Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          pecdrrLmsqRF2bnQsg3FI8y6OSBqQL7jWqgUk1HL2V4=
Subject key identifier:   4F:BB:21:C9:80:DE:CE:84:C1:DA:87:D3:3F:CC:22:7C:CC:18:12:CF
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       019D2704769671AAD1B34A2694E17D28480D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 22:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:37 +0000
Files and hashes:         1: FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa (hash: o4fOKN67hOq3ekX5RPCUgwu3ftf0QCCHscRuqhwqtT0=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: nuj385g3jJuRl+GQvF0nZr7yjVQmWucNDh1VH4rlf4M=)
                          3: YogSL5izPYypDSpRN-bhm7FC-Zc.roa (hash: SYMSdL9jKWAhxjZJN7qyE8Onp0ESoc3LmqO5sBgdEyM=)
                          4: mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa (hash: 7MjOgwhf1xPnvfegvDmAvTWCavPasFV1fKSbjNEHbXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:76:96:71:aa:d1:b3:4a:26:94:e1:7d:28:48:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Mar 25 22:01:37 2026 GMT
            Not After : Mar 26 22:01:37 2026 GMT
        Subject: CN=4fbb21c980dece84c1da87d33fcc227ccc1812cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:89:9e:51:c7:ce:25:fb:82:3d:4d:cb:56:
                    ce:88:ee:3a:29:de:66:6e:79:9d:5d:b1:8f:c9:4d:
                    b3:bd:30:fc:a1:62:08:e5:70:6c:b5:56:bc:e1:9c:
                    3c:a1:48:37:8b:76:31:b8:06:29:5a:c5:6a:f6:1f:
                    f5:57:78:9a:df:44:69:47:62:67:f0:fc:e7:ba:2f:
                    12:a0:bc:7a:dc:8e:62:e5:af:31:e8:67:25:25:bb:
                    99:4e:d3:c1:e7:fe:06:88:90:93:75:1e:c2:51:23:
                    f6:7e:be:fd:11:69:af:08:a6:49:90:fd:60:42:53:
                    34:25:23:52:99:8b:7b:c2:ff:19:7e:89:2d:20:f5:
                    51:d7:15:5f:78:d1:80:08:54:74:78:db:97:9d:64:
                    e4:3d:77:e5:8f:19:fc:7e:78:1c:cf:42:c7:3a:a9:
                    b8:ea:4d:f6:38:f3:d8:89:89:4d:19:e9:8c:bf:5d:
                    f1:a5:5f:94:13:80:1f:cf:f6:21:ac:ba:8d:f1:6b:
                    c3:19:81:f7:e8:73:fd:74:a8:7f:62:47:32:1b:d2:
                    0f:1c:bf:8f:3d:49:48:2d:f5:36:f6:94:99:54:1e:
                    1c:e8:c8:c3:9b:40:0b:8f:2a:3a:bf:2e:44:36:d4:
                    a4:a9:b2:ab:19:e2:bc:22:b0:33:01:c2:f4:b6:d2:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:21:C9:80:DE:CE:84:C1:DA:87:D3:3F:CC:22:7C:CC:18:12:CF
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:68:9e:d2:33:91:81:c0:6f:60:a4:f3:82:8d:49:15:85:
         58:4b:f5:d7:58:1e:b6:29:af:40:dc:46:90:b6:50:4f:8e:11:
         fd:95:57:de:d4:63:c0:0e:28:32:59:92:c2:2d:95:35:d5:b7:
         49:b8:38:54:58:97:03:a5:48:66:59:e0:e7:30:c9:9b:3e:5f:
         6a:5f:80:9a:6b:6e:13:6b:b0:a7:54:93:3d:91:e7:2b:15:12:
         de:9f:01:11:c2:d2:db:34:8c:74:90:fc:1d:4d:70:00:5f:bb:
         dc:e5:d1:8d:5c:20:82:1c:ad:c8:f0:50:5f:cf:fa:19:eb:d7:
         27:dd:c6:06:9f:0f:6c:1a:b1:62:68:55:ed:a6:c3:e2:1c:63:
         b3:a0:71:05:c3:3a:56:b8:d3:50:e3:3a:50:02:36:53:e3:f9:
         5d:4d:76:22:8e:dd:45:e0:4a:3b:72:d9:69:98:c0:64:26:5d:
         96:27:72:08:06:f2:91:b8:4c:60:ce:57:d6:ca:42:51:32:84:
         27:57:5a:c4:56:01:b9:ab:3a:e9:58:d7:a5:3d:67:01:d7:4b:
         5f:9b:42:10:b3:ed:cf:9a:c5:41:87:f9:6f:70:33:d8:39:fd:
         ea:c7:e1:d1:ce:7b:e0:95:75:19:a4:20:e8:85:ea:0d:a8:38:
         d8:1a:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:55 2026 by rpki-client