Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          aupDHAEGPjkxyuem2Zpm9stBgvjV02bh8Bh1Emt0Si8=
Subject key identifier:   DD:DF:1F:2D:09:BC:F7:3F:B1:2E:08:1C:38:5D:2B:18:8A:A9:09:FF
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       01A0EA40D368EC91F52ADFE47893C4EDE3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          0AA6
Signing time:             Mon 28 Sep 2026 23:01:51 +0000
Manifest this update:     Mon 28 Sep 2026 23:01:51 +0000
Manifest next update:     Tue 29 Sep 2026 23:01:51 +0000
Files and hashes:         1: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (hash: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28=)
                          2: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (hash: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM=)
                          3: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: JT7JurRFBs6fy8+BSkbttiuyvcACbcpWPgTlysx2+vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:40:d3:68:ec:91:f5:2a:df:e4:78:93:c4:ed:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Sep 28 23:01:51 2026 GMT
            Not After : Sep 29 23:01:51 2026 GMT
        Subject: CN=dddf1f2d09bcf73fb12e081c385d2b188aa909ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:19:32:22:19:41:da:46:38:81:e2:96:9a:
                    6e:0a:38:5e:a5:f7:d4:36:26:1d:6f:67:0f:47:5d:
                    aa:0b:be:a6:17:c0:7c:85:54:80:dc:f1:3b:65:e8:
                    2c:f5:41:72:ca:cf:72:cc:5f:f4:87:49:45:15:1d:
                    52:69:8f:83:b2:b8:3a:c9:ba:ba:dd:a4:c7:7b:3f:
                    b7:8c:07:9b:b4:32:3c:a1:27:b7:87:a8:02:29:ad:
                    27:b3:50:f7:7f:42:fa:72:0e:c9:2b:75:0f:32:b4:
                    71:d5:ba:fd:e0:ca:a9:ff:c2:9b:15:93:3d:23:24:
                    3c:38:f3:41:95:ec:71:cd:dd:48:9c:5d:35:54:c7:
                    20:b5:dd:d0:fa:56:14:10:f6:82:5b:21:e7:59:8e:
                    a8:6b:80:99:4e:39:74:66:45:f4:ee:af:65:27:52:
                    e2:de:89:ef:2b:b8:c8:bd:aa:02:fd:c1:84:3b:68:
                    ee:09:e7:70:bc:d2:be:ca:52:a4:ad:f6:60:46:0d:
                    59:28:72:5c:05:db:9c:5b:61:06:53:34:42:08:76:
                    18:d7:e1:11:97:e3:e4:04:f8:13:e0:af:20:47:e9:
                    8e:2c:6e:31:ee:8e:d1:0a:a6:d8:d8:25:cc:6a:b4:
                    59:70:8b:e1:aa:12:cd:c3:34:14:b8:98:a2:56:ef:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DF:1F:2D:09:BC:F7:3F:B1:2E:08:1C:38:5D:2B:18:8A:A9:09:FF
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:02:33:00:7b:dd:a1:f3:3d:2e:81:19:77:ce:e6:4f:80:
         0e:41:10:f0:91:58:c9:fa:ff:35:b0:fc:df:b7:65:26:4a:09:
         48:56:fe:cb:c7:a2:09:d6:71:23:01:05:35:f8:62:70:46:9d:
         5e:52:fb:1f:33:dd:ba:68:28:73:55:7b:f9:ee:25:aa:5f:fd:
         ca:c2:ad:19:3b:a0:2f:4b:6f:25:e4:4a:7b:6d:56:8f:a7:93:
         65:3d:2e:33:2b:b0:09:ab:9d:df:09:99:97:76:27:39:ec:05:
         e0:19:41:34:a1:f9:b0:b4:b8:fa:26:49:51:77:a7:42:ee:3e:
         ba:00:cd:66:cd:48:76:f2:e2:81:ef:6e:f0:6e:2f:91:f8:c4:
         e8:6f:a4:7a:13:1c:ba:82:84:58:87:a6:b6:4a:8c:b9:9e:31:
         81:0a:83:84:5a:ae:6a:7f:ac:39:f6:e5:7d:f4:3d:71:6c:b6:
         1a:3b:3f:ba:6f:d6:9e:80:a2:bb:60:8e:73:1a:34:25:b6:83:
         5f:04:b5:c8:a4:ed:55:24:e7:43:36:45:4e:9c:c7:61:a7:30:
         56:c2:92:95:1b:54:c7:fe:46:0b:87:8f:a4:78:ce:d9:d1:5a:
         e5:d5:61:c1:b5:69:d3:dc:99:36:9c:b4:ec:35:53:eb:cc:50:
         ef:0e:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:46:41 2026 by rpki-client