Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File:                     veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier:          IQlLukiu0dJaJS3n//39MhoL/H4lBbO5u5Mk1jfx+6E=
Subject key identifier:   63:4E:6B:26:D3:5B:94:E6:8E:2E:BB:70:1C:F7:7E:C6:A1:97:74:46
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer:       /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial:       019DA4C1FADE9961469C6091876933D3B6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number:          0FAE
Signing time:             Sun 19 Apr 2026 08:01:09 +0000
Manifest this update:     Sun 19 Apr 2026 08:01:09 +0000
Manifest next update:     Mon 20 Apr 2026 08:01:09 +0000
Files and hashes:         1: fNmRYBB_y5qrTpD_HG4Mj6gKJGg.roa (hash: GCMtnktG1EHO/VdELDulMItSCpc0TfpSbN+GlUgxuiE=)
                          2: h7Uzdn3QCG9HXrxBJJQfKOf_wrU.roa (hash: B5SpfQD49xaKavcSBPmQWnJvbXttVFrT+Gp3dIpS18Y=)
                          3: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (hash: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw=)
                          4: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: cFG9Ow4qp80vSQ8+khtQ3lrU0Z9HAXMhweWMzt8Jjv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:fa:de:99:61:46:9c:60:91:87:69:33:d3:b6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
        Validity
            Not Before: Apr 19 08:01:09 2026 GMT
            Not After : Apr 20 08:01:09 2026 GMT
        Subject: CN=634e6b26d35b94e68e2ebb701cf77ec6a1977446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:ac:60:f6:61:03:2c:7d:1e:58:04:4a:c0:
                    04:ce:da:a6:f1:57:c3:a2:70:37:6c:9f:0b:d5:ad:
                    a7:cf:91:0a:db:f2:59:a4:85:e0:42:7d:b5:cc:f2:
                    43:5a:bb:19:7a:4c:32:33:ab:68:e5:50:7b:fe:cc:
                    44:e0:e6:a7:85:2e:9a:58:5f:7d:19:75:03:2e:21:
                    b8:b7:92:d7:16:71:59:e9:dc:67:ef:c0:47:0b:33:
                    58:05:6c:a0:bb:f0:37:6d:e1:f9:16:3f:c6:9f:38:
                    25:c0:89:c4:24:80:68:7c:5f:e1:12:f7:dd:8a:9f:
                    ae:43:e8:8e:8e:e4:9f:76:57:d8:e0:57:44:02:ad:
                    fb:52:52:bd:46:db:2d:6c:6f:7e:14:ce:ac:34:3e:
                    42:dd:53:9d:04:ec:a6:43:7d:eb:d0:9f:5e:d1:a3:
                    44:ac:bf:d1:b2:9f:39:f1:71:4b:92:c4:da:97:28:
                    b5:ad:98:83:9d:7e:45:0d:f5:83:99:64:5c:9f:d2:
                    66:0d:92:29:22:19:4d:ad:f2:8e:bb:85:fc:a8:84:
                    e6:a7:29:10:31:a5:90:1d:7f:df:be:7b:03:4b:52:
                    2c:08:55:b5:94:9a:ea:50:8b:4b:f7:ec:3e:ae:15:
                    27:87:76:69:34:58:be:1e:19:73:e6:d2:1a:1c:f6:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4E:6B:26:D3:5B:94:E6:8E:2E:BB:70:1C:F7:7E:C6:A1:97:74:46
            X509v3 Authority Key Identifier:
                keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:42:87:3d:cc:e3:8f:8e:9c:1c:4f:e1:8d:c4:e1:16:62:
         44:20:d3:27:31:61:e1:1e:ad:40:d8:6b:d0:b8:4e:df:54:49:
         0a:30:5d:37:49:61:bc:2b:33:f2:1d:aa:a6:35:dc:7c:b3:db:
         21:a8:da:59:f9:73:7c:d7:38:ca:69:e2:87:f1:68:ba:a1:6f:
         4e:68:03:45:03:e7:5e:c8:29:7d:4e:5e:f7:33:37:fd:7c:f6:
         8f:0d:55:ee:44:76:61:3f:db:0d:90:55:56:43:ed:71:ce:71:
         92:0b:61:70:fc:82:2e:f8:f7:f5:99:a6:82:f7:fc:15:73:55:
         bd:2c:bb:d9:85:0e:08:44:7d:d6:f8:cd:02:75:6e:77:c7:bb:
         68:ab:a8:62:b0:c0:5f:a8:ba:3c:b1:54:5c:64:1e:ef:03:88:
         b5:3e:d5:dc:3a:b3:6e:1e:d4:20:06:41:66:c7:68:0e:c7:33:
         86:8e:0b:47:c2:42:a1:91:0f:31:2e:24:cf:14:73:cb:bc:fe:
         17:22:d1:ce:6a:1c:24:28:85:3d:e2:38:bd:59:f8:0c:88:38:
         c3:ab:1a:d3:f5:65:c9:7e:21:b3:d7:40:9b:f3:ab:12:18:44:
         b4:29:8c:d6:84:e2:41:a7:e7:9a:11:64:30:a5:ba:41:50:f0:
         63:f1:e0:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwfremWFGnGCRh2kz07bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk
NzVmMmMwHhcNMjYwNDE5MDgwMTA5WhcNMjYwNDIwMDgwMTA5WjAzMTEwLwYDVQQD
Eyg2MzRlNmIyNmQzNWI5NGU2OGUyZWJiNzAxY2Y3N2VjNmExOTc3NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7OsYPZhAyx9HlgESsAEztqm8VfD
onA3bJ8L1a2nz5EK2/JZpIXgQn21zPJDWrsZekwyM6to5VB7/sxE4OanhS6aWF99
GXUDLiG4t5LXFnFZ6dxn78BHCzNYBWygu/A3beH5Fj/GnzglwInEJIBofF/hEvfd
ip+uQ+iOjuSfdlfY4FdEAq37UlK9RtstbG9+FM6sND5C3VOdBOymQ33r0J9e0aNE
rL/Rsp858XFLksTalyi1rZiDnX5FDfWDmWRcn9JmDZIpIhlNrfKOu4X8qITmpykQ
MaWQHX/fvnsDS1IsCFW1lJrqUItL9+w+rhUnh3ZpNFi+Hhlz5tIaHPba6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNOaybTW5Tmji67cBz3fsahl3RGMB8GA1UdIwQY
MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt
Y2FlNmM3MjVkOTJmLzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm
LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvBChz3M
44+OnBxP4Y3E4RZiRCDTJzFh4R6tQNhr0LhO31RJCjBdN0lhvCsz8h2qpjXcfLPb
IajaWflzfNc4ymnih/FouqFvTmgDRQPnXsgpfU5e9zM3/Xz2jw1V7kR2YT/bDZBV
VkPtcc5xkgthcPyCLvj39Zmmgvf8FXNVvSy72YUOCER91vjNAnVud8e7aKuoYrDA
X6i6PLFUXGQe7wOItT7V3Dqzbh7UIAZBZsdoDsczho4LR8JCoZEPMS4kzxRzy7z+
FyLRzmocJCiFPeI4vVn4DIg4w6sa0/VlyX4hs9dAm/OrEhhEtCmM1oTiQafnmhFk
MKW6QVDwY/Hg0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:08 2026 by rpki-client