Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          uPnz6c0r6EydQtztQJ8WUxdCKMJV5S7XB2fbep78A/E=
Subject key identifier:   94:5A:12:BE:E3:DB:A5:43:6C:C1:55:5F:17:D7:6B:05:EA:76:C4:AE
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019D9A3E27787BB8A0BB59684EA217BB82CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 07:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:57 +0000
Files and hashes:         1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
                          2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: 5FakbGw2vkIERek6f/SWSjflg+KmD22ffV2tN9cXBsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:27:78:7b:b8:a0:bb:59:68:4e:a2:17:bb:82:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Apr 17 07:00:57 2026 GMT
            Not After : Apr 18 07:00:57 2026 GMT
        Subject: CN=945a12bee3dba5436cc1555f17d76b05ea76c4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:97:85:c6:cb:75:3f:6a:25:fa:33:2f:a6:
                    91:2c:59:49:5d:a3:ee:93:62:e9:a9:5d:1c:3a:11:
                    2d:f4:5a:26:7f:29:5f:eb:8b:8d:2d:ce:1a:5b:1d:
                    bf:ce:8f:41:0c:af:9f:47:f8:d2:f3:10:eb:4b:2c:
                    36:b3:c2:64:14:6c:e8:04:bd:e1:07:87:1e:30:64:
                    c4:11:cf:af:a0:8b:73:b8:d3:82:24:2d:3d:6c:58:
                    a0:1f:dc:fe:50:24:22:40:cd:1d:de:3e:9d:bb:5c:
                    36:19:2e:c8:81:70:e5:18:18:08:b1:9e:32:ff:55:
                    fc:9b:d1:db:19:75:df:55:9e:3e:2c:07:dd:c6:19:
                    af:66:80:c9:81:b4:0a:cb:1f:ae:a7:4d:9c:4d:4d:
                    6c:83:6c:94:57:2e:0f:2d:dd:87:bd:0b:e4:0e:2d:
                    e1:fd:1a:3e:12:a0:57:7f:a6:bd:e3:59:c7:cf:63:
                    c8:94:33:02:63:f1:24:83:0c:5a:7e:1f:64:61:26:
                    bc:ff:68:a3:47:d0:c9:7a:36:92:f6:a4:a5:cd:ec:
                    70:dd:40:e7:e9:15:43:6d:19:8f:4e:ea:f9:b9:9e:
                    03:b4:85:85:a5:fa:eb:74:db:6f:fa:d1:05:3f:98:
                    29:25:40:34:9d:a8:d4:74:e7:c4:36:3e:d6:5d:82:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5A:12:BE:E3:DB:A5:43:6C:C1:55:5F:17:D7:6B:05:EA:76:C4:AE
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:b6:97:9b:62:40:e3:f5:0f:e0:07:51:af:1b:15:e7:3e:
         cb:91:4f:e0:66:2d:1f:d8:e9:58:5e:06:7b:5b:85:05:68:50:
         2f:75:d2:1c:05:06:95:e8:0d:aa:0f:b6:56:f6:0f:04:0f:cc:
         f8:46:68:82:c7:d0:62:a6:68:3e:2c:df:0f:1b:d7:1c:0f:f5:
         bb:c9:9f:42:77:d2:01:33:9f:f1:3f:93:24:96:d8:1f:82:eb:
         eb:ad:dd:dc:e4:a6:e7:ea:eb:7c:e5:d4:20:de:eb:db:58:e4:
         a3:4a:54:30:72:b6:fc:ad:29:ef:c8:d8:87:88:b8:38:b6:bf:
         e8:1e:64:3b:61:aa:2f:0c:ac:08:9a:2d:8f:40:40:13:85:d2:
         b0:e3:3d:20:ad:bd:d7:25:1f:ac:4a:bf:eb:dc:90:71:59:fe:
         13:8b:53:64:2a:5c:a7:2f:ed:f0:cb:e3:7e:f0:c0:77:97:ba:
         6a:2d:dd:c6:6f:10:35:b4:68:d3:14:98:4b:d4:b2:40:30:4a:
         9f:e6:ed:c2:67:91:b3:b8:37:32:0a:b4:a9:bd:c3:f8:0b:c9:
         df:b3:e7:bb:85:05:b8:f2:22:af:44:86:5a:c8:8c:aa:cc:b7:
         15:e8:29:a5:c2:ad:ac:9c:99:0b:54:8a:ad:2b:b7:cd:f0:e5:
         08:1c:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:10 2026 by rpki-client