Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          CVriZYhY4Ff5LT5M1ppVFOYJ6BYcpqrWtmAd1x0taUk=
Subject key identifier:   65:95:21:01:64:EC:E6:5E:18:43:23:29:BF:DE:18:C9:75:8A:30:0F
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       01A180E23C06B4DCC6BF1FA749D6FC1145B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          0AF4
Signing time:             Wed 28 Oct 2026 05:01:12 +0000
Manifest this update:     Wed 28 Oct 2026 05:01:12 +0000
Manifest next update:     Thu 29 Oct 2026 05:01:12 +0000
Files and hashes:         1: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (hash: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28=)
                          2: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (hash: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM=)
                          3: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: h3WLAV02q+pjAZbFjvuzdfBd3MiVoPFCeOE9PefYw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:3c:06:b4:dc:c6:bf:1f:a7:49:d6:fc:11:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Oct 28 05:01:12 2026 GMT
            Not After : Oct 29 05:01:12 2026 GMT
        Subject: CN=6595210164ece65e18432329bfde18c9758a300f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:64:1a:61:7e:fd:18:08:06:c6:01:e5:8e:
                    01:24:c3:c1:37:ab:9f:0d:3c:89:6a:2a:c6:e1:1e:
                    01:89:7f:33:ed:68:a3:2d:46:73:6a:75:4f:d0:0e:
                    74:1b:8d:79:07:ec:22:2f:bc:f4:64:24:f7:81:be:
                    ae:92:e5:ea:5b:72:4e:21:0b:18:cf:33:75:df:75:
                    60:9d:14:22:d2:4b:e7:41:73:e1:78:1b:72:8f:04:
                    fb:3b:c9:fe:0d:fa:e2:1d:0b:dd:b3:ef:84:e8:29:
                    72:d0:18:a4:95:0f:bb:b7:fc:60:ea:fb:03:f5:72:
                    2a:91:4c:ed:93:2d:3e:66:d6:39:f0:ab:e1:e0:f7:
                    cc:68:81:b8:4b:9c:af:f6:70:27:9f:23:ab:12:1b:
                    17:c7:fa:9a:db:88:2f:7a:b7:3b:90:7b:72:89:64:
                    e6:66:ca:3b:a8:f6:f2:53:45:a6:4c:b5:44:f3:ee:
                    0a:73:e0:a6:14:49:7a:a0:59:cf:da:bf:4d:c1:8a:
                    2c:b1:0d:f1:ee:6b:9d:42:55:59:95:fb:e9:b3:8e:
                    a6:d0:2c:7f:be:e2:40:c0:19:52:ab:b9:3b:9e:88:
                    89:77:35:4d:e2:33:7e:f3:33:fd:e8:6f:af:6b:75:
                    6f:21:e6:e4:7f:50:20:f2:28:6c:64:81:dd:cd:9d:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:21:01:64:EC:E6:5E:18:43:23:29:BF:DE:18:C9:75:8A:30:0F
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:61:99:12:9d:61:34:82:2b:47:37:d7:a2:e6:bc:10:56:50:
         c4:96:d7:d8:98:4a:bd:b3:49:17:3a:e7:a5:60:04:cd:4f:55:
         b7:56:77:40:c3:84:83:cf:68:b6:3f:e6:59:c7:fa:4c:08:f5:
         d9:6a:76:f3:ec:db:79:fb:49:36:d1:7f:36:74:b1:ea:66:cb:
         a9:56:86:5a:8f:c1:f6:2e:d0:86:0b:4d:c3:72:66:2c:e8:a2:
         d5:0b:d4:9e:85:aa:29:cb:59:fc:b2:e3:7f:ef:13:b3:71:da:
         06:89:f7:16:a2:aa:ae:88:45:dc:0a:96:e8:d8:83:45:bf:42:
         7e:f6:9f:d3:b1:bd:60:ff:dc:d0:04:d2:6a:64:63:86:57:66:
         25:a9:31:1a:5a:55:a3:a9:99:29:74:ac:d6:34:df:d3:25:ec:
         21:92:4d:b3:19:f1:25:97:2d:7f:fe:37:5b:1c:66:c0:1c:31:
         ab:c8:e7:b9:e2:4a:7b:49:42:6e:a6:57:a2:56:0d:15:f1:8d:
         ca:06:c8:b4:98:91:02:ea:c0:e5:ed:99:d3:39:24:6c:1d:77:
         6e:63:04:2e:3d:6e:aa:ad:7f:c5:04:c3:7a:c2:73:1b:a3:15:
         03:d5:a6:f1:49:f6:6e:b9:76:ee:1d:45:d4:12:ab:ea:0a:e5:
         2c:f9:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:01 2026 by rpki-client