Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          AoUQRrYviu9UK2jAXVIASXBpfwZ9QZWSVZNda8wBGmE=
Subject key identifier:   4E:5B:BE:3D:18:49:5C:15:41:A2:BE:5F:81:90:CD:59:AC:CF:EF:B1
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       019EC1EDE54D2F75B7297C172D56F63D98A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          0988
Signing time:             Sat 13 Jun 2026 17:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:53 +0000
Files and hashes:         1: ZAb6wT9rDWaY1PH2s7T29tlJhUs.roa (hash: fRwwFmSuTNukQolyfdFctPilc92Pv6bdg5DBKTT/w28=)
                          2: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (hash: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM=)
                          3: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: lk1EIRhEL+whFzMjmuPW4Kz6a+A2t6PQYaEAE/ffRpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:e5:4d:2f:75:b7:29:7c:17:2d:56:f6:3d:98:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Jun 13 17:00:53 2026 GMT
            Not After : Jun 14 17:00:53 2026 GMT
        Subject: CN=4e5bbe3d18495c1541a2be5f8190cd59accfefb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:03:8c:71:39:f8:f5:4c:ac:64:ab:f1:b2:
                    1d:40:fb:ac:57:27:38:0b:e9:69:79:08:34:a5:5a:
                    56:fc:9f:78:43:61:30:ff:48:aa:af:af:50:96:b5:
                    6e:e7:94:5d:84:68:58:1c:27:73:7c:8f:65:2b:b7:
                    5f:76:30:1e:7f:b6:c1:64:b5:e9:1b:2d:58:eb:25:
                    a7:79:ac:13:a5:02:4f:f1:51:bf:40:a9:3b:0c:b4:
                    be:8e:f3:a1:3a:e0:50:cd:cb:cb:67:51:89:3c:17:
                    67:01:ca:b2:3d:b0:5d:5e:80:6f:38:4a:c5:17:9d:
                    3b:51:af:14:dd:0e:3d:c5:8e:75:d1:18:96:c5:c4:
                    98:a4:b8:f6:64:6a:82:23:da:1b:ac:51:4d:85:88:
                    be:9f:5b:81:51:b0:e1:62:9f:a7:ea:2c:ce:48:f8:
                    8c:e0:5c:f4:fc:ed:5e:55:01:c6:1c:be:34:94:52:
                    06:25:31:6d:63:a9:3d:ce:55:fd:fb:7f:61:4e:d1:
                    10:45:38:19:f8:9b:8a:ed:3c:53:5d:03:bb:5d:35:
                    31:8f:22:23:26:fd:a2:50:2e:6d:43:80:7f:fc:bd:
                    a3:3c:45:34:11:c1:68:9c:01:8f:cb:72:eb:91:65:
                    0a:30:8a:ee:84:78:20:0e:76:6e:6d:0d:ce:66:ef:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:BE:3D:18:49:5C:15:41:A2:BE:5F:81:90:CD:59:AC:CF:EF:B1
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:4c:eb:e7:8f:bc:f4:54:85:f9:cd:30:25:55:3f:a7:14:76:
         6e:77:b2:bb:89:d8:44:0a:a2:88:1e:5a:a8:a4:9f:62:f4:2b:
         bd:4a:0a:7d:ca:6b:19:5d:54:13:cd:78:a3:3d:9c:38:9f:e5:
         fa:63:cd:c6:cf:8f:35:5f:23:33:d5:a2:43:94:c4:51:bc:a7:
         a5:e4:4d:d3:60:2b:5e:13:51:e2:1f:ae:34:72:5d:25:c7:ed:
         f6:c2:97:0e:49:d7:11:1c:bb:bf:7b:50:d1:12:79:fb:6f:38:
         38:42:52:0a:f2:f1:d0:df:1f:67:93:3f:0e:7f:66:ad:f9:a5:
         c1:60:fc:67:19:f7:33:ac:f3:64:6f:89:da:d3:8b:e5:5e:44:
         7b:40:73:ad:37:e0:3f:e6:17:6a:b0:d9:93:f3:f9:3c:61:91:
         cf:ca:7e:45:f4:45:e9:cf:6d:10:26:9b:d9:9c:b6:b9:b4:10:
         0f:49:cf:60:4e:c1:b6:42:97:f2:7f:76:26:44:3d:fe:01:22:
         98:e9:8b:2c:98:06:8f:b0:e3:18:de:ef:a8:66:cf:c4:8c:ad:
         7c:c8:2d:60:cf:69:a2:e4:97:f1:45:28:1d:98:e1:02:7f:56:
         8b:c5:3b:3e:21:bb:96:36:3f:81:34:93:82:87:bc:88:e8:3c:
         96:10:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:53 2026 by rpki-client