Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          lv4d4/iv5svhvkI+Ny3BUYJ3UvV0OJbWItwGSSSNjGk=
Subject key identifier:   69:84:D1:05:5B:F0:DA:D1:BC:B9:1E:22:37:34:82:35:E5:10:17:E2
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       019E202370A72A569C7F185279BD60C81E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 07:00:53 +0000
Manifest this update:     Wed 13 May 2026 07:00:53 +0000
Manifest next update:     Thu 14 May 2026 07:00:53 +0000
Files and hashes:         1: FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa (hash: o4fOKN67hOq3ekX5RPCUgwu3ftf0QCCHscRuqhwqtT0=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: latf4N/lZOZDgMq5hR4bspq/ukV86TpLd+/llG5pAac=)
                          3: YogSL5izPYypDSpRN-bhm7FC-Zc.roa (hash: SYMSdL9jKWAhxjZJN7qyE8Onp0ESoc3LmqO5sBgdEyM=)
                          4: mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa (hash: 7MjOgwhf1xPnvfegvDmAvTWCavPasFV1fKSbjNEHbXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:70:a7:2a:56:9c:7f:18:52:79:bd:60:c8:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: May 13 07:00:53 2026 GMT
            Not After : May 14 07:00:53 2026 GMT
        Subject: CN=6984d1055bf0dad1bcb91e2237348235e51017e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:45:c5:45:d7:75:18:00:45:4d:7e:9a:d8:
                    11:88:c2:93:d7:2a:47:95:ef:15:17:de:c6:09:94:
                    be:ae:8a:b3:36:b2:3b:63:72:f6:d3:17:d3:11:b1:
                    5f:ae:1d:ac:8c:7d:1a:43:d8:1f:c1:a6:f7:8c:fe:
                    c9:a4:c9:d2:5b:a4:3e:16:00:42:47:81:9c:d2:95:
                    68:fc:20:11:93:6f:b4:13:75:6d:95:f4:1f:ad:b2:
                    b2:e0:ca:3c:c9:d7:fd:db:83:84:3c:e0:39:e8:11:
                    f5:f7:18:b7:05:91:32:18:02:33:9e:db:ce:71:23:
                    2f:61:9e:c0:03:b6:11:80:7e:b1:2d:82:bc:23:85:
                    bf:be:43:cf:46:1c:79:0a:9d:a3:f0:bb:0f:d0:62:
                    6c:b5:8c:ee:de:79:d2:df:d3:e1:20:d0:93:29:38:
                    2c:7b:31:2e:23:fc:c3:bf:bc:a2:0f:e0:46:a2:62:
                    49:96:2f:31:4e:7e:6b:28:89:17:77:5f:db:63:81:
                    31:9c:d2:f0:89:6d:b8:ba:a4:1c:35:9a:49:0b:e1:
                    56:b3:d5:53:4a:04:67:e5:5c:f7:60:89:4f:cf:bb:
                    d8:4d:98:07:ac:22:56:3a:f9:55:8c:5a:94:21:aa:
                    d1:cf:79:a6:69:bf:25:9c:33:bb:9e:57:dd:a6:cd:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:D1:05:5B:F0:DA:D1:BC:B9:1E:22:37:34:82:35:E5:10:17:E2
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:fd:d3:e2:33:1a:7f:18:8e:f4:74:48:da:b1:e4:72:26:
         3a:23:87:b6:70:e5:b4:bf:e6:97:05:2b:78:a9:ab:ba:d4:06:
         b6:46:5f:6a:83:82:da:6d:e5:6e:75:bf:40:c9:60:2c:ae:e7:
         a9:65:5f:a9:ca:f5:45:95:b0:04:78:55:f7:b5:b6:85:d8:5c:
         aa:58:51:0a:47:3f:98:4c:c1:f6:7f:9e:94:2b:70:fe:b0:fd:
         fa:1e:4c:bf:a0:75:b1:74:86:97:e0:8b:30:c8:5f:00:a9:ef:
         c7:1f:c3:32:d1:85:de:51:77:e1:5e:b8:14:53:66:5f:a9:9f:
         5e:17:83:63:b5:ea:a5:9d:e3:7e:94:fe:d4:6e:21:c8:69:15:
         34:a1:95:29:36:7e:52:d3:c5:2e:41:47:1f:ae:e7:21:00:9c:
         b1:18:0b:18:e1:15:a5:a6:b1:1f:2a:a6:81:01:89:aa:c9:56:
         a3:0b:4e:0d:b1:a7:79:cd:ab:cb:8c:42:fb:a8:5b:42:a2:77:
         96:84:8a:58:35:a9:a9:27:8c:7d:2e:77:3d:c5:03:4c:19:3f:
         ac:d4:00:81:cb:15:f9:26:63:9e:93:82:cb:f1:7e:19:62:dd:
         cc:59:04:74:d7:1f:57:49:78:5e:75:4d:e8:93:9a:5a:87:17:
         9a:13:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:47 2026 by rpki-client