Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          7wc5N+mEefR2XaBLVqFeliCJEvQfzaJtLm+Q/mu6H9U=
Subject key identifier:   B3:88:D5:E3:86:A8:E0:5B:02:46:C0:F2:80:1E:5B:67:D8:F2:88:77
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       019EC0A46D3D3900E48B3202347E032087A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          0C8D
Signing time:             Sat 13 Jun 2026 11:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:01 +0000
Files and hashes:         1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: UmH1eZRRjHVfWXTDoZagcNAZwuqEMkQMbQgrG0/gyOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:6d:3d:39:00:e4:8b:32:02:34:7e:03:20:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Jun 13 11:01:01 2026 GMT
            Not After : Jun 14 11:01:01 2026 GMT
        Subject: CN=b388d5e386a8e05b0246c0f2801e5b67d8f28877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:27:56:42:a7:ee:71:2a:f8:62:6f:0b:02:
                    2e:77:6e:d9:65:e9:2b:8c:cd:13:03:1d:fb:61:18:
                    43:74:fa:d7:b0:f9:4b:49:82:1b:92:79:eb:fd:23:
                    49:51:44:17:9b:48:1b:d8:a7:2a:9a:55:f3:c0:e5:
                    ba:60:d8:20:09:2d:c3:52:6e:b2:fc:01:2f:10:e1:
                    db:74:9a:9e:f8:fa:06:fc:7d:07:3c:23:62:11:e2:
                    2c:fd:b0:3e:8c:8e:7b:c3:8d:30:26:57:1b:e9:bc:
                    da:5e:c2:82:ad:b4:0b:46:14:51:35:1a:7a:fe:67:
                    9e:ac:ab:fc:ef:8a:99:48:32:97:77:fb:e7:e1:5d:
                    ea:1d:5f:b5:09:41:46:47:7e:4a:a0:de:ee:a5:50:
                    48:eb:52:ca:c6:2b:c7:3e:65:f0:54:a2:8f:47:35:
                    1e:3e:ec:ab:d0:ef:f0:38:58:01:46:c3:2e:05:88:
                    3f:0e:d5:45:f7:c7:de:21:39:88:41:94:53:2c:2d:
                    84:03:79:3b:18:79:b5:2b:21:69:a0:82:c3:4d:28:
                    f8:51:50:8c:3c:1e:b5:a2:7f:7d:25:b3:e7:b9:d5:
                    c1:de:38:59:a6:45:c0:b2:87:09:1e:2f:9a:67:2c:
                    3e:87:32:ea:1d:93:b5:57:15:0e:a7:a9:75:04:7e:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:D5:E3:86:A8:E0:5B:02:46:C0:F2:80:1E:5B:67:D8:F2:88:77
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:25:0a:c7:93:84:20:e9:43:58:fa:76:ce:25:85:64:ac:
         6b:7d:06:68:30:a5:c0:30:e0:de:07:eb:f5:ee:b7:d7:46:8d:
         7e:5f:7d:e4:d8:05:cc:ab:c1:61:2c:31:c1:07:c9:06:b3:bd:
         e8:15:13:f7:74:e5:fd:e6:71:97:47:4a:7b:53:ec:3b:4e:b3:
         35:cb:a5:16:4a:ad:bc:b4:a0:1a:89:b0:9a:ce:2b:1a:32:da:
         fb:b5:a2:99:ec:ce:57:20:13:50:0d:ba:0a:aa:4a:4f:e5:06:
         23:2a:05:65:87:5f:ea:f5:4e:13:78:4d:7b:56:93:3d:03:8e:
         40:87:ee:4c:c0:cd:e2:6a:0e:c4:f8:d1:af:3e:83:e5:1f:92:
         84:e8:f7:ce:6d:e8:50:73:2b:cd:de:a5:d4:ac:e3:c7:ee:d6:
         47:5e:48:b0:79:6e:fc:0a:1d:fd:19:5c:44:11:90:6d:65:33:
         4a:65:4a:56:91:73:3d:7c:cd:18:62:b6:2a:fb:c3:e4:e4:07:
         38:08:cc:83:bd:fb:55:d1:de:10:87:30:88:74:43:c5:de:66:
         8f:73:8c:7f:9f:45:51:c1:b4:26:e9:d4:a1:54:34:b2:c7:b4:
         da:d9:71:7e:2b:1a:ae:06:5f:55:e7:1b:50:63:8e:36:32:65:
         18:5b:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:04 2026 by rpki-client