Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          1U01nKSIoBpaLoJjgHLlXQhygYq5/r5wkZcUfQ77I+w=
Subject key identifier:   A6:B3:14:CE:9E:4F:C4:37:D7:8F:DB:BF:4F:B8:4E:6C:A6:8F:F4:E9
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       0196A3532FDD6EA1CF86FEAA7C54AB38CF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0E43
Signing time:             Tue 06 May 2025 02:00:59 +0000
Manifest this update:     Tue 06 May 2025 02:00:59 +0000
Manifest next update:     Wed 07 May 2025 02:00:59 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: cI9Uzzb5DH5NNp4BZPJpetOgbUJY88qqS419gvORdvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:2f:dd:6e:a1:cf:86:fe:aa:7c:54:ab:38:cf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: May  6 02:00:59 2025 GMT
            Not After : May  7 02:00:59 2025 GMT
        Subject: CN=a6b314ce9e4fc437d78fdbbf4fb84e6ca68ff4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:f8:8c:24:f5:95:43:03:25:71:75:4c:4c:
                    6f:cd:47:99:35:0c:29:32:0e:65:bf:37:24:b6:9c:
                    de:30:38:b5:5f:f3:77:b6:12:d0:41:7f:80:97:2e:
                    7b:b1:ed:e8:5f:2b:42:08:3e:af:dc:19:83:e8:7f:
                    c1:3c:d7:4f:9a:a1:1e:d9:9b:a5:68:f6:2b:7f:6f:
                    b7:14:c4:2e:fc:b3:85:f6:0c:94:64:ea:95:07:8c:
                    8a:89:fc:36:ee:74:fc:8f:e7:cd:be:92:90:ec:32:
                    bf:a7:a5:06:14:ac:03:9e:4d:9d:1f:23:f4:54:57:
                    b5:1c:c7:14:28:e6:52:ed:10:68:77:82:25:ab:98:
                    13:c5:54:09:c0:c1:60:2a:7e:99:89:a5:18:47:73:
                    91:64:dc:0c:85:d5:52:43:0a:85:5e:66:dc:b3:bd:
                    dc:3a:56:ad:dc:f6:2a:03:aa:e2:c4:fc:6f:43:ef:
                    75:d2:6c:b3:f5:c8:ea:cf:95:f3:12:e8:1e:d7:fd:
                    7e:83:d7:ac:6a:f6:32:0f:f4:0d:84:f1:aa:18:a3:
                    60:56:0f:00:68:09:5c:b7:8f:b5:d7:31:89:50:97:
                    3a:21:1a:4f:b9:89:ea:54:bc:51:ef:af:66:31:7e:
                    f8:f9:17:01:fb:2c:07:23:e7:96:0c:b1:53:63:0f:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:14:CE:9E:4F:C4:37:D7:8F:DB:BF:4F:B8:4E:6C:A6:8F:F4:E9
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:3a:59:b2:0b:3e:0f:e1:2c:d1:37:23:27:09:ad:5d:8f:
         f0:ff:71:96:80:80:35:b7:64:61:a8:70:d9:24:dc:b2:58:27:
         95:78:3f:f2:d2:6e:78:67:15:5e:ab:a7:0f:13:b7:6d:5d:f4:
         d9:65:8f:9b:e9:78:a1:26:a8:f1:ae:1b:f3:3d:6d:85:c7:42:
         50:f0:7f:d9:22:dc:e9:6a:ab:2c:80:7d:ed:f3:68:a0:56:3b:
         c6:62:c8:1f:11:a0:75:ce:5f:57:a7:17:ec:0c:f9:d3:5b:0a:
         e3:50:bd:c6:f3:93:bb:8f:0a:03:50:76:43:5c:1f:b6:33:b1:
         80:5e:c0:de:4f:a1:a5:9f:f4:cd:3d:df:7d:51:8e:f5:94:b1:
         5e:2a:54:82:1d:97:9a:f3:23:38:e4:46:d8:eb:c6:ed:e3:f0:
         cc:75:eb:48:88:b5:ec:f5:50:c9:61:30:89:a6:40:78:c3:93:
         0e:d5:a4:fe:17:4a:0b:44:30:09:1c:aa:5f:4c:c8:e6:f8:24:
         8e:79:50:48:c9:14:ca:ef:d5:b8:18:72:2d:8e:ad:23:20:eb:
         55:96:57:53:ab:b7:b3:e8:44:04:17:33:2f:7a:8c:19:34:f2:
         6c:03:1a:56:96:a0:47:05:2f:71:e3:17:0e:48:38:c5:5b:9f:
         94:39:b5:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajUy/dbqHPhv6qfFSrOM9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjUwNTA2MDIwMDU5WhcNMjUwNTA3MDIwMDU5WjAzMTEwLwYDVQQD
EyhhNmIzMTRjZTllNGZjNDM3ZDc4ZmRiYmY0ZmI4NGU2Y2E2OGZmNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBj4jCT1lUMDJXF1TExvzUeZNQwp
Mg5lvzcktpzeMDi1X/N3thLQQX+Aly57se3oXytCCD6v3BmD6H/BPNdPmqEe2Zul
aPYrf2+3FMQu/LOF9gyUZOqVB4yKifw27nT8j+fNvpKQ7DK/p6UGFKwDnk2dHyP0
VFe1HMcUKOZS7RBod4Ilq5gTxVQJwMFgKn6ZiaUYR3ORZNwMhdVSQwqFXmbcs73c
Olat3PYqA6rixPxvQ+910myz9cjqz5XzEuge1/1+g9esavYyD/QNhPGqGKNgVg8A
aAlct4+11zGJUJc6IRpPuYnqVLxR769mMX74+RcB+ywHI+eWDLFTYw/YmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKazFM6eT8Q314/bv0+4Tmymj/TpMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBw6WbIL
Pg/hLNE3IycJrV2P8P9xloCANbdkYahw2STcslgnlXg/8tJueGcVXqunDxO3bV30
2WWPm+l4oSao8a4b8z1thcdCUPB/2SLc6WqrLIB97fNooFY7xmLIHxGgdc5fV6cX
7Az501sK41C9xvOTu48KA1B2Q1wftjOxgF7A3k+hpZ/0zT3ffVGO9ZSxXipUgh2X
mvMjOORG2OvG7ePwzHXrSIi17PVQyWEwiaZAeMOTDtWk/hdKC0QwCRyqX0zI5vgk
jnlQSMkUyu/VuBhyLY6tIyDrVZZXU6u3s+hEBBczL3qMGTTybAMaVpagRwUvceMX
Dkg4xVuflDm1hg==
-----END CERTIFICATE-----
Generated at Tue May 6 07:22:00 2025 by rpki-client