Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          NT+CGk3rXJ9UZm8Ecmy4Cq3Au93umCEdg80TCj/BspU=
Subject key identifier:   88:9F:88:4E:FA:E0:60:D6:AA:2A:AF:14:7E:FE:09:C9:07:F9:EB:3D
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019CAC7E5FA612DE6A5AAE74FEF998F85A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0BE5
Signing time:             Mon 02 Mar 2026 03:01:28 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:28 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:28 +0000
Files and hashes:         1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
                          2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
                          3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
                          4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: i0kIqKR/SD57xLulgFaZz4QvmFXsTu5+psissqz5IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:5f:a6:12:de:6a:5a:ae:74:fe:f9:98:f8:5a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Mar  2 03:01:28 2026 GMT
            Not After : Mar  3 03:01:28 2026 GMT
        Subject: CN=889f884efae060d6aa2aaf147efe09c907f9eb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:eb:11:17:ea:4a:fe:3f:88:1d:f1:54:c7:
                    aa:e8:7d:f1:03:22:d3:58:c4:94:ed:69:4a:ca:8d:
                    5f:31:07:59:c3:2f:a7:a0:98:65:f8:fb:fb:d8:4d:
                    0f:10:8a:95:15:7f:06:31:30:54:dd:60:66:6c:64:
                    21:bb:96:37:3b:32:41:dc:8c:b7:bf:1a:54:97:e4:
                    5b:93:bc:3f:d1:aa:a8:cc:ed:5d:fa:ac:9c:78:dd:
                    f2:30:61:db:c2:28:fe:1b:ed:11:87:2b:69:f8:63:
                    78:45:89:e3:9f:2d:e5:2d:6b:d9:21:de:3e:4c:b1:
                    13:05:93:42:48:96:6f:a8:f1:39:71:ee:b8:15:74:
                    96:ff:ef:2a:0f:06:db:02:44:6f:c5:2c:34:41:48:
                    94:07:e1:d6:61:d5:04:60:8a:78:e1:96:b8:f9:cf:
                    5a:a1:68:b7:fa:a7:7b:20:08:3e:c8:f8:6f:e0:88:
                    de:c8:2a:e3:93:2a:59:df:18:41:f5:6d:03:76:8f:
                    e6:7a:8f:5b:e6:16:cd:70:50:46:66:27:18:1b:09:
                    2d:c8:cc:fe:fe:71:ac:dd:8f:13:23:1c:5d:54:ce:
                    61:66:75:a1:e3:08:c3:70:eb:96:4f:57:b4:98:27:
                    74:db:23:e9:20:80:3f:15:00:6a:11:84:f6:3b:0a:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:88:4E:FA:E0:60:D6:AA:2A:AF:14:7E:FE:09:C9:07:F9:EB:3D
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:47:b9:8f:38:9f:67:1b:0c:2d:3f:dc:03:72:26:99:41:3d:
         26:92:49:e1:13:51:05:14:7e:40:f6:34:c9:1d:b4:d5:04:5b:
         2d:47:54:5c:03:4b:85:ef:ac:bc:cb:2c:a8:3d:67:a1:13:4e:
         4a:4d:9f:14:64:bb:01:cd:88:ff:3c:db:19:df:ae:f4:a3:72:
         2b:96:4a:ee:fa:ca:ad:e1:6c:34:e1:56:d9:a0:39:b3:a8:6b:
         a2:34:25:85:96:3a:b4:47:b1:97:f3:b1:30:2e:44:01:ca:69:
         c8:42:6b:32:80:5e:3e:0a:09:8e:42:9c:9e:35:8e:a0:f2:9c:
         7e:10:1a:91:cf:eb:24:26:85:21:d3:6e:8e:62:3e:0f:6d:e4:
         51:5c:ac:26:9a:aa:ee:d4:82:92:cf:d6:f0:b5:ee:b3:33:6d:
         4b:fa:e7:2f:68:e0:a5:ed:86:b1:28:6e:8e:81:24:0e:ed:cd:
         f9:cd:1f:dd:73:90:67:de:3a:41:71:66:be:80:4e:9b:b4:36:
         81:f5:7a:b0:c0:5c:35:f7:97:d0:d9:f7:c6:ad:d6:72:ff:1b:
         e1:6a:e5:cd:4e:d7:b8:ca:df:1b:1d:45:7c:02:4a:8e:dc:56:
         02:72:e5:86:a7:77:2c:81:cf:a5:91:e5:de:2b:c9:e8:40:0a:
         e3:c4:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:49 2026 by rpki-client