:0c:
                    ea:3f:fa:bd:fa:9e:c7:32:9a:2a:72:9d:4a:a4:e1:
                    b9:0d:ad:db:77:41:a6:bb:09:41:d7:d9:af:21:5d:
                    5f:ff:54:bc:54:f3:1e:c4:1e:af:70:3c:7f:b3:15:
                    7c:ac:60:6c:91:82:cf:87:8b:23:36:c6:57:39:a5:
                    46:29:8e:45:ce:35:e7:16:e3:94:c8:c6:22:2e:73:
                    0f:53:a2:ef:5b:79:83:01:21:f0:d8:69:6e:23:fd:
                    4f:77:cd:3a:03:ee:22:49:94:88:ec:bd:71:3e:b7:
                    ef:f7:f8:5f:3e:87:5e:68:d4:6e:2c:fe:f3:49:0e:
                    e8:d4:04:b6:04:ba:f2:6a:6f:3b:cd:52:54:87:e2:
                    79:15:d0:55:0a:b5:fd:4d:d5:52:db:c5:93:2c:cd:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:4B:C8:84:D2:82:7C:D3:1D:AC:EB:34:1B:5B:80:F3:B4:4D:2E
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:b2:51:0d:44:da:7c:1d:50:c7:77:35:93:48:33:5d:f9:
         dc:22:e9:96:1c:3b:59:10:14:ef:49:c8:45:47:00:e1:b8:42:
         17:4c:50:c2:01:6e:3d:af:c0:dd:6c:5f:52:72:e5:63:1a:ca:
         c0:ce:c3:23:c6:8a:f2:60:97:1c:ce:ed:fd:11:fa:66:5b:43:
         b4:29:b7:7d:f8:13:a5:8a:4d:04:b2:4e:c3:98:62:b2:f3:78:
         dd:6c:58:f7:91:ee:4e:28:2b:d2:42:67:3f:7a:cd:18:55:c3:
         53:4c:a4:ca:62:81:f3:d0:31:eb:a7:8b:38:4d:4a:ad:aa:22:
         72:34:6d:35:c5:d7:2a:34:39:5a:31:fc:ba:f2:04:ba:ac:60:
         af:c2:48:90:dc:44:55:21:77:20:01:6f:03:6e:9f:d8:a5:0f:
         91:6c:50:47:82:bf:e8:31:90:39:96:71:09:24:ec:31:73:11:
         6f:51:6e:ac:a9:aa:0e:e6:d4:b6:2f:03:65:c7:f3:96:98:b1:
         d1:2e:a9:50:48:03:32:06:60:68:86:bb:ca:b7:df:4a:6c:c6:
         8e:8f:af:aa:fc:1b:d2:75:9e:f3:bf:92:08:48:53:0b:6c:60:
         cc:06:0a:18:a6:2b:c7:fb:6f:e5:bf:72:6d:12:af:3b:93:c2:
         5c:ad:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 09:12:23 2026 by rpki-client