Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          nspBs2uo1rOn4nWPU67A+LkgcyLhCXMUHMaWRxDNEY4=
Subject key identifier:   A3:B2:43:CB:D8:E7:E1:C1:21:D7:A6:65:AD:84:61:E8:19:47:67:6D
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       0198277EACCCBEC1A86D4D814782149103A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0F0C
Signing time:             Sun 20 Jul 2025 11:01:09 +0000
Manifest this update:     Sun 20 Jul 2025 11:01:09 +0000
Manifest next update:     Mon 21 Jul 2025 11:01:09 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: 5yZ9+cih1IfVTilkatDOATufAd6DZTcr48tylgCEHqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:ac:cc:be:c1:a8:6d:4d:81:47:82:14:91:03:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jul 20 11:01:09 2025 GMT
            Not After : Jul 21 11:01:09 2025 GMT
        Subject: CN=a3b243cbd8e7e1c121d7a665ad8461e81947676d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:fc:2d:ee:b6:e1:88:53:29:51:9c:14:5e:
                    0d:43:ee:f6:f8:e9:e0:c4:fa:55:62:cb:9b:36:fe:
                    7d:09:ef:56:2b:0e:a3:f5:91:1d:a8:cb:fe:bd:fd:
                    cb:da:37:cb:03:f6:c9:cf:58:db:8a:81:81:5c:56:
                    bc:cf:f0:ab:47:4e:0b:f1:ae:24:f1:ba:21:89:89:
                    25:a9:0e:a1:cf:b9:63:83:30:8e:ce:33:9b:8d:bf:
                    0f:47:f0:c8:4f:b2:02:bf:f8:90:62:17:51:4d:40:
                    ba:30:cc:14:99:f3:82:90:6e:6a:0f:9d:68:ae:39:
                    48:a5:9b:d1:09:ee:61:1d:2c:a6:e8:4b:f0:a5:ea:
                    3e:bc:1f:ea:dd:14:72:29:be:83:92:14:29:0e:14:
                    9d:f0:d3:78:6a:fc:cd:14:30:9a:18:b1:e7:ac:dc:
                    b9:b1:c4:c8:ae:ff:0b:1b:6b:e2:7f:cb:16:88:9a:
                    4b:5d:c3:7c:ec:2c:c9:2b:1a:78:96:2d:a1:50:28:
                    db:27:f6:77:67:95:e9:0c:9d:03:96:06:27:19:4d:
                    92:e7:2a:6c:ae:8e:42:65:7a:76:af:90:70:8f:9e:
                    aa:02:18:aa:5b:ef:83:35:f1:96:f0:c3:fd:3d:87:
                    a7:6c:2f:62:fd:e0:b1:15:b7:3b:bd:96:5a:05:9b:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:43:CB:D8:E7:E1:C1:21:D7:A6:65:AD:84:61:E8:19:47:67:6D
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:57:8d:7a:f7:68:da:0a:9c:01:d4:39:d1:98:20:83:52:
         39:17:19:db:38:bb:94:35:e8:48:a3:eb:f5:73:e2:ee:bd:0f:
         dc:3b:1a:6a:56:13:d8:af:ff:c3:cf:de:c7:09:be:7d:77:31:
         10:16:96:34:e2:41:51:ac:fb:82:a8:ee:99:ec:d9:ef:38:9d:
         0b:ff:fc:9b:23:5b:b0:a8:96:96:e9:f3:01:6c:d5:ea:92:c3:
         35:28:66:b5:fb:16:dc:63:30:87:0f:00:c4:a1:2b:6e:dc:80:
         fa:22:eb:8b:6f:01:51:7e:e1:64:fe:04:20:53:d4:fa:83:27:
         43:7f:6e:3a:6c:1b:ba:db:ed:37:5f:39:07:c2:73:08:2c:6a:
         14:4e:4d:c2:74:ea:63:a1:9f:96:f9:b8:aa:4b:4b:71:e5:11:
         ae:e6:08:5d:48:c5:02:82:c7:c2:21:c8:54:cd:3c:b1:bf:d9:
         d0:cb:cd:4a:64:4d:0e:24:fb:16:03:0e:f7:41:55:bb:b8:a2:
         ff:0f:27:75:8f:87:72:d9:a0:f0:94:03:ae:92:4d:59:75:dd:
         2f:e7:b5:c7:00:c5:a0:48:7b:27:d8:c6:cd:d6:18:57:8a:75:
         c4:7e:73:38:b1:ba:6b:cc:39:72:b7:7b:0a:80:e9:e7:df:ed:
         f1:eb:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:46 2025 by rpki-client