Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          o1zpT8wSFYjSQndA626qyAYteMqU99kJD7IhNp2DKOU=
Subject key identifier:   0B:16:54:E6:E9:15:10:F4:DC:BF:1E:8B:7F:29:1B:D5:EF:45:FE:09
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       01A0C0D58A8420024FB8D9D7402B5C5D7D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          1382
Signing time:             Sun 20 Sep 2026 22:00:15 +0000
Manifest this update:     Sun 20 Sep 2026 22:00:15 +0000
Manifest next update:     Mon 21 Sep 2026 22:00:15 +0000
Files and hashes:         1: CmrsrPb6iAu6J8WJDj3KPcIlOgU.roa (hash: eZdYiAaibE5dIm2uQh5fdEcIIZekoztygTTKjX+J1SM=)
                          2: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (hash: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw=)
                          3: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (hash: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8=)
                          4: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (hash: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM=)
                          5: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: NJnMidGeO3LoHAjvlJTi759ziaDArAaxdvOQjLI9gC0=)
                          6: vkSOzCbWxXVE1i3At-sNNCxqlkM.roa (hash: S9kOozaJr4eTIL0/lY0wRLTeBXqDXUPbwXx1kILAQxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:d5:8a:84:20:02:4f:b8:d9:d7:40:2b:5c:5d:7d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Sep 20 22:00:15 2026 GMT
            Not After : Sep 21 22:00:15 2026 GMT
        Subject: CN=0b1654e6e91510f4dcbf1e8b7f291bd5ef45fe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:8f:49:e5:91:ee:ef:6c:6c:fb:76:30:66:
                    9b:c7:22:7a:98:b0:e1:26:f5:3d:a5:ba:bd:06:85:
                    2e:91:b4:f8:4e:f6:b8:b2:08:e8:fc:5f:79:3e:f3:
                    aa:e2:6f:47:ab:e7:10:52:7b:94:e7:17:f6:b2:28:
                    ce:a5:d0:a0:ad:53:29:0c:7c:37:24:f8:1e:e9:73:
                    93:db:59:e4:aa:bc:b3:b8:6a:ea:2f:d9:09:0e:e3:
                    26:73:70:56:23:5b:da:da:dc:20:72:08:12:f2:87:
                    92:d6:7a:82:1b:d6:61:7f:3c:9c:19:e0:50:38:98:
                    08:b6:81:88:46:9e:b2:ab:34:2d:ad:ce:13:0f:1b:
                    51:58:a9:8d:2e:e9:c2:34:24:71:6e:a2:26:7e:75:
                    b2:7c:46:60:4f:4c:de:06:ce:6b:1a:04:eb:65:3b:
                    91:10:73:32:c3:ec:5a:31:86:3d:4b:a4:47:75:ff:
                    3b:4b:f2:c5:f9:a8:4d:9e:a0:26:83:15:2c:8f:45:
                    bd:18:a5:76:f7:4a:4e:3f:06:b5:80:6e:dd:55:fe:
                    c3:a0:36:e6:52:01:19:e4:be:a0:a7:bc:7f:ae:51:
                    b2:36:39:66:7c:09:c5:6f:dc:d3:58:ac:53:03:5b:
                    57:bc:24:d0:03:d2:a4:be:f6:a6:52:fa:b7:ae:3c:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:16:54:E6:E9:15:10:F4:DC:BF:1E:8B:7F:29:1B:D5:EF:45:FE:09
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:f8:aa:e5:57:35:15:72:7f:1a:89:fa:25:a2:2f:74:4e:
         2e:c1:77:41:6d:5b:7a:53:51:3b:d1:ea:8e:e9:c6:a2:a1:df:
         da:61:90:0e:8a:d5:d9:b9:1b:00:83:86:31:9b:61:97:24:55:
         ee:d3:5a:91:d8:11:13:29:c5:f5:48:44:fe:b7:b4:93:8a:34:
         a3:75:e6:af:75:47:29:4e:a6:75:59:58:14:64:26:45:8f:a2:
         eb:21:6c:c0:a8:20:a9:1d:81:88:db:b6:7f:a1:e4:d0:33:2c:
         0d:36:5a:60:c8:01:6a:2a:21:bb:2b:08:1a:0b:cf:3d:b1:2e:
         79:01:68:e0:c0:c3:47:4a:fb:5c:07:a1:ad:f8:03:f1:ef:16:
         0b:f5:8a:81:e1:b4:21:ea:b3:b8:20:8a:05:bd:88:46:f2:0b:
         53:a6:53:ee:34:87:3c:3f:10:9a:d5:34:2a:5b:7f:3b:fb:02:
         2a:b7:c7:f7:a6:1c:66:4e:f0:6b:e8:8e:b1:ec:bc:73:33:93:
         c5:97:16:f9:f9:a4:62:30:48:06:92:f6:a2:57:1c:0c:e2:ba:
         1d:c1:00:eb:3b:2c:f9:eb:7f:ed:36:ab:cd:72:ad:48:d7:57:
         ad:55:44:74:f2:fb:b7:a1:be:98:e1:e6:54:37:e6:10:7e:96:
         ec:0c:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:32:14 2026 by rpki-client