Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          bdFAuyEvlcTeZ7GEGMUeFw96OEwu93AHKs1n/v3qLNA=
Subject key identifier:   00:80:F9:F8:45:04:59:26:A3:F5:61:8E:4E:49:C7:74:4F:FE:21:4C
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       01974A0CA711B5D07997764B41C9E63A2F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          15AA
Signing time:             Sat 07 Jun 2025 11:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:32 +0000
Files and hashes:         1: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          2: 0vPb8eg7-97nmP3k5wtQlDzNgfk.roa (hash: 2Dv3tIonYRqaIvYSQqIdq15wSa3EWj4oRUIn6ZqbqRM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 6xosF9Z4lTqamX7SY9BrDsf4yuY.roa (hash: upmPss51e6BH69TQS41N9IhTplp6OirUUdWKGfGrFlc=)
                          10: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          11: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          12: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          13: BaaDmaPl0eSa2fQRay2Gu-qwCW8.roa (hash: LL9KxES/MWnuM1OC4cAjz4vUD6cc9GLUb0KjIn7y6C4=)
                          14: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          15: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          16: K6yZ47047hF0NwFQI7xiX1bObME.roa (hash: b/I7AMY4ip5rwAIqGPd13gBwMCp1guYxQ+s4M8Er1LU=)
                          17: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          18: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          19: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          20: T3qIKwMZ3nfLIfch_dy2fZSjQaY.roa (hash: 6HN6rywRWQ7fJbbHh/llhTU7kBXwaGTnXKxLYyZbPG0=)
                          21: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: gYHFboOfaJ18wKZhTqpOrxr6Hf0QkxBB4Ax7S6rbcRM=)
                          22: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          23: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          24: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          25: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          26: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          27: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          28: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          29: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          30: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          31: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          32: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          33: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          34: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          35: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          36: sdK_SGNByLEnaTshl3f4J-mnwhI.roa (hash: EFBk6m2IGTzBREwP3M6fW+V6jcaaklYnotKHjh7jFfg=)
                          37: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          38: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          39: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:a7:11:b5:d0:79:97:76:4b:41:c9:e6:3a:2f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Jun  7 11:00:32 2025 GMT
            Not After : Jun  8 11:00:32 2025 GMT
        Subject: CN=0080f9f845045926a3f5618e4e49c7744ffe214c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:77:63:57:cb:9b:87:dd:99:60:93:3d:ff:
                    74:bd:5f:cc:8f:51:f3:38:d4:a3:25:cb:30:c0:f3:
                    9f:f0:d1:c1:ea:2c:c8:ce:61:46:05:cf:84:4b:a6:
                    53:23:09:7d:8a:b4:ef:b3:3d:b0:0f:55:a4:b8:d8:
                    80:6a:79:62:59:48:78:9c:89:20:9b:cb:2e:3d:11:
                    1c:fb:ca:91:5b:2d:82:a4:4e:99:11:fc:2e:f4:47:
                    26:55:89:ee:5b:df:81:ab:e8:6e:47:f3:dd:e1:24:
                    c7:05:da:d0:2f:8a:40:89:70:6e:5f:e1:07:48:81:
                    f3:a4:6e:09:5b:21:9a:5c:6d:67:56:aa:ae:36:68:
                    45:66:cc:7d:68:0d:fd:39:f5:48:8d:e5:2d:8a:47:
                    4a:6b:a1:dc:4d:35:7c:7c:ab:0f:5e:03:b6:d9:20:
                    2d:89:d6:50:e4:09:0c:a1:05:ad:17:ce:17:da:bb:
                    32:c3:55:24:0f:d8:a4:39:8f:4c:8e:b5:7b:13:a1:
                    1a:13:15:d8:e5:2c:b4:06:78:f7:30:7b:55:1a:02:
                    c7:47:e1:9c:d3:8a:ae:d6:ec:c8:b6:41:14:cc:5b:
                    3c:9e:27:7b:e2:ee:ef:21:5b:85:ba:2e:36:80:7a:
                    af:c7:eb:10:3a:45:a2:d6:60:2a:a4:5f:a8:86:49:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:F9:F8:45:04:59:26:A3:F5:61:8E:4E:49:C7:74:4F:FE:21:4C
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:a5:63:bb:71:ee:fc:3a:98:91:66:45:97:e9:df:cb:5a:
         ad:fc:38:ec:25:88:23:df:df:fa:d6:ab:8b:2e:ad:d4:19:4c:
         f0:e9:41:24:5b:52:9d:53:df:77:8b:70:43:8f:8d:95:4b:2c:
         e2:71:31:b9:43:e1:5b:a5:38:6c:17:80:29:22:c2:cc:a3:e9:
         be:e1:5f:fa:02:09:70:f1:f1:c2:83:0c:bc:20:68:ff:de:f7:
         8b:18:c1:25:66:86:25:42:ab:b8:e0:d0:b5:4a:b7:9a:e8:da:
         d9:6a:8f:b7:1e:19:4e:f2:d2:76:9a:3d:ec:fc:e7:74:54:93:
         3f:7b:bc:f0:30:4d:b8:2f:70:81:4f:a1:80:03:00:29:14:7a:
         2e:3c:06:84:08:5b:44:4c:22:1f:18:1c:e8:3e:45:3e:c3:55:
         70:a2:ba:51:17:14:8e:b4:58:8f:7b:df:53:96:18:5b:f2:be:
         a5:d4:73:41:32:9d:49:63:ca:29:96:76:47:33:43:73:83:88:
         8a:de:82:6d:9a:59:27:fe:73:ce:f9:70:b0:7f:11:d3:9e:75:
         d1:38:d0:23:84:72:66:0d:03:09:c6:98:b9:cf:f8:ed:8f:51:
         9e:be:dc:0c:89:0f:9c:07:2c:b9:9b:21:c6:cb:f1:34:8c:db:
         f0:f0:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----