Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          o8VRxl+m24W+JRb2gD5+9hd2VyOgk1O+9VJ1Sf/FExg=
Subject key identifier:   D6:28:C2:BD:2C:E6:FF:40:20:35:0D:EC:EF:13:66:4F:60:D7:1B:36
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       019872CFC43F89BD69113CCC77CACB82B5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0F33
Signing time:             Mon 04 Aug 2025 02:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:15 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: se4kgZC2D4kzO+A62yScaeGhtgcijOKYyj8cHQOTXs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:c4:3f:89:bd:69:11:3c:cc:77:ca:cb:82:b5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Aug  4 02:01:15 2025 GMT
            Not After : Aug  5 02:01:15 2025 GMT
        Subject: CN=d628c2bd2ce6ff4020350decef13664f60d71b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:86:4f:f3:6c:cf:19:fa:17:13:02:06:07:
                    de:69:85:3d:b3:4c:94:21:b5:62:9b:c0:25:5c:11:
                    67:c2:0c:52:63:1e:22:9d:b7:d1:ea:cd:20:e9:7e:
                    56:ee:ed:0d:0e:27:7a:cf:4f:64:03:7b:3b:eb:06:
                    bb:1b:f8:48:57:17:68:52:5f:ae:77:65:75:36:dd:
                    ec:65:7d:6c:e0:0e:26:36:0d:f6:2d:b0:2b:5e:80:
                    a6:76:86:ee:fa:8d:2b:61:36:40:56:16:4b:d8:ed:
                    81:01:b9:32:63:2b:3e:a1:11:0a:41:fb:c5:83:58:
                    d6:4e:03:88:0e:2f:5b:8b:6e:86:a6:78:24:e2:d9:
                    f4:50:01:2c:a2:ca:de:58:2b:6a:fd:77:b4:61:c9:
                    23:66:76:9a:59:fd:b6:c9:66:36:35:6b:84:30:95:
                    a5:59:d0:09:09:49:8c:1e:f2:0d:91:bf:3f:bc:11:
                    c7:d7:a2:db:f1:5b:82:17:17:be:b8:bb:c9:73:9f:
                    15:86:b9:b3:fd:b1:af:50:1e:9b:92:47:07:5a:a7:
                    02:b9:1e:de:79:1d:8d:a3:26:96:12:c7:69:56:0c:
                    a5:7e:0e:3a:d5:b4:21:42:7e:ef:4f:bc:1c:d9:9e:
                    ec:a1:31:2c:1a:33:5d:3d:44:e6:88:3f:4e:4f:e0:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:C2:BD:2C:E6:FF:40:20:35:0D:EC:EF:13:66:4F:60:D7:1B:36
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:1c:b4:58:dd:b9:fa:4c:f8:d9:19:08:1a:46:c5:c8:31:
         fb:e0:fb:a7:cc:ba:e1:3d:47:ac:cf:46:7f:56:19:99:31:64:
         ed:2a:a9:6d:1f:01:94:b6:8c:ea:3e:af:f7:90:9f:0f:3d:64:
         f4:24:21:af:ba:b2:77:be:9e:ed:4f:96:fc:ba:db:bf:96:a8:
         59:d9:9d:b2:a6:ae:8b:eb:3b:02:2d:cc:82:50:eb:bf:30:2b:
         94:83:16:ef:f7:b8:1e:e8:7f:6d:d4:07:0b:f1:a2:0b:b8:48:
         a8:71:ab:56:d9:6f:0c:3c:e7:59:97:9a:97:62:0d:13:df:90:
         98:4f:e9:21:c6:ee:a5:33:02:e6:20:32:91:08:0e:2a:25:45:
         2a:7d:ca:e1:3a:8f:4b:db:1e:59:65:86:99:77:20:63:1f:5f:
         80:5d:77:1e:cb:ff:9c:6b:25:4d:39:e2:f6:ca:83:3a:13:f5:
         9b:b7:86:2b:55:17:08:b7:d1:09:e5:d7:2b:c7:b0:09:8a:1a:
         f6:06:1e:cd:4e:d9:e4:f1:36:18:c0:5e:eb:d5:18:f8:48:a3:
         54:0e:9e:34:b2:b7:2a:39:2b:bf:51:3f:b4:a9:3c:5c:0f:9d:
         b8:52:ff:fc:9b:1f:ee:61:fc:6d:89:03:f6:f0:24:00:aa:84:
         a5:1b:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:56 2025 by rpki-client