Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          xV4oTzv4ngofSLAq5dOKFA70xfRe/Gle9QGX0QtcW0o=
Subject key identifier:   C5:E9:50:E1:6D:19:AE:36:00:64:B3:53:95:37:59:A1:49:77:29:45
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       019CACEBA1385BA9F57C408EFBC899B486A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          0874
Signing time:             Mon 02 Mar 2026 05:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:49 +0000
Files and hashes:         1: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (hash: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28=)
                          2: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (hash: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM=)
                          3: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: FFq0M/5ilq9gwB8hVrFE1TRRYi1kh+V+lGVTFRQTSBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:a1:38:5b:a9:f5:7c:40:8e:fb:c8:99:b4:86:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Mar  2 05:00:49 2026 GMT
            Not After : Mar  3 05:00:49 2026 GMT
        Subject: CN=c5e950e16d19ae360064b353953759a149772945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:09:70:a6:ed:02:b7:5d:1c:3d:01:58:3e:
                    ad:c1:28:98:fe:19:00:93:3c:04:3c:57:c9:9f:83:
                    ff:c5:61:91:c1:85:d1:be:66:dd:46:96:6d:72:32:
                    a3:1d:61:a8:77:e4:a0:8a:1f:b9:47:ad:6f:02:48:
                    e9:38:de:e6:6c:53:c8:35:7b:66:2d:6d:08:38:f2:
                    7c:f4:c1:13:6d:13:d7:6a:ab:13:1c:fd:13:f0:6a:
                    9a:bc:3f:6c:13:07:23:97:dc:7f:d4:ea:2e:d7:ff:
                    6f:d1:1e:7f:fa:15:23:ee:56:d1:57:59:2b:6b:b1:
                    36:ca:74:ac:40:a8:44:58:b8:6a:61:e6:ba:2f:2b:
                    bd:a3:84:cf:3f:1f:d9:dc:30:6d:a9:9d:4b:67:c5:
                    83:c0:6b:44:5d:75:4e:1c:cb:14:ab:c3:6f:7c:64:
                    69:95:fe:de:06:90:10:1a:f1:42:1e:94:c7:bf:a5:
                    b5:0d:90:6a:a7:7f:bf:41:dd:e2:f2:8a:df:90:d2:
                    42:3d:8c:50:c8:fe:3f:8b:78:0c:ad:ef:74:c4:e6:
                    30:87:a0:1c:48:7a:7c:1b:93:6b:84:48:f8:50:2a:
                    f1:91:34:e1:7d:f9:a7:c9:c8:6d:eb:01:bc:9c:8f:
                    5a:f5:b9:18:ed:ea:48:78:c4:4d:34:fc:26:53:37:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:50:E1:6D:19:AE:36:00:64:B3:53:95:37:59:A1:49:77:29:45
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:c2:fc:cf:71:ab:15:b8:02:15:93:1d:1a:d4:29:da:0d:
         13:f1:6a:08:8b:90:2f:1b:8b:39:0d:af:f2:b6:85:4e:ec:29:
         5d:6e:72:9b:7d:34:0e:f9:18:4b:d7:40:a5:b3:e9:49:18:0f:
         76:e1:67:12:da:bc:a7:f0:41:04:44:5e:27:7a:f6:06:e4:a0:
         ee:0a:de:e4:63:31:75:b0:96:ad:ad:42:95:b1:2e:99:73:58:
         c2:d9:52:47:88:bb:7a:0c:de:f0:60:44:2e:06:4d:bf:57:26:
         aa:01:aa:0e:ca:7c:05:84:7c:27:d9:2d:0e:bf:fd:db:a3:bc:
         cd:a2:a9:c7:62:bb:b3:3b:19:6e:44:4f:a8:78:b5:df:ed:c7:
         2e:75:8f:bf:63:f8:f6:79:ee:e2:35:ee:f7:7c:58:b3:68:2e:
         83:fe:5c:28:f5:c1:8c:2f:72:2a:f0:69:b4:d8:ca:fd:b0:8f:
         79:29:ea:12:00:3b:59:38:65:ad:62:a5:e0:b5:a1:a5:a4:e9:
         98:b6:f6:62:21:b4:f3:ab:5d:44:59:8b:0a:4a:30:5e:19:bc:
         f2:66:0b:07:75:39:46:ef:d8:ac:e2:0d:0e:d5:97:97:db:75:
         e4:93:de:9c:1f:9a:b4:5a:cb:9b:9a:91:e2:92:f9:1a:21:c8:
         94:7a:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:19 2026 by rpki-client