Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier:          u9dp7DyctzRq8dmxazPs7fiyepgnSQtsU0keFiuY3hY=
Subject key identifier:   FA:36:C3:19:3A:39:DE:40:56:76:89:CF:45:8F:FF:FE:32:C7:5B:7B
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       01A09B7FD656E66EAFB0745283F07FCFEECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number:          0A12
Signing time:             Sun 13 Sep 2026 16:00:41 +0000
Manifest this update:     Sun 13 Sep 2026 16:00:41 +0000
Manifest next update:     Mon 14 Sep 2026 16:00:41 +0000
Files and hashes:         1: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: NRRBmlMvRKlLfPKD8K4wpvyMgRddd4DkjRIiWYGbAgY=)
                          2: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (hash: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9b:7f:d6:56:e6:6e:af:b0:74:52:83:f0:7f:cf:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Sep 13 16:00:41 2026 GMT
            Not After : Sep 14 16:00:41 2026 GMT
        Subject: CN=fa36c3193a39de40567689cf458ffffe32c75b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:ae:2f:89:c5:a8:95:86:15:40:91:35:0d:
                    25:f2:b7:ef:05:d9:a3:83:da:ba:c5:9f:9f:fc:85:
                    65:30:a2:50:06:5b:da:88:88:4b:a1:24:19:5e:a0:
                    41:6e:bc:a1:74:af:fa:45:7b:9c:f3:ff:70:57:b4:
                    ea:9c:2e:23:ab:77:4b:90:ba:24:de:c6:19:39:65:
                    79:38:94:6f:86:29:8b:7d:ae:6e:18:c9:a0:06:f6:
                    73:26:c8:4b:85:01:b0:8f:da:dd:74:57:3b:93:cf:
                    01:b7:9f:1f:ef:9a:bd:40:bb:cd:78:12:d3:28:b8:
                    1f:ff:51:84:42:fd:94:d5:7f:13:65:1a:01:95:da:
                    e9:a1:6b:b4:88:b8:e0:0b:f8:bf:07:98:ab:02:02:
                    a9:25:6a:e7:7a:2c:14:3f:b8:1e:bf:80:5a:94:e3:
                    b4:63:92:0b:b4:3b:b2:2c:66:4a:20:40:66:1f:5a:
                    f2:8c:38:3c:3d:b6:bf:10:c5:67:8c:6a:0e:a1:9d:
                    c7:52:4b:4b:49:e3:fb:24:39:c9:d9:25:85:20:81:
                    57:c8:be:2d:56:55:d5:95:ff:34:87:0a:ae:27:b2:
                    83:f0:dc:cf:e4:19:5f:50:35:e1:97:8f:f0:f4:d0:
                    56:08:b9:db:e7:b4:63:5f:26:ed:2e:b5:a2:68:fb:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:36:C3:19:3A:39:DE:40:56:76:89:CF:45:8F:FF:FE:32:C7:5B:7B
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:a3:49:90:3e:15:d7:4b:96:28:ae:66:db:61:30:eb:b6:
         0d:a7:ea:b9:70:11:86:64:96:b3:42:fc:9b:cf:3f:44:ec:2e:
         68:ab:cd:1e:86:ff:eb:dd:89:a3:45:23:66:2b:3f:65:91:76:
         26:1e:a7:47:6f:e6:7c:3e:00:f0:63:53:51:d6:dd:0e:d9:21:
         2a:21:7f:96:fe:f6:1f:04:87:ee:ce:77:0b:5a:eb:dd:64:6d:
         65:ac:a0:b7:ed:de:28:fc:b7:f3:91:a5:51:5a:69:69:a6:3c:
         6b:ba:3d:f2:b1:40:85:87:63:f6:89:73:30:2e:7a:6f:7f:fc:
         c6:d7:a0:95:7d:80:be:85:6b:93:eb:af:6d:85:5f:d4:86:c3:
         d2:ef:57:0d:2c:15:79:89:56:5a:23:68:74:f1:3b:58:3e:5b:
         31:c4:a7:a8:79:a9:86:eb:1d:f8:d4:71:54:58:04:0e:cc:43:
         2d:0a:c8:9d:7a:31:59:7f:e9:52:3d:8c:5f:8e:e7:3e:1b:96:
         e8:b0:12:da:4e:d9:e2:6a:33:70:6f:6c:f9:a8:7d:c5:75:b2:
         0d:2b:4f:1e:8d:20:ea:e5:31:66:75:8d:84:e5:38:a1:f2:45:
         b9:f1:8d:c0:ea:94:8e:07:92:72:ee:26:d8:76:31:bd:40:55:
         d9:21:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:40:17 2026 by rpki-client