Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          61ZfIDUgQekLQk8FlUcHbMrN97+w/q+WetbbL4a7HMQ=
Subject key identifier:   58:1A:F8:18:29:FD:3C:44:B8:CF:14:BC:08:D0:44:B4:78:84:E9:23
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       019FA8D0906C3EAF83640D9B29A88B92F43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          12F1
Signing time:             Tue 28 Jul 2026 13:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:08 +0000
Files and hashes:         1: CmrsrPb6iAu6J8WJDj3KPcIlOgU.roa (hash: eZdYiAaibE5dIm2uQh5fdEcIIZekoztygTTKjX+J1SM=)
                          2: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (hash: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw=)
                          3: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (hash: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8=)
                          4: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (hash: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM=)
                          5: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: hDMATqtPliCSPkrA9f40YR1xVB0MXWWSPPtV9niNTqE=)
                          6: vkSOzCbWxXVE1i3At-sNNCxqlkM.roa (hash: S9kOozaJr4eTIL0/lY0wRLTeBXqDXUPbwXx1kILAQxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:90:6c:3e:af:83:64:0d:9b:29:a8:8b:92:f4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jul 28 13:01:08 2026 GMT
            Not After : Jul 29 13:01:08 2026 GMT
        Subject: CN=581af81829fd3c44b8cf14bc08d044b47884e923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:b5:35:b5:ec:aa:6d:57:f6:cb:11:f3:8b:
                    e4:f4:61:95:61:d9:3a:1a:eb:df:d5:bd:c0:d6:71:
                    4c:c7:32:0f:12:5c:f0:d5:b7:61:03:6e:53:e6:9d:
                    4c:e6:24:e0:d3:6f:a3:a0:c8:40:88:fe:b8:6f:93:
                    8d:d6:8b:d2:8c:ec:6c:91:87:4a:9f:7f:37:0f:8f:
                    da:9d:15:9c:ab:00:49:bc:19:0d:6c:16:ce:d2:57:
                    a8:79:3f:ab:21:d7:63:b3:06:67:d9:c1:79:2f:26:
                    ac:c6:a9:75:cc:39:7f:a6:84:17:dd:08:1f:84:d0:
                    70:9c:86:a0:0d:3a:b5:d3:cd:78:c8:31:b0:85:03:
                    d7:2d:a5:74:41:83:4f:cd:82:ac:57:02:21:7f:eb:
                    3e:d6:75:f8:e1:1f:e3:ee:bf:1d:43:c6:be:12:4b:
                    68:00:c1:15:9b:c9:48:06:11:cc:34:38:7f:d5:8c:
                    c7:1b:84:44:b4:7f:10:87:5e:08:bc:80:17:44:6a:
                    6f:dc:fd:c4:bc:91:f1:9c:bb:0d:c4:b9:db:43:e2:
                    9e:e5:9c:9d:5d:05:da:81:65:00:cc:e0:88:40:1c:
                    2c:eb:62:37:b4:89:3e:a8:8e:61:51:be:3f:34:a4:
                    86:c1:24:41:22:34:df:3f:64:60:be:18:5f:56:9c:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:F8:18:29:FD:3C:44:B8:CF:14:BC:08:D0:44:B4:78:84:E9:23
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:f6:8c:05:4f:9d:0d:7d:11:2a:16:1a:1d:96:e2:9b:93:
         72:7a:93:29:bf:df:9b:2f:35:8f:9a:64:f9:49:b2:b1:e5:2e:
         81:70:c8:b6:f3:e9:92:7d:8f:10:7f:af:ff:bb:bc:ef:d3:d1:
         80:d8:48:69:c8:58:ac:ec:d2:8b:ff:2d:54:f3:84:c6:a5:9e:
         43:15:c7:43:e5:bc:d5:80:31:58:f0:b0:5a:54:a1:8b:ab:76:
         73:a0:a7:51:91:23:df:34:5f:88:58:df:89:06:e8:ea:48:7b:
         b4:e7:c3:7a:9b:31:5f:18:b3:43:ce:34:19:07:a1:cc:41:c7:
         84:0d:75:a6:1c:8f:e5:ca:01:4e:d9:2d:89:09:85:5a:a3:52:
         f9:ad:b1:1e:81:1b:6d:a6:a3:15:1c:4b:01:53:d9:d4:98:26:
         7b:50:f3:7d:f2:7a:29:1b:ba:e8:89:7a:35:36:56:93:fe:26:
         45:cc:73:d6:f6:a7:d4:3b:83:88:3b:93:09:84:24:55:67:d2:
         90:f0:cd:4d:d9:f3:e6:40:d5:3e:7f:dc:7f:66:36:c1:24:a5:
         dc:5c:dd:ef:ae:22:8d:79:f7:77:a7:b9:20:b9:b6:5c:f3:a1:
         69:7b:ec:03:0b:e2:38:0b:dd:05:0d:d9:c9:8f:f3:dc:ad:8f:
         68:31:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:32 2026 by rpki-client