Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          zP5hgyGG5mJoBmLMpASbLseTh15kgkQ38haU30bALDI=
Subject key identifier:   B6:12:9E:DE:D9:F9:AB:65:29:FF:6E:46:9A:5C:AF:48:5C:0B:41:1A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019A09A55215C8D26C6F2B477F012F51F476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1718
Signing time:             Wed 22 Oct 2025 02:00:20 +0000
Manifest this update:     Wed 22 Oct 2025 02:00:20 +0000
Manifest next update:     Thu 23 Oct 2025 02:00:20 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          12: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          13: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          14: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          15: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: sxrPl2/gaPh6LTVXwD/TCneX8q1WKqXVK+4b/jsdlC8=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:a5:52:15:c8:d2:6c:6f:2b:47:7f:01:2f:51:f4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Oct 22 02:00:20 2025 GMT
            Not After : Oct 23 02:00:20 2025 GMT
        Subject: CN=b6129eded9f9ab6529ff6e469a5caf485c0b411a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:a8:c2:e8:d8:ff:6a:6f:62:67:82:6d:28:
                    31:84:4d:c3:8e:32:32:6d:68:57:e1:5b:0b:80:72:
                    00:73:80:9d:c1:db:96:3f:1a:0b:c4:3f:d9:43:77:
                    44:ca:ab:95:a9:0b:f8:88:47:42:76:b0:3d:b5:44:
                    f3:30:32:e4:ac:92:21:b6:82:ac:63:68:27:08:c6:
                    6c:61:80:39:f6:be:05:69:eb:2c:d9:57:60:78:9f:
                    7b:47:ee:94:5a:9c:b4:9f:2b:5b:ab:0b:f4:a6:99:
                    40:55:e0:94:97:33:3c:c6:3a:c1:30:07:ca:76:da:
                    73:a4:f3:2d:a9:09:69:28:93:03:1e:fe:6a:93:52:
                    46:c5:99:85:92:6a:02:5c:61:19:a6:26:98:e9:17:
                    70:93:b3:b2:a9:67:f3:5c:da:e5:38:ae:b4:3e:ef:
                    6e:7a:76:f6:c0:c5:71:b0:a4:78:4b:44:11:b2:e5:
                    a8:e1:4a:1a:10:c0:69:bb:32:de:fc:f7:93:cf:8e:
                    ae:54:90:19:c5:0f:9a:43:9c:ed:10:37:f5:fb:f1:
                    d3:25:60:10:84:2f:94:77:60:23:64:d7:a3:73:66:
                    57:37:f2:cd:7d:00:77:52:e5:e9:32:22:01:8e:fc:
                    2d:5c:c4:b5:6c:02:54:37:19:87:01:99:af:c8:67:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:9E:DE:D9:F9:AB:65:29:FF:6E:46:9A:5C:AF:48:5C:0B:41:1A
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:96:e7:77:ee:38:e8:67:37:fd:fd:66:09:b3:f3:c8:7a:71:
         af:95:9e:c9:9c:9f:9b:e2:2a:16:33:95:4f:fe:3a:e8:a1:13:
         af:0d:37:28:7d:39:38:a7:bb:e6:ae:1d:f6:11:75:8e:61:e0:
         7e:e2:7e:70:48:61:42:fb:c9:9e:3e:a6:e4:ba:87:a7:57:33:
         ae:37:1d:bc:c2:d8:06:ba:97:c6:8c:28:0f:73:78:23:b3:5e:
         e2:f1:73:66:3d:14:2e:eb:6d:83:8f:b4:90:55:51:95:2d:41:
         3d:c1:c4:04:ba:94:73:ad:59:f5:22:dc:b9:b5:02:49:24:e5:
         9b:47:c6:60:21:68:16:b6:95:a3:14:ac:dd:9f:c5:39:d8:0b:
         8b:69:d1:ca:cd:67:d9:f1:9c:fc:84:79:e4:2c:3b:d0:e7:6a:
         63:42:3b:4b:49:13:cc:32:a6:8a:28:6a:b4:9b:b2:9f:62:41:
         43:df:d0:f2:20:90:10:23:1a:16:fe:2b:fa:18:3c:b4:08:cd:
         53:c5:93:bc:1c:69:07:80:44:c3:fe:7b:fc:79:d2:97:7b:88:
         fa:a1:c1:e6:67:9b:de:04:9a:a1:b6:9c:52:60:7a:72:e0:a3:
         29:f1:68:9e:fa:23:19:cf:45:45:ac:1c:5f:c2:6c:72:e7:60:
         36:23:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----