Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          EuLJRDf9V6vSg4GOMMPPEUocpA1HonTfXi+A0qO2JHo=
Subject key identifier:   64:F6:F7:28:8C:D0:98:74:F6:93:68:CB:37:6E:9A:C2:A8:02:FE:8A
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       01964E236351FB64808816C75D291126EC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          151C
Signing time:             Sat 19 Apr 2025 13:01:04 +0000
Manifest this update:     Sat 19 Apr 2025 13:01:04 +0000
Manifest next update:     Sun 20 Apr 2025 13:01:04 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: z556YOsfsNYhHIrm6JuNZHof0lhVc/TOCURR5JyWEWU=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:63:51:fb:64:80:88:16:c7:5d:29:11:26:ec:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Apr 19 13:01:04 2025 GMT
            Not After : Apr 20 13:01:04 2025 GMT
        Subject: CN=64f6f7288cd09874f69368cb376e9ac2a802fe8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:b9:34:e2:11:47:f9:83:a7:64:0c:73:ab:
                    b9:94:b2:4c:5a:f8:83:2e:21:bb:a0:bd:41:6d:49:
                    11:39:21:4a:36:bb:f6:54:19:f3:2a:7d:98:b9:fe:
                    d6:b1:b7:64:54:10:4a:1e:00:09:a3:76:48:0f:3b:
                    b1:08:14:fd:87:ed:95:44:ea:89:18:32:0e:34:2e:
                    49:bb:03:da:c6:67:c7:86:43:44:84:51:67:8a:77:
                    22:7d:53:97:1b:3a:9b:ab:3e:11:b7:bb:70:8e:f0:
                    90:6b:cd:0a:9d:8b:6c:bd:7e:ae:d0:14:c4:e7:15:
                    40:5b:3b:ee:6c:3a:e1:d5:e2:b4:8f:ec:f2:cb:23:
                    3f:b0:e0:d7:36:29:6a:62:75:ec:c7:70:79:04:c7:
                    32:2e:35:9a:36:6d:a1:2d:59:40:22:1e:a7:97:dd:
                    bc:9a:31:20:c9:cd:78:48:76:74:16:4a:44:e7:5c:
                    63:7f:01:e6:dd:a3:a5:8a:09:9e:7a:54:a6:60:5f:
                    55:03:75:2f:b9:d3:a8:52:6c:3b:78:21:2d:d1:3b:
                    ce:b9:71:88:df:ab:b6:32:7c:6d:5f:ee:1e:56:42:
                    d7:cf:58:65:ef:44:3e:56:14:92:a3:e2:af:71:42:
                    6e:f6:45:72:86:70:dc:39:b1:8f:20:de:78:26:40:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:F7:28:8C:D0:98:74:F6:93:68:CB:37:6E:9A:C2:A8:02:FE:8A
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:ae:12:35:ab:13:94:4a:a9:d4:4f:25:4c:ec:67:41:06:
         af:8f:f7:0e:5d:59:a4:ee:d5:da:2f:c2:a4:00:e6:96:12:06:
         1c:cb:03:37:1a:be:e1:7c:a4:9f:3c:09:e7:c4:84:bd:46:f1:
         f4:a4:ef:a0:3b:84:93:68:81:c5:f2:8c:28:74:9f:9e:07:76:
         92:4e:16:5a:ed:ae:9e:76:3f:69:7c:80:c2:56:c6:b8:20:18:
         17:d8:9c:bd:ec:df:a3:49:8b:20:61:5a:1f:56:9f:38:1f:d5:
         3a:c8:10:1a:65:66:3a:0e:d2:06:19:b4:f8:64:a1:02:d3:5f:
         0d:4a:5a:6e:97:87:83:27:ea:4f:2e:b1:0e:0b:6c:20:48:9f:
         a8:c1:0a:09:6b:69:98:a2:99:a3:d6:d0:a0:35:e8:bf:38:6a:
         09:b6:42:19:16:63:a1:49:ae:99:8d:6c:eb:1e:2b:72:2a:67:
         b3:f4:09:d1:d7:9e:1f:98:38:e9:ef:76:36:50:fc:65:81:93:
         f7:5f:49:be:59:1e:c8:64:cb:4d:ea:b1:db:05:24:93:21:95:
         39:f7:7a:3d:5b:f7:8b:36:66:3d:51:c4:c9:eb:72:68:1b:03:
         cd:ca:14:07:af:c1:e8:68:6d:ef:c6:bf:09:62:a5:0a:dc:6c:
         00:0d:bb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOI2NR+2SAiBbHXSkRJuwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjUwNDE5MTMwMTA0WhcNMjUwNDIwMTMwMTA0WjAzMTEwLwYDVQQD
Eyg2NGY2ZjcyODhjZDA5ODc0ZjY5MzY4Y2IzNzZlOWFjMmE4MDJmZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbC5NOIRR/mDp2QMc6u5lLJMWviD
LiG7oL1BbUkROSFKNrv2VBnzKn2Yuf7WsbdkVBBKHgAJo3ZIDzuxCBT9h+2VROqJ
GDIONC5JuwPaxmfHhkNEhFFnincifVOXGzqbqz4Rt7twjvCQa80KnYtsvX6u0BTE
5xVAWzvubDrh1eK0j+zyyyM/sODXNilqYnXsx3B5BMcyLjWaNm2hLVlAIh6nl928
mjEgyc14SHZ0FkpE51xjfwHm3aOligmeelSmYF9VA3UvudOoUmw7eCEt0TvOuXGI
36u2MnxtX+4eVkLXz1hl70Q+VhSSo+KvcUJu9kVyhnDcObGPIN54JkDXEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT29yiM0Jh09pNoyzdumsKoAv6KMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbOuEjWr
E5RKqdRPJUzsZ0EGr4/3Dl1ZpO7V2i/CpADmlhIGHMsDNxq+4XyknzwJ58SEvUbx
9KTvoDuEk2iBxfKMKHSfngd2kk4WWu2unnY/aXyAwlbGuCAYF9icvezfo0mLIGFa
H1afOB/VOsgQGmVmOg7SBhm0+GShAtNfDUpabpeHgyfqTy6xDgtsIEifqMEKCWtp
mKKZo9bQoDXovzhqCbZCGRZjoUmumY1s6x4rcipns/QJ0deeH5g46e92NlD8ZYGT
919JvlkeyGTLTeqx2wUkkyGVOfd6PVv3izZmPVHEyetyaBsDzcoUB6/B6Ght78a/
CWKlCtxsAA27YA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:22:43 2025 by rpki-client