Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File:                     veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier:          OgmbdWmbnu3XaOwSWzVwYBwxEvBOinMuS8yIvcMazzs=
Subject key identifier:   51:7B:C6:A8:C6:C9:79:03:62:7A:21:41:F2:06:60:DF:AE:92:93:31
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer:       /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial:       019D992BBC81E157B9E4C11085F3C1AC656D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number:          0FA8
Signing time:             Fri 17 Apr 2026 02:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:13 +0000
Files and hashes:         1: fNmRYBB_y5qrTpD_HG4Mj6gKJGg.roa (hash: GCMtnktG1EHO/VdELDulMItSCpc0TfpSbN+GlUgxuiE=)
                          2: h7Uzdn3QCG9HXrxBJJQfKOf_wrU.roa (hash: B5SpfQD49xaKavcSBPmQWnJvbXttVFrT+Gp3dIpS18Y=)
                          3: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (hash: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw=)
                          4: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: zjPoBQg/ZoDU+LyPi0ZGTcYbx2tuBK8n1gxWGRR5rzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:bc:81:e1:57:b9:e4:c1:10:85:f3:c1:ac:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
        Validity
            Not Before: Apr 17 02:01:13 2026 GMT
            Not After : Apr 18 02:01:13 2026 GMT
        Subject: CN=517bc6a8c6c97903627a2141f20660dfae929331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:d6:bb:55:3f:31:c6:fc:e6:1b:dc:02:7b:
                    76:e5:76:d8:84:6a:77:68:34:8c:88:6f:21:23:35:
                    31:4d:5a:69:d8:9c:bd:6a:06:17:f0:e5:f2:5b:5a:
                    d8:46:58:6a:ca:29:93:eb:4c:1e:69:f9:a3:38:12:
                    6d:6a:80:a1:02:98:88:62:56:1b:f3:fb:96:21:32:
                    22:31:cf:67:2d:d1:62:b1:cb:5d:46:d2:43:07:04:
                    c3:a6:ad:ee:0f:ad:dc:fe:a5:ae:06:44:04:c7:b1:
                    67:97:84:b9:d7:f0:dc:d7:f4:bb:be:5a:2c:e2:68:
                    db:34:f1:13:94:30:9f:8f:1e:0a:76:a7:52:ab:66:
                    27:cf:e7:16:1a:36:d5:a5:c3:84:0d:52:7e:87:d3:
                    62:cd:08:73:65:bb:87:8b:43:6b:a3:77:23:4d:be:
                    23:4c:84:99:c4:b0:07:cd:f9:b7:7f:9e:19:6c:b1:
                    bf:85:c8:0a:24:03:b8:99:65:a7:ec:82:fd:ba:79:
                    c7:dc:aa:90:fd:d1:05:d2:30:18:57:8a:ee:2b:45:
                    10:1a:a5:89:6a:41:11:06:3c:c2:fb:58:95:1d:68:
                    cf:d4:42:16:48:27:40:69:6d:58:ea:1d:64:40:89:
                    35:48:7a:4e:81:cd:1c:1e:f0:24:e9:35:be:5d:b6:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:C6:A8:C6:C9:79:03:62:7A:21:41:F2:06:60:DF:AE:92:93:31
            X509v3 Authority Key Identifier:
                keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f4:79:e5:12:ec:a6:b9:bf:9e:f8:06:a7:e1:f7:cb:23:b7:
         8c:e7:63:65:50:98:8a:78:ee:b0:da:f1:06:81:bc:9b:fc:6f:
         c2:ec:af:d5:cd:28:6b:66:10:eb:c5:ac:a8:28:f4:d1:99:08:
         f2:a3:fc:d9:65:8b:46:df:5b:0b:44:c3:2f:03:ba:b6:fe:33:
         7c:d5:e7:30:40:91:60:24:f8:ee:75:ad:b8:b2:37:61:cd:41:
         5a:d3:cc:f8:1c:31:3f:15:1f:d4:21:fa:98:a5:d4:87:24:b8:
         39:e9:3d:9d:53:7e:11:cb:61:2a:5c:76:a1:2b:38:2d:f8:87:
         3f:10:1c:d7:e5:61:9d:ff:41:a1:d3:d1:05:c7:48:9f:47:2d:
         0b:ab:a8:09:b2:05:69:a7:8e:88:3f:3d:ae:9c:84:be:5a:d1:
         5e:dd:95:ac:60:b2:52:5c:db:42:cf:38:07:f1:6d:22:49:48:
         c1:70:8e:85:7d:f6:1e:b4:d5:07:3a:f4:19:13:86:b9:d8:d3:
         fd:c5:33:ae:2a:07:0c:e2:f6:a2:27:55:5e:b3:e3:cd:15:3f:
         2a:3e:ea:c6:91:b4:99:ac:e7:d4:d5:96:42:21:b2:c1:a2:d4:
         da:b5:62:3e:fb:09:9d:8e:c8:b5:d5:86:6b:50:7f:60:8f:32:
         08:01:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:48 2026 by rpki-client