Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          T30BylouaWylhj6rRvjpXDVfRZ2M34KjDyNcTol3L3s=
Subject key identifier:   7A:6F:DB:D5:88:43:8F:24:2D:CA:BD:22:AB:1A:40:87:BA:32:DC:B7
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       019853B246B7EA888ADD464488B42CFADDE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          1628
Signing time:             Tue 29 Jul 2025 01:00:49 +0000
Manifest this update:     Tue 29 Jul 2025 01:00:49 +0000
Manifest next update:     Wed 30 Jul 2025 01:00:49 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: +U9zFs2l7kgUZSaa5NYduaiub3ow5lO58MLb4ZfqH/g=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:b2:46:b7:ea:88:8a:dd:46:44:88:b4:2c:fa:dd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jul 29 01:00:49 2025 GMT
            Not After : Jul 30 01:00:49 2025 GMT
        Subject: CN=7a6fdbd588438f242dcabd22ab1a4087ba32dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:87:13:ec:35:5e:70:f1:a5:c4:0a:e5:72:
                    cf:10:7f:38:17:e9:cc:d5:cb:e1:e0:cc:98:34:f2:
                    ce:8e:f8:b9:34:ab:f2:c8:34:bf:98:ce:db:ba:9b:
                    c5:50:b5:34:d8:77:42:82:dd:8f:ea:2e:bd:3d:ad:
                    49:60:42:68:b6:1c:63:f9:fa:f9:84:09:68:c5:68:
                    56:97:d7:c3:9d:0e:04:54:ee:9d:9d:0a:a5:a6:75:
                    67:0a:0a:8b:af:f7:81:4a:5d:f3:e9:03:d7:c9:ae:
                    d2:ef:7d:9c:fa:cd:80:f9:15:df:53:a0:82:44:8b:
                    d4:0f:3f:90:9f:32:8c:79:59:46:fb:1d:b5:ed:55:
                    44:2a:48:da:53:03:96:38:6e:07:80:f1:7b:ed:c3:
                    6f:23:5d:50:b8:73:12:04:e4:69:77:70:95:5c:e6:
                    27:29:9e:d6:74:40:12:5d:8d:a2:56:b6:c9:e1:e0:
                    63:37:7d:5b:9d:b1:19:3b:72:40:85:b8:3e:b4:36:
                    2e:33:83:9c:c2:c1:d7:17:7f:a2:b2:cc:7c:bd:25:
                    b8:8f:9c:88:6f:1c:ad:f8:f6:4b:ed:2c:fd:37:65:
                    ef:05:65:97:e6:3c:58:22:5b:8f:f7:22:06:b6:ac:
                    55:74:81:06:b1:31:12:08:47:df:44:f8:1a:4d:8e:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:DB:D5:88:43:8F:24:2D:CA:BD:22:AB:1A:40:87:BA:32:DC:B7
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:c7:9f:74:30:2d:15:17:69:e1:3d:e3:27:cb:b5:a4:fd:
         82:c8:b6:14:51:d2:3f:61:38:e1:38:54:54:83:2a:7a:7a:12:
         7c:20:b4:3a:b8:e2:19:66:4f:99:65:a7:e6:e8:e6:06:52:09:
         6a:f2:5e:ef:72:78:c1:d3:45:ae:66:8d:dd:ea:92:94:71:7a:
         cb:1f:c0:ab:a3:1e:c8:0b:9d:b2:2f:52:fa:0a:66:2b:cd:a1:
         5a:43:2a:36:c2:d8:62:27:30:2a:73:5b:8b:0f:d5:96:aa:a7:
         35:d7:a5:09:3c:2b:93:2d:9d:fb:c7:87:4c:41:12:29:a0:0e:
         2e:0d:e5:e7:17:85:a9:ae:9c:d9:5b:a1:4a:43:64:e7:ce:c9:
         c2:af:55:c8:86:5e:a9:5a:e4:9c:bd:1f:b1:b5:ca:29:8b:1e:
         83:f7:b7:25:40:05:46:cc:67:00:53:4f:83:2d:ba:7e:b9:dd:
         bb:66:bc:66:24:b5:f2:90:77:42:5d:2d:48:0d:78:07:b1:44:
         30:11:25:f0:04:1b:d3:99:c5:a7:7c:0e:d7:02:4d:05:a1:7b:
         10:72:32:04:b7:f2:76:75:dd:a9:b8:00:ca:01:e4:38:38:dc:
         75:96:d9:5e:34:4d:5c:1b:da:2d:f3:47:6d:8c:08:84:c7:a1:
         be:44:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:26 2025 by rpki-client