Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File:                     VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier:          WYlqYAZm0BLfV/O9MfiyuEDhvN0b6fWUKZNTQ0GIHJw=
Subject key identifier:   86:7B:F8:D2:1C:EB:C7:FF:E2:21:09:13:3F:A2:37:C8:14:2F:EA:DD
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer:       /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial:       019E1F118656188AB8290B11940C89FD07F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number:          0A4E
Signing time:             Wed 13 May 2026 02:01:42 +0000
Manifest this update:     Wed 13 May 2026 02:01:42 +0000
Manifest next update:     Thu 14 May 2026 02:01:42 +0000
Files and hashes:         1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: DEGP4AkA9mR2ElTbZjcas8EqR70vMLvzKt0qPB1g/Mk=)
                          2: t2Gg0PTvd5lsW3SGsnAPx7-yRi0.roa (hash: Qa5YolQYkhRDzAfNGYYljMdC9amMCOp6hX293alM/xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:86:56:18:8a:b8:29:0b:11:94:0c:89:fd:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
        Validity
            Not Before: May 13 02:01:42 2026 GMT
            Not After : May 14 02:01:42 2026 GMT
        Subject: CN=867bf8d21cebc7ffe22109133fa237c8142feadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:91:69:e6:79:2a:4d:b8:13:0f:22:e6:cc:
                    0b:eb:d9:14:dc:95:2f:9e:53:61:f6:9b:06:c7:cd:
                    0c:0e:c2:14:9d:79:2a:2b:10:7a:52:2e:01:ad:2a:
                    f7:24:10:83:67:47:39:ab:fd:70:67:d1:6a:eb:38:
                    f7:e5:0b:db:e3:3d:df:6b:6e:d4:86:d5:32:00:58:
                    c4:4c:cd:de:54:04:a5:6d:74:d9:06:62:38:70:e9:
                    10:41:28:16:c5:d4:9e:c8:05:34:1a:5a:2c:e8:5c:
                    82:89:c7:d9:45:b4:6c:be:1b:43:87:18:d4:94:d4:
                    c5:b3:3b:82:7e:96:bc:66:f3:2e:1a:96:37:45:76:
                    7c:f4:4d:82:26:a7:a1:bb:ea:dc:72:c1:e9:46:cd:
                    3c:82:5b:9a:55:02:7a:04:4e:c5:8e:3a:20:7c:31:
                    49:52:c5:e3:02:02:f6:99:32:ba:0a:aa:b5:d7:87:
                    c5:57:63:18:7c:8f:b2:36:af:7a:35:eb:9b:16:f0:
                    0b:38:43:3e:9f:40:11:39:68:b7:0b:9b:02:87:54:
                    14:4b:a3:2a:3a:b6:12:14:b8:4b:27:95:d9:1d:7b:
                    22:0a:be:b1:5d:c4:bf:2b:72:df:e8:a7:e1:02:92:
                    08:5f:e6:71:3b:52:95:5d:a5:c7:3b:7f:10:08:0e:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:F8:D2:1C:EB:C7:FF:E2:21:09:13:3F:A2:37:C8:14:2F:EA:DD
            X509v3 Authority Key Identifier:
                keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:41:88:3c:c8:45:66:85:30:30:04:23:88:73:92:38:e7:28:
         2d:4f:b1:3c:50:a2:83:71:26:54:69:d8:24:0d:6b:bb:9b:aa:
         af:23:0c:ce:fc:64:23:6d:15:21:af:e0:e4:6e:5a:c6:86:a3:
         a4:c9:c0:04:fc:8b:23:e4:35:51:1d:cb:42:4d:bd:0b:26:be:
         4b:e5:48:76:c6:38:53:16:df:f5:e7:84:be:64:5b:bb:53:08:
         cf:fd:21:01:df:cf:32:25:46:b8:1b:d3:37:18:89:94:7a:34:
         3a:32:f9:36:64:82:33:80:a8:9b:02:57:9e:61:5d:96:ca:31:
         31:4e:62:fc:9a:d4:d3:9f:70:ab:94:f7:15:93:18:72:ab:b2:
         6a:5c:38:30:e9:22:74:28:53:d0:44:0b:6c:34:09:1d:4d:f9:
         f6:e0:49:78:cf:b2:71:aa:a5:47:a5:c9:fe:16:44:d9:61:cd:
         86:96:c3:79:b1:52:18:ee:07:ed:b0:c8:b1:f3:76:9f:5c:9d:
         40:a7:00:2f:24:1e:41:f0:1f:b4:9f:62:0a:c6:b5:09:cd:87:
         15:43:5a:06:6c:f9:0c:34:06:fc:72:ee:03:e7:db:9d:9c:52:
         21:48:6d:c0:0f:dd:c4:ab:2b:6e:5e:0d:b5:75:18:9b:e9:dd:
         23:ec:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:23:12 2026 by rpki-client