Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          Wc5QUS77Tj4hCKjsRRFC6wdx3DWCeOX+ljIXHg9rRuo=
Subject key identifier:   8A:B6:26:6F:1F:81:04:F5:FE:43:2F:55:9C:D2:0D:E9:C9:E7:44:45
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       019CE6DAA2FE6CF39EBC160DBD22A6D9D49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          0892
Signing time:             Fri 13 Mar 2026 11:00:14 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:14 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:14 +0000
Files and hashes:         1: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (hash: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28=)
                          2: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (hash: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM=)
                          3: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: yXP0gmMprcpWkvBZUt4JkdRS7Yf83T8wW7F0axXCZqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:da:a2:fe:6c:f3:9e:bc:16:0d:bd:22:a6:d9:d4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Mar 13 11:00:14 2026 GMT
            Not After : Mar 14 11:00:14 2026 GMT
        Subject: CN=8ab6266f1f8104f5fe432f559cd20de9c9e74445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:eb:eb:90:02:f6:58:be:69:fc:72:eb:13:
                    cb:95:78:b1:7f:eb:ec:36:65:d3:4e:ba:e5:ed:cc:
                    20:2d:f9:b8:23:3f:d6:6c:1e:93:e5:b0:3a:fd:2c:
                    2f:72:6a:79:c8:29:a2:ec:6a:b6:47:40:2d:03:9c:
                    d9:d1:ce:ce:07:0d:dd:f2:92:92:f2:dc:e0:6d:4b:
                    8e:5f:a3:43:ab:ed:4c:cb:e0:d7:c3:68:ba:88:a5:
                    b1:bc:72:c5:36:66:85:3e:83:80:f5:13:d6:a0:fc:
                    22:cc:03:d1:5e:1d:26:dc:c8:69:d2:94:fe:2d:ae:
                    6e:69:9e:6f:eb:8e:91:3e:0a:5d:c7:20:aa:e1:ca:
                    cf:d2:c5:c3:95:ee:8e:20:9b:ee:29:63:b6:2a:1d:
                    a3:6b:0c:32:d8:74:9a:88:a2:10:ad:00:7b:09:cb:
                    1f:ea:c0:8d:8b:e3:b4:e0:82:ce:0f:30:e4:f8:d0:
                    93:ad:21:b7:a5:81:91:c9:d1:b2:12:bb:48:39:05:
                    5d:5d:94:9e:4a:45:d1:f7:ea:fc:ed:af:44:39:2e:
                    a6:04:8e:45:c7:12:6c:fb:f1:16:36:86:31:08:e7:
                    8e:e0:42:2f:a9:c6:01:95:f5:66:47:d9:db:dd:df:
                    25:1e:e2:70:00:ce:5d:2e:cb:dd:d3:57:ce:5b:05:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:26:6F:1F:81:04:F5:FE:43:2F:55:9C:D2:0D:E9:C9:E7:44:45
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:8a:63:f3:80:70:52:25:0a:83:4c:7f:1b:b7:4a:fe:27:
         07:96:72:03:5b:81:c4:41:79:0c:c1:88:4d:03:b7:23:85:cb:
         9b:e1:c2:36:8c:2f:79:78:76:a0:9c:8c:0f:9e:58:c4:62:98:
         45:a3:3b:3d:70:44:3e:bf:de:b7:b8:6b:a8:66:6c:3a:94:d2:
         97:08:fb:0b:b7:7e:f8:e7:f1:cd:12:da:2b:94:4f:d0:5e:1b:
         79:82:64:25:27:6c:88:cd:c1:c4:bd:bf:db:c9:54:18:e7:4c:
         d8:12:bb:86:b1:ae:7f:8e:41:5a:76:54:5c:a5:45:25:c7:89:
         42:1a:bc:ad:96:e3:5d:fb:8a:9b:54:ac:ff:9a:53:1b:10:11:
         78:2f:47:d4:35:08:fe:5b:52:ee:25:19:a3:7b:55:0a:5f:2d:
         50:54:b0:fe:83:d6:28:8c:e7:bf:31:cf:0f:b4:2a:7b:df:b3:
         ad:ca:c3:7f:66:b5:74:67:b2:05:1c:07:41:ef:d9:fb:f9:d2:
         8b:c8:a7:94:87:a4:3e:e6:16:c0:74:2e:af:c2:8e:8d:68:e7:
         4c:9d:56:a0:5f:53:b8:91:67:cd:a6:05:2b:44:e5:77:85:0a:
         2e:70:4c:15:51:87:a3:b3:0b:ac:69:6d:60:8b:e9:5e:e4:b8:
         93:7f:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:50 2026 by rpki-client