Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          Fx9kEa6d/3Dse+oXD0B+QJ9nZUUkpWfc3Nb9R7uv//M=
Subject key identifier:   9A:61:EF:06:E8:82:74:9F:DB:24:D2:5C:2E:23:3B:3A:22:03:B8:8B
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       019A19BD749A01BD72F1AF1E4283CAA4FAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          100E
Signing time:             Sat 25 Oct 2025 05:00:37 +0000
Manifest this update:     Sat 25 Oct 2025 05:00:37 +0000
Manifest next update:     Sun 26 Oct 2025 05:00:37 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: 1pcLvsZSqq6j3KCaUmoD7m11MsqsQXS/clsPaFkgNOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:bd:74:9a:01:bd:72:f1:af:1e:42:83:ca:a4:fa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Oct 25 05:00:37 2025 GMT
            Not After : Oct 26 05:00:37 2025 GMT
        Subject: CN=9a61ef06e882749fdb24d25c2e233b3a2203b88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:84:f5:b6:86:7b:05:6f:34:e3:e9:a3:0c:
                    b5:76:69:32:3a:fa:49:4b:6c:b0:92:ff:2f:da:26:
                    4b:12:6c:40:bf:1e:0c:b1:13:e6:dc:f6:2b:44:40:
                    36:6d:82:20:38:6d:ab:37:2c:85:06:5e:33:9c:a7:
                    66:a5:53:67:90:46:87:01:13:da:4a:c2:a0:bb:16:
                    54:44:4e:4f:0f:97:01:0e:51:0f:9f:3f:de:92:d7:
                    dc:66:74:e9:5c:08:ae:9c:e0:65:41:76:0c:ed:0e:
                    2c:f1:79:14:eb:af:c3:1b:b0:7c:6e:5a:5f:1e:60:
                    10:7f:91:30:06:4a:ee:8d:12:b9:9b:96:d7:bf:64:
                    6c:19:1e:58:e7:03:99:8a:7a:c9:9a:fc:5d:a4:5a:
                    d8:6c:85:57:57:ec:2d:f3:a2:e1:7d:c7:3f:15:9c:
                    a3:49:0a:43:45:cd:ac:b3:51:3a:81:6f:d7:89:8a:
                    74:0c:d5:3f:6b:c3:92:ff:6a:51:50:ad:aa:c5:20:
                    4c:7e:e7:fa:51:c0:61:1b:6c:76:b6:fd:df:22:2a:
                    60:0b:9a:e0:90:09:02:f6:24:bc:e0:dc:5e:70:c0:
                    82:8c:68:11:6e:fc:cb:ee:a6:90:70:5f:ee:87:2d:
                    df:3f:f9:6a:0e:90:c5:99:bb:06:ae:aa:40:aa:2e:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:EF:06:E8:82:74:9F:DB:24:D2:5C:2E:23:3B:3A:22:03:B8:8B
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:22:37:e6:a3:46:1d:7c:48:3e:d7:5e:7b:aa:11:00:73:96:
         00:59:48:ca:b6:66:b8:5c:29:21:c3:72:4c:03:90:25:ef:6a:
         5b:48:87:f8:17:3b:e4:37:37:39:c8:13:6f:03:36:fa:82:a0:
         cd:b4:c0:5f:f9:50:58:85:bb:20:3c:a6:93:39:1b:ff:70:b8:
         1c:59:9a:3b:05:ed:ef:f8:51:e2:53:83:0e:60:01:8e:e1:b3:
         c4:1c:09:89:e4:29:cf:12:77:be:7b:b2:c8:d9:c6:3b:9e:af:
         72:95:4b:6d:36:4e:a7:3c:39:89:45:41:81:03:8a:0b:72:c7:
         c3:14:e0:5d:74:3b:46:ea:75:87:ae:06:ea:47:58:2b:ce:61:
         b7:c5:5d:bf:ae:9e:cb:2b:21:09:70:6a:7b:ab:88:da:e5:94:
         04:c1:59:0e:6a:d9:eb:af:8e:19:76:27:1f:4b:82:4f:53:5b:
         e6:38:ef:83:43:b4:6d:06:78:ed:b7:c2:b3:6c:7f:2e:1a:8d:
         91:cb:45:a1:aa:47:cc:6c:03:6d:10:69:dd:db:0b:96:4d:97:
         f1:d1:2c:b8:c6:67:54:6a:57:4f:38:02:09:b0:75:c6:a8:66:
         27:e0:f8:b9:b1:e6:cc:6d:91:79:6d:1c:85:d2:b0:a1:55:c0:
         f8:f5:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:18:20 2025 by rpki-client