Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          tW8Zji/MZsMiwJ4uhLw8b1gXk6ed2mBPOvSGjTBBsec=
Subject key identifier:   43:68:65:C6:20:8A:DA:3F:5C:F4:0B:28:BD:2A:6E:D8:A1:0A:9B:D6
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       019DA48AAE3AF67A2D03852AC1F65A258985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          11E5
Signing time:             Sun 19 Apr 2026 07:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:44 +0000
Files and hashes:         1: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (hash: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw=)
                          2: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (hash: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8=)
                          3: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (hash: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM=)
                          4: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: 6IZZ/ujXywvZM5SJ5Yquo5V6DGnVvQ7ZDrkKMMhFMKg=)
                          5: vkSOzCbWxXVE1i3At-sNNCxqlkM.roa (hash: S9kOozaJr4eTIL0/lY0wRLTeBXqDXUPbwXx1kILAQxw=)
                          6: zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa (hash: ORhfsYL2KXu+13H3lG8CeoaGQhHHQ9KlWSYICdYGKU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:ae:3a:f6:7a:2d:03:85:2a:c1:f6:5a:25:89:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Apr 19 07:00:44 2026 GMT
            Not After : Apr 20 07:00:44 2026 GMT
        Subject: CN=436865c6208ada3f5cf40b28bd2a6ed8a10a9bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:26:cc:f3:e3:df:87:a8:0f:0a:4b:3f:7f:
                    a9:9b:c9:08:b6:44:e1:e0:de:92:64:b9:40:65:78:
                    a7:f3:87:ac:09:b8:a7:e3:75:0a:2d:03:42:45:9d:
                    79:ea:2d:dd:44:3e:a4:6c:44:79:e3:9a:5e:12:f7:
                    46:ff:c1:6f:b0:1c:f4:7d:c9:4a:2a:7c:db:2d:41:
                    5e:c5:72:11:86:ca:06:7a:35:5f:eb:03:bb:f7:41:
                    af:2e:dd:b0:c3:78:d9:22:89:b9:f4:fd:c1:09:bc:
                    03:8c:9a:bb:d1:9c:6f:b1:af:db:a5:75:3a:37:f2:
                    0d:a2:12:63:b9:24:bf:71:ed:c0:77:71:b9:c8:35:
                    79:d8:12:0a:5e:3b:17:86:60:2b:ee:b1:13:36:18:
                    40:da:eb:e4:9a:33:0f:08:80:66:84:59:2e:c8:e1:
                    f3:a8:47:53:d0:45:86:82:79:b7:0f:72:1e:b4:70:
                    d6:66:a5:9e:e7:70:19:18:c3:6c:6b:6f:d6:82:db:
                    69:50:e1:09:a8:ac:ec:4a:9a:5a:e3:97:44:53:45:
                    18:b0:7a:88:8b:77:5e:99:27:7e:09:51:48:d5:88:
                    d3:8a:67:b5:e1:85:56:ca:e9:5e:86:15:e3:84:00:
                    cb:df:66:95:fc:90:6a:c1:a8:c3:da:29:ea:46:ef:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:65:C6:20:8A:DA:3F:5C:F4:0B:28:BD:2A:6E:D8:A1:0A:9B:D6
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:2a:1e:d5:9e:1a:b0:2e:95:5c:62:65:c6:f6:4e:9b:e0:
         1a:76:07:5b:4b:d0:11:50:25:28:f3:c1:6d:40:cf:c3:da:dc:
         db:e5:e9:d5:f3:c3:b9:df:d3:9c:eb:9b:14:80:c2:b1:5a:ba:
         e5:c7:f1:26:14:3d:72:a0:6b:8c:1f:65:b9:58:4d:27:61:ed:
         86:1c:62:21:07:01:32:dc:1b:a8:ad:b0:54:b8:3c:54:03:16:
         c6:ef:83:2c:95:30:5a:7c:e0:57:6e:cb:cd:2a:a3:0f:c6:96:
         86:6b:b7:97:1f:63:73:66:7a:8f:82:d0:57:50:53:b6:10:8e:
         5c:12:0d:92:6a:e1:7a:f4:f0:ae:e2:2b:c4:dc:d2:1f:97:dc:
         95:d0:15:e7:80:eb:cb:f3:99:96:b3:75:de:38:2f:19:8e:ef:
         ad:34:3e:8b:b0:13:82:57:64:1c:36:d8:97:b5:7b:09:ed:26:
         5d:88:5b:5b:4b:ae:51:5d:b0:01:ef:54:38:2c:c4:dc:82:18:
         d1:4a:b6:5b:bf:f7:3d:c5:85:2f:08:20:4d:72:5b:ec:b0:bd:
         97:cb:4e:88:54:b5:76:9d:41:56:26:e3:b5:bf:3d:ab:6b:8d:
         f6:2c:41:74:7e:33:2d:1f:dc:43:84:07:7e:0d:27:27:7c:87:
         7e:8f:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:41 2026 by rpki-client