Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          961U0CzfbHPZB6X4rAzEE8on1yx9UkcyjIGdKJY1xg0=
Subject key identifier:   16:C8:20:05:32:43:67:40:9B:B9:66:F8:BC:F0:10:D6:78:FB:59:8B
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       0199240D5D7CE6538730B342F28D0AC87560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          069E
Signing time:             Sun 07 Sep 2025 12:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:19 +0000
Files and hashes:         1: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: nGiiy0WHymCM/jwlcFO4kAOnATWWkiY7UHyjBPJpkAU=)
                          2: xfo8mbGixdxPwuOxfgy37itZ-zw.roa (hash: 5hlO0kp7ybupPRVntdJPeq0yh6uYaub3TjIoPpRbwZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:5d:7c:e6:53:87:30:b3:42:f2:8d:0a:c8:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Sep  7 12:01:19 2025 GMT
            Not After : Sep  8 12:01:19 2025 GMT
        Subject: CN=16c82005324367409bb966f8bcf010d678fb598b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:99:a6:92:05:e8:c3:b4:0e:ff:be:b8:08:
                    d5:7c:16:17:5c:78:33:6a:8e:90:16:a6:98:f7:07:
                    03:ad:67:e7:d1:1d:92:75:cf:d4:f4:6a:f1:42:51:
                    c5:96:f0:3b:f7:22:22:f1:2b:32:e4:8d:c3:33:95:
                    e7:c0:c3:24:34:d5:93:34:9a:ea:47:4c:d3:1b:5c:
                    e3:a5:48:a2:4e:0b:8e:11:0a:e1:11:d3:3d:7c:65:
                    e6:21:69:d1:b2:c3:2d:1f:83:04:b0:86:3f:40:e8:
                    32:0a:fd:83:f4:57:e6:d5:de:20:a3:9f:f7:17:53:
                    f6:c0:b6:8d:79:94:86:d7:20:03:fc:1f:e6:3e:3e:
                    50:24:8b:db:c6:55:88:f3:02:38:62:1c:ad:62:d6:
                    03:6d:cf:6e:ae:46:86:29:05:67:c1:f0:b6:36:01:
                    c8:8e:af:5f:87:8d:df:63:7c:2c:39:4b:f4:ec:cd:
                    97:ac:94:3c:4a:97:35:f7:dd:97:24:a7:ad:f8:fa:
                    33:7c:9e:f9:cb:12:c8:0d:7e:6b:6b:9f:af:ba:eb:
                    92:4e:9e:9b:2b:dd:1c:87:9c:68:b4:47:3c:0a:2a:
                    13:f2:28:de:35:e0:b9:0d:5f:08:79:a5:dc:7f:0e:
                    74:41:dd:30:da:ac:8e:6d:ba:64:6b:d4:2f:6b:19:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:20:05:32:43:67:40:9B:B9:66:F8:BC:F0:10:D6:78:FB:59:8B
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:80:a7:8f:bb:ce:49:92:31:57:78:31:ee:cd:5e:44:89:fa:
         c5:fb:53:8a:a9:fb:84:7a:8d:96:c1:4b:c0:9f:f7:a9:14:3a:
         09:6e:23:c5:28:e1:54:ec:b1:97:63:9d:4c:ca:a9:34:ba:ef:
         56:bc:a9:3e:06:fb:8b:4b:a1:d2:23:fa:21:e9:c7:a6:a6:7e:
         7b:62:66:62:f3:8f:cc:e1:8a:4c:fa:ad:37:9f:34:17:68:3b:
         04:9c:b9:f1:c6:22:09:6f:2b:1b:2b:eb:66:e0:3c:f1:24:d6:
         76:62:f7:ea:a1:9a:03:3e:9b:1d:a4:68:9f:8f:50:b5:cf:d2:
         3e:70:1f:e0:61:0a:5b:db:2e:74:3b:96:9f:a3:b3:bb:b1:f3:
         dc:86:93:f0:51:1c:f1:b8:a0:88:51:8b:45:9e:47:29:55:af:
         c5:2b:67:72:e9:ac:c5:28:9a:54:2f:7d:5b:a3:e9:b1:ee:34:
         33:6c:74:e7:2c:b9:b5:51:83:b1:93:d0:44:57:92:e0:9d:d2:
         34:8b:33:62:17:c2:06:32:50:29:ba:cc:b9:d8:c5:fd:13:03:
         4a:32:08:3a:0b:93:fb:f3:8f:89:b7:56:bc:7d:b2:2e:22:dd:
         44:fa:29:c5:4c:f9:21:7c:70:9c:95:e2:f3:a2:e0:3f:6e:2e:
         fd:00:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:06 2025 by rpki-client