Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          LHWv2pATPfOQ0THufhQ+ATqhL4x41RXfQAu7No++s9M=
Subject key identifier:   CC:97:94:DD:F6:7C:FC:85:06:FC:62:A9:36:4D:89:C9:AC:BE:F4:1F
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       0199FAD83563427041A888D785A2914D60C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0FFE
Signing time:             Sun 19 Oct 2025 05:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:37 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: 4fQdRC8TOIZiCrDOUd34NotPzFJq6EySu3ZEDpVs+LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:35:63:42:70:41:a8:88:d7:85:a2:91:4d:60:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Oct 19 05:01:37 2025 GMT
            Not After : Oct 20 05:01:37 2025 GMT
        Subject: CN=cc9794ddf67cfc8506fc62a9364d89c9acbef41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:9a:86:e3:1f:ab:3d:0f:9e:47:cb:03:46:
                    de:61:c5:ac:0b:fc:1c:65:d6:01:1c:af:c7:cd:27:
                    a2:00:94:fe:a8:b3:f6:1c:27:c1:b7:96:21:e2:26:
                    bc:94:41:64:3b:e7:b1:46:ed:9b:f8:3a:ae:a4:d6:
                    3f:53:02:62:38:a2:0c:ac:11:06:14:2f:0e:f1:19:
                    01:c4:b6:db:3c:41:18:ae:a9:f4:a3:df:09:14:1b:
                    2e:cd:0a:7e:45:81:62:1b:ba:31:e6:b4:f7:03:f7:
                    22:a4:e5:8a:04:1e:04:05:b9:6f:24:84:07:86:94:
                    4e:ba:2b:2e:66:b7:71:f3:09:af:b8:c5:78:01:d2:
                    60:81:80:72:1e:50:0e:8d:7d:20:92:8e:c6:53:f7:
                    db:d3:83:f7:9c:91:d4:32:c2:f7:3a:61:6e:1b:f1:
                    ca:53:5b:39:31:1f:96:21:c6:e6:bd:17:50:c9:e6:
                    f6:67:19:62:49:6c:30:00:ec:3d:2d:38:36:a4:a4:
                    91:92:9a:fa:4c:0a:39:bb:c0:6f:19:92:9e:6a:49:
                    0b:e5:4b:6f:53:01:b5:1d:f3:0b:56:08:a6:67:5c:
                    aa:57:3f:cb:43:32:a2:ba:40:17:f6:b1:f7:5f:99:
                    2e:2b:86:2a:ba:be:99:68:d3:78:61:57:b3:86:d7:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:94:DD:F6:7C:FC:85:06:FC:62:A9:36:4D:89:C9:AC:BE:F4:1F
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:72:6b:58:12:2c:46:7a:6d:34:70:07:1b:5b:4a:35:ec:
         aa:30:c6:c2:06:aa:5c:1d:c3:96:aa:2e:6a:b8:18:fe:f3:31:
         2e:e5:50:17:53:42:70:17:74:9d:48:52:75:4b:88:aa:37:f9:
         64:6a:39:87:68:76:a2:60:7a:de:2f:58:6c:df:27:ae:78:35:
         32:b1:a9:0b:f0:cd:4b:1e:68:8b:43:36:29:78:23:41:f6:a5:
         34:88:6a:79:5a:d9:06:24:7d:00:93:eb:69:21:e7:a8:aa:78:
         e2:fc:d3:95:b2:6c:db:45:f6:26:68:65:00:ad:19:87:65:ea:
         52:6f:fa:7b:c3:f9:5a:bf:0c:d7:ce:b8:21:b9:7f:7e:c5:b3:
         a0:a7:8e:c5:3d:af:f3:de:81:c7:55:9a:56:3f:41:db:79:3c:
         33:48:82:68:33:a0:d9:fc:8d:2c:46:69:d8:9d:44:4e:79:a8:
         04:2e:8f:86:3f:e8:75:fa:11:c1:7f:5f:98:dc:77:95:ae:f7:
         5e:b9:a1:d5:5b:cc:3d:58:4c:63:fc:9f:05:7a:ef:06:b4:68:
         0a:06:3c:55:91:f4:de:fb:e9:48:b9:16:ab:89:42:37:fc:e1:
         6b:93:be:3a:cf:0b:d8:c2:bd:75:19:36:c3:f9:15:10:4a:91:
         c1:54:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:24 2025 by rpki-client