Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          IF9Jec2C8TCtq9I0gSAlqiJb5xEYbi1H6UQ09ReHO0g=
Subject key identifier:   75:D4:B7:5D:E9:AB:4B:69:03:5A:0C:0F:81:F0:B4:21:19:2F:E5:81
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       01A1765E8D5BCF3524D0B6344872101AF114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          13E0
Signing time:             Mon 26 Oct 2026 04:01:10 +0000
Manifest this update:     Mon 26 Oct 2026 04:01:10 +0000
Manifest next update:     Tue 27 Oct 2026 04:01:10 +0000
Files and hashes:         1: CmrsrPb6iAu6J8WJDj3KPcIlOgU.roa (hash: eZdYiAaibE5dIm2uQh5fdEcIIZekoztygTTKjX+J1SM=)
                          2: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (hash: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw=)
                          3: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (hash: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8=)
                          4: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (hash: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM=)
                          5: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: HHkYeTr4YHWdqxiR06wjiPOPX6933Ekk3lPbPdnbbzY=)
                          6: vkSOzCbWxXVE1i3At-sNNCxqlkM.roa (hash: S9kOozaJr4eTIL0/lY0wRLTeBXqDXUPbwXx1kILAQxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:5e:8d:5b:cf:35:24:d0:b6:34:48:72:10:1a:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Oct 26 04:01:10 2026 GMT
            Not After : Oct 27 04:01:10 2026 GMT
        Subject: CN=75d4b75de9ab4b69035a0c0f81f0b421192fe581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:23:5b:1b:7e:c5:51:6b:77:b2:36:b6:93:
                    a4:5e:2f:d3:4d:6e:42:8f:93:d1:32:44:4a:29:42:
                    bb:fc:7d:51:a0:37:cf:0b:76:8b:0b:4a:cc:00:5b:
                    f3:42:ac:ce:78:ce:c5:71:55:01:20:63:72:54:48:
                    38:90:7c:ae:bc:38:72:37:18:eb:ed:3d:47:06:a5:
                    c3:c0:d2:dc:4a:fe:be:ac:b2:c3:8a:d4:71:13:50:
                    29:a4:54:1a:27:82:69:a1:9e:e8:4b:a6:a7:57:ad:
                    ed:f2:09:23:9c:07:7c:0e:ac:67:c1:66:58:f2:18:
                    b3:0a:d7:05:da:05:53:d8:b5:c5:c1:1e:08:64:7d:
                    0d:dd:44:27:d1:71:a8:2e:25:79:28:e2:61:15:17:
                    b1:6f:75:97:ec:54:93:e0:c1:1c:cf:e5:f2:f3:ac:
                    1d:78:81:6c:ea:81:e7:a7:5a:6b:e0:81:d4:6e:7d:
                    98:0f:74:f4:ad:95:12:a6:66:00:67:c4:41:c8:4a:
                    03:f8:43:90:30:0f:e5:e3:32:f3:f5:e6:44:b7:65:
                    49:2e:46:be:d9:f1:1c:5e:48:f9:6f:f5:0e:bb:fe:
                    9c:5b:7a:3a:56:4c:f0:11:9a:c6:75:ac:ae:88:2a:
                    05:bd:38:67:d4:12:cd:9b:48:ff:0f:d8:68:52:79:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:B7:5D:E9:AB:4B:69:03:5A:0C:0F:81:F0:B4:21:19:2F:E5:81
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:17:3b:34:e8:37:e2:fd:00:85:e8:83:20:7f:d4:cc:86:af:
         29:b9:18:e9:ec:e1:64:ef:f2:45:5d:2a:a8:83:d0:98:f3:13:
         cc:76:ff:58:5f:1d:a3:24:0c:16:ed:53:53:60:c7:26:14:ad:
         7e:1f:bc:f1:9b:35:f4:2c:23:c8:d3:cb:9c:37:6f:1d:cd:07:
         db:cf:d2:60:f7:eb:bb:43:6f:90:2a:85:aa:cb:84:20:e2:6e:
         39:43:ae:72:8d:e7:b2:c8:65:0a:2e:dd:71:4b:d3:68:49:86:
         8e:dd:ee:45:d2:dc:7f:7d:28:f7:bd:a6:20:b9:fc:f5:08:a3:
         ac:c6:54:b6:17:f2:c2:04:b2:23:b3:fd:a3:ac:27:18:d4:d3:
         8d:62:da:3b:17:f8:d4:40:e5:9f:86:b0:04:52:9a:72:ba:09:
         71:15:85:f8:2e:c7:40:1b:6b:98:6c:96:77:c8:dc:28:3f:b2:
         e0:f9:04:f5:90:a1:f7:80:d5:ae:9c:3b:8d:71:69:6e:35:77:
         eb:2f:d2:07:37:e8:07:b9:17:2b:02:7b:f8:39:59:9f:fe:8e:
         b5:a5:7e:ac:8d:05:45:a6:9e:1c:5e:01:16:93:4e:25:f4:dc:
         40:8a:32:5b:36:89:58:82:9f:d9:5e:fc:da:16:09:92:83:74:
         c8:0c:f1:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2Xo1bzzUk0LY0SHIQGvEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjYxMDI2MDQwMTEwWhcNMjYxMDI3MDQwMTEwWjAzMTEwLwYDVQQD
Eyg3NWQ0Yjc1ZGU5YWI0YjY5MDM1YTBjMGY4MWYwYjQyMTE5MmZlNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mEjWxt+xVFrd7I2tpOkXi/TTW5C
j5PRMkRKKUK7/H1RoDfPC3aLC0rMAFvzQqzOeM7FcVUBIGNyVEg4kHyuvDhyNxjr
7T1HBqXDwNLcSv6+rLLDitRxE1AppFQaJ4JpoZ7oS6anV63t8gkjnAd8DqxnwWZY
8hizCtcF2gVT2LXFwR4IZH0N3UQn0XGoLiV5KOJhFRexb3WX7FST4MEcz+Xy86wd
eIFs6oHnp1pr4IHUbn2YD3T0rZUSpmYAZ8RByEoD+EOQMA/l4zLz9eZEt2VJLka+
2fEcXkj5b/UOu/6cW3o6VkzwEZrGdayuiCoFvThn1BLNm0j/D9hoUnl+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXUt13pq0tpA1oMD4HwtCEZL+WBMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxc7NOg3
4v0AheiDIH/UzIavKbkY6ezhZO/yRV0qqIPQmPMTzHb/WF8doyQMFu1TU2DHJhSt
fh+88Zs19CwjyNPLnDdvHc0H28/SYPfru0NvkCqFqsuEIOJuOUOuco3nsshlCi7d
cUvTaEmGjt3uRdLcf30o972mILn89QijrMZUthfywgSyI7P9o6wnGNTTjWLaOxf4
1EDln4awBFKacroJcRWF+C7HQBtrmGyWd8jcKD+y4PkE9ZCh94DVrpw7jXFpbjV3
6y/SBzfoB7kXKwJ7+DlZn/6OtaV+rI0FRaaeHF4BFpNOJfTcQIoyWzaJWIKf2V78
2hYJkoN0yAzxkQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:26:52 2026 by rpki-client