Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          Oxf5askmfaUl2iUzHFde7nCjjnpLkCsmy5kKzfqKeyQ=
Subject key identifier:   3D:E7:EA:0F:74:45:FE:BA:AB:E5:12:73:42:A3:5C:F1:8C:37:CC:F1
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       01983539BCFBC6D2C2B444842E273F445F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1625
Signing time:             Wed 23 Jul 2025 03:00:33 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:33 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:33 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 0vPb8eg7-97nmP3k5wtQlDzNgfk.roa (hash: 2Dv3tIonYRqaIvYSQqIdq15wSa3EWj4oRUIn6ZqbqRM=)
                          4: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          5: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          6: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          7: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          8: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          9: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          10: 6xosF9Z4lTqamX7SY9BrDsf4yuY.roa (hash: upmPss51e6BH69TQS41N9IhTplp6OirUUdWKGfGrFlc=)
                          11: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          12: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          13: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          14: BaaDmaPl0eSa2fQRay2Gu-qwCW8.roa (hash: LL9KxES/MWnuM1OC4cAjz4vUD6cc9GLUb0KjIn7y6C4=)
                          15: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          16: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          17: K6yZ47047hF0NwFQI7xiX1bObME.roa (hash: b/I7AMY4ip5rwAIqGPd13gBwMCp1guYxQ+s4M8Er1LU=)
                          18: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          19: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          20: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          21: T3qIKwMZ3nfLIfch_dy2fZSjQaY.roa (hash: 6HN6rywRWQ7fJbbHh/llhTU7kBXwaGTnXKxLYyZbPG0=)
                          22: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: uGpRPKS/2iNfbZdBN5BH7MTngqkhCMSmLz8ovWWYRuA=)
                          23: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          24: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          25: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          26: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          27: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          28: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          29: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          30: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          31: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          32: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          33: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          34: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          35: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          36: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          37: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          38: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          39: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:39:bc:fb:c6:d2:c2:b4:44:84:2e:27:3f:44:5f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Jul 23 03:00:33 2025 GMT
            Not After : Jul 24 03:00:33 2025 GMT
        Subject: CN=3de7ea0f7445febaabe5127342a35cf18c37ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:b3:9d:f8:8e:0b:a1:08:f0:4e:74:63:2f:
                    a4:fb:ba:37:f4:75:0d:45:a6:4b:72:74:fb:5c:8b:
                    6f:52:79:64:49:d0:b1:47:b1:3e:cc:1a:dd:13:cc:
                    b0:89:e3:75:ce:f9:32:01:32:60:64:c9:ea:dc:66:
                    7e:e2:3c:63:6f:c7:66:31:ec:7f:91:9e:20:56:8c:
                    24:68:73:60:e4:0e:68:d4:d0:9a:68:29:62:73:c3:
                    f0:22:93:e5:1f:e0:53:2f:89:81:94:38:18:e4:a8:
                    1e:46:ce:9d:7f:28:a8:3f:77:e6:6e:e2:0e:2b:6a:
                    fa:cf:ae:b6:ca:84:b4:53:e1:06:38:24:11:92:78:
                    b3:75:91:59:e6:f7:14:e4:2d:d9:7f:16:f9:47:ab:
                    7c:1b:30:db:d9:0e:e5:73:7f:e9:78:31:39:fb:1d:
                    08:84:fc:02:ac:4c:cc:81:f3:22:5f:fe:7f:25:a4:
                    0b:47:c8:98:7b:1d:2e:8a:7f:90:01:ef:ba:bd:88:
                    a8:c8:a9:7b:b5:a5:3d:d2:c9:3f:4a:4d:a1:9a:31:
                    8a:7a:d1:3e:e8:66:84:20:8d:50:79:3a:25:86:59:
                    63:2b:41:ab:6d:3c:70:a8:5e:be:6c:4a:d8:62:fc:
                    83:7f:7d:1c:be:ef:d6:13:f0:56:fb:cf:77:2a:80:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:EA:0F:74:45:FE:BA:AB:E5:12:73:42:A3:5C:F1:8C:37:CC:F1
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:af:a2:57:b0:5f:76:03:f2:5f:2d:bb:5e:21:d4:fa:ea:
         28:31:bb:34:f4:a2:4e:ca:34:a5:82:87:71:d9:32:c5:d5:7d:
         1e:8a:57:30:43:99:6f:47:de:9d:30:0c:84:cc:40:7a:1d:62:
         21:77:90:48:ac:f8:20:a8:fa:72:8e:ed:88:62:66:bd:e5:c5:
         1b:fe:8e:99:d8:7e:b5:75:70:45:15:db:5a:36:d5:ea:d0:eb:
         d5:0f:de:dd:41:84:b5:31:e4:cb:f5:a8:bb:93:0f:24:47:d7:
         49:2c:42:d2:25:fb:c1:17:bd:a3:0c:bb:23:22:7d:ab:a5:f5:
         61:2a:67:c4:c1:79:48:e5:28:67:22:32:35:b5:67:02:da:b7:
         06:68:11:3e:8e:3a:ed:cd:83:26:85:13:6a:c4:34:a2:b0:bb:
         5f:cd:e1:af:c0:99:14:98:9b:ae:3b:fa:42:ca:78:1a:c1:14:
         a0:a1:45:7b:f2:5b:27:7f:84:9a:e3:69:46:80:41:43:36:a0:
         42:a8:ad:9f:b3:c1:4a:de:a8:62:76:ac:0f:1a:f1:9a:32:8e:
         0b:88:9d:a3:da:cb:28:b7:7b:ba:d7:3f:43:9c:7a:d3:20:6f:
         5f:57:49:b6:dd:ea:fb:a6:92:2e:f0:9a:9c:3c:53:32:81:cf:
         04:e5:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:07 2025 by rpki-client