Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File:                     VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier:          htMEVgw8nNZdgguUhHtCWfC6SdTFmR53+Y5NQHbbXWg=
Subject key identifier:   6D:12:F8:28:03:80:C1:BE:9D:88:B0:41:B1:B8:9F:3F:25:A7:17:BD
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer:       /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial:       019E1DFEC096FCC553ABAE9FD16236A77D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number:          028C
Signing time:             Tue 12 May 2026 21:01:35 +0000
Manifest this update:     Tue 12 May 2026 21:01:35 +0000
Manifest next update:     Wed 13 May 2026 21:01:35 +0000
Files and hashes:         1: H6jqDEJRJpVr93f9cwyj02eDJQY.roa (hash: mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=)
                          2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: guQKEEzLra/sYQkd/xNaS80mtXN6CCWR9YJ74v0nDjs=)
                          3: iYM-FIy7T-G9R6n2wd4TYw9TnIk.roa (hash: PXUoRcNc7FF2/MrTmkvz/siqH/fXjLpzh1E05qTAFP8=)
                          4: uUGoEjdfbBo-jF6U1dwSdm-Vmro.roa (hash: zwHsLDdeMuR8VmDXVFWRldbxh4F8eqhJM3STNDr64Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:c0:96:fc:c5:53:ab:ae:9f:d1:62:36:a7:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
        Validity
            Not Before: May 12 21:01:35 2026 GMT
            Not After : May 13 21:01:35 2026 GMT
        Subject: CN=6d12f8280380c1be9d88b041b1b89f3f25a717bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:a1:a8:d5:de:2d:c4:a5:32:21:fe:06:f4:
                    e2:7e:b1:5e:00:c7:57:bf:c6:f3:75:7e:ea:78:cb:
                    ea:fd:1f:69:c4:b6:dd:e4:6d:85:80:7d:7a:40:11:
                    80:53:97:b6:47:5e:a3:a3:b4:a4:62:71:c3:ab:7b:
                    51:15:54:ac:4b:87:60:81:42:1a:b7:5d:f4:ba:ea:
                    c4:8d:67:02:8d:16:7d:f4:55:cd:0d:6e:3e:62:81:
                    ac:82:8e:e6:39:98:af:3b:43:17:c5:be:2c:2b:6d:
                    2f:9a:15:36:6c:1e:9e:ac:f3:8e:8a:a1:b7:ae:21:
                    83:f6:da:98:6e:b3:14:47:00:6d:3f:97:95:82:be:
                    06:be:45:b6:10:b9:dc:d8:ba:9a:63:69:4e:e0:6f:
                    cb:e5:8d:14:c7:f1:0f:2b:96:2d:13:32:0b:2b:08:
                    7f:14:ad:b7:21:31:a2:14:8f:16:64:90:c8:09:b4:
                    27:b2:72:0a:dc:1c:83:3c:c3:ef:03:bc:8c:61:cf:
                    9b:05:56:92:0f:80:21:f4:22:fd:30:d2:ea:f5:a8:
                    1e:51:96:d6:99:af:99:a5:ab:6f:ff:07:2c:8c:71:
                    6d:45:f8:4e:de:6d:d8:ef:e4:25:3a:c7:a0:49:dc:
                    7f:b8:57:e1:5f:3e:31:e8:e8:9a:d9:55:b9:99:d6:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:F8:28:03:80:C1:BE:9D:88:B0:41:B1:B8:9F:3F:25:A7:17:BD
            X509v3 Authority Key Identifier:
                keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5d:30:45:10:ca:62:63:eb:9f:e0:8d:3a:d3:21:96:39:8c:
         3d:66:bd:3b:5d:4b:3e:fb:a5:05:97:97:6b:16:81:d5:aa:f5:
         4a:7a:69:e6:36:e4:39:64:ab:16:1b:db:c1:b5:28:66:81:f5:
         47:6e:2a:59:2d:ff:ad:39:46:3d:1c:c7:8f:52:58:0d:d2:84:
         60:91:5b:70:8d:cc:72:86:7d:57:e0:6e:4a:45:30:29:e2:21:
         86:24:31:8d:e6:37:0e:db:39:67:81:ab:ae:98:c4:aa:0a:88:
         84:97:ce:19:7d:43:8c:3f:a6:3d:ba:92:db:ed:71:c5:1d:b3:
         81:00:06:94:8e:fe:e7:55:0f:74:aa:db:43:f5:83:37:04:65:
         81:c0:3a:49:9d:3f:a2:cc:3a:8c:3b:c2:33:83:79:2e:f0:dd:
         e3:50:25:23:72:2f:b7:ed:ac:dc:00:3b:dc:4e:a2:ed:39:e0:
         f4:14:2c:cf:b1:54:50:15:77:a4:f1:51:f3:4b:5d:c0:9c:82:
         9d:66:f4:22:fd:c5:9b:87:88:2a:13:cb:d9:b3:be:2b:76:1b:
         d2:21:9b:96:e2:b7:c6:cf:bb:2d:2a:c8:12:96:ca:e9:1a:b3:
         da:a8:1e:94:ec:41:82:d7:e4:b0:8d:d0:8c:aa:15:89:e5:91:
         25:3f:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:59 2026 by rpki-client