Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          UK6biBXZwqxKCezyC8jTVW2t4HWhy5Ol6IpGBg4ekfo=
Subject key identifier:   9C:0D:CC:98:06:E3:00:DC:1F:F3:D9:4C:94:BF:55:6E:13:37:88:FD
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019EBFC91D816F3A28768CFDC37D80D2678F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 07:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:28 +0000
Files and hashes:         1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
                          2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: hk1ZtTj+ATrKmUfLckxDaBB3eGs+SRJKqopyqdat8Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:1d:81:6f:3a:28:76:8c:fd:c3:7d:80:d2:67:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Jun 13 07:01:28 2026 GMT
            Not After : Jun 14 07:01:28 2026 GMT
        Subject: CN=9c0dcc9806e300dc1ff3d94c94bf556e133788fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:d1:71:15:f0:eb:54:04:d4:e0:4c:01:19:
                    33:ce:aa:92:ef:b3:90:2a:27:11:14:82:15:a6:79:
                    24:13:b5:21:2e:61:68:fb:ae:c1:9d:ad:df:3f:c8:
                    85:0c:12:26:a8:be:63:27:e6:91:08:40:aa:61:64:
                    d5:b3:68:01:e3:cc:79:2f:98:d1:a5:78:f6:39:09:
                    a9:b3:b3:4c:53:6d:2b:ee:da:39:20:72:02:f9:e7:
                    e2:cb:db:db:1a:24:52:7b:6f:01:25:af:70:6f:ad:
                    e2:0f:21:bd:6a:d5:82:5a:94:27:45:31:34:6a:8c:
                    ca:5d:c7:ab:da:a4:82:db:ce:37:cf:41:66:f6:e0:
                    2e:c0:da:66:d7:1d:5f:82:7f:ff:3c:a0:2a:a8:6a:
                    1c:5a:6a:d2:5f:4c:0d:e6:23:41:d7:3b:06:2d:50:
                    45:2c:9b:49:0d:fc:a4:e8:8b:60:4f:98:7f:25:c0:
                    1c:20:27:b9:55:32:84:6b:36:13:19:d9:b5:9e:a1:
                    27:10:18:92:9e:1b:a5:55:f2:9e:11:87:b7:05:9b:
                    18:ed:ac:d4:e7:f7:7f:d3:7c:b0:7e:77:af:82:03:
                    4c:09:42:74:85:96:3e:e9:ea:e0:43:6f:25:12:e5:
                    97:07:26:12:17:5b:69:ee:e2:bf:b0:c2:78:47:dd:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:CC:98:06:E3:00:DC:1F:F3:D9:4C:94:BF:55:6E:13:37:88:FD
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:3d:c0:39:0b:bc:a0:14:7a:9a:0f:c2:d3:df:7e:85:51:
         2c:e7:24:82:d8:bb:58:07:45:be:14:7c:79:94:6e:cf:6a:40:
         32:94:42:64:a7:95:1f:c0:97:ed:cb:1d:4e:67:03:3e:91:75:
         40:9b:33:59:11:3f:98:30:9b:10:70:fd:fd:0f:ad:d7:12:5f:
         be:8e:a8:c5:50:80:ef:77:32:a0:81:fe:05:6d:dc:7e:5d:58:
         07:9e:87:db:1a:6b:e6:2f:af:ef:db:95:eb:b9:2d:fc:35:c0:
         c9:b6:c4:d5:e5:04:e2:14:9f:b8:e1:34:99:80:58:0e:ca:b0:
         34:15:70:ea:39:01:91:35:10:1a:aa:f0:aa:fb:6d:24:3a:91:
         c0:fc:09:41:7c:65:ba:b6:38:f5:68:09:10:1a:af:23:fe:8a:
         67:2e:4a:21:af:ff:93:ac:51:4e:72:bf:0d:4c:e3:85:ad:97:
         3e:4b:6f:8a:65:da:7b:0b:6e:4f:67:46:d7:5c:62:c3:6a:24:
         cf:38:8e:21:91:b6:ed:a5:b8:db:fd:41:43:ad:fa:67:1b:d3:
         f1:46:c0:9e:29:8c:20:57:dd:f7:33:4b:f4:6d:d3:cb:07:14:
         82:61:1f:2c:2b:b9:5c:9c:d1:83:98:df:c8:1d:37:d5:95:77:
         0c:a6:b8:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yR2Bbzoodoz9w32A0mePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm
ZDQ5NzAwHhcNMjYwNjEzMDcwMTI4WhcNMjYwNjE0MDcwMTI4WjAzMTEwLwYDVQQD
Eyg5YzBkY2M5ODA2ZTMwMGRjMWZmM2Q5NGM5NGJmNTU2ZTEzMzc4OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnRcRXw61QE1OBMARkzzqqS77OQ
KicRFIIVpnkkE7UhLmFo+67Bna3fP8iFDBImqL5jJ+aRCECqYWTVs2gB48x5L5jR
pXj2OQmps7NMU20r7to5IHIC+efiy9vbGiRSe28BJa9wb63iDyG9atWCWpQnRTE0
aozKXcer2qSC2843z0Fm9uAuwNpm1x1fgn//PKAqqGocWmrSX0wN5iNB1zsGLVBF
LJtJDfyk6ItgT5h/JcAcICe5VTKEazYTGdm1nqEnEBiSnhulVfKeEYe3BZsY7azU
5/d/03ywfnevggNMCUJ0hZY+6ergQ28lEuWXByYSF1tp7uK/sMJ4R91WDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwNzJgG4wDcH/PZTJS/VW4TN4j9MB8GA1UdIwQY
MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt
MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1
LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/U9wDkL
vKAUepoPwtPffoVRLOckgti7WAdFvhR8eZRuz2pAMpRCZKeVH8CX7csdTmcDPpF1
QJszWRE/mDCbEHD9/Q+t1xJfvo6oxVCA73cyoIH+BW3cfl1YB56H2xpr5i+v79uV
67kt/DXAybbE1eUE4hSfuOE0mYBYDsqwNBVw6jkBkTUQGqrwqvttJDqRwPwJQXxl
urY49WgJEBqvI/6KZy5KIa//k6xRTnK/DUzjha2XPktvimXaewtuT2dG11xiw2ok
zziOIZG27aW42/1BQ636ZxvT8UbAnimMIFfd9zNL9G3TywcUgmEfLCu5XJzRg5jf
yB031ZV3DKa4sg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:23 2026 by rpki-client