Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          TvXBy6hVoeqMYPEkrp//ctV0xMM55+ZM6c3wW4TttqQ=
Subject key identifier:   26:7B:6E:4B:35:CF:34:B7:39:76:AC:10:A1:4F:1D:BA:48:D1:9E:71
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       01961CC90CFB4165A6C831A6BB0B2D03AB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          150C
Signing time:             Wed 09 Apr 2025 23:01:00 +0000
Manifest this update:     Wed 09 Apr 2025 23:01:00 +0000
Manifest next update:     Thu 10 Apr 2025 23:01:00 +0000
Files and hashes:         1: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          2: 0vPb8eg7-97nmP3k5wtQlDzNgfk.roa (hash: 2Dv3tIonYRqaIvYSQqIdq15wSa3EWj4oRUIn6ZqbqRM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 1-q3g0itQLUvVcSrjoHY5GIwBlPk.roa (hash: xqn7rgadZTnxYbBBFnRHItT0TLJXSKsZ9yBhcF8q/0U=)
                          7: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 6xosF9Z4lTqamX7SY9BrDsf4yuY.roa (hash: upmPss51e6BH69TQS41N9IhTplp6OirUUdWKGfGrFlc=)
                          10: 7FmTRMDtB12V0wHSWOJIxPpQqNA.roa (hash: SZR17ssKaCvAomSvRwskSThl/4eY915s5JudXtAMhqQ=)
                          11: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          12: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          13: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          14: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          15: GsQQRCHscjcggEgU_eXHMO1sFbE.roa (hash: /YJ5MpecwgTbXik6/5fX8jF4ZmNn1OAO9kzdXJTHsXM=)
                          16: K6yZ47047hF0NwFQI7xiX1bObME.roa (hash: b/I7AMY4ip5rwAIqGPd13gBwMCp1guYxQ+s4M8Er1LU=)
                          17: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          18: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          19: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: 21Csc99lKUm4wZn+9LDZ3Pic3TMZxUXlTXYty53FsNc=)
                          20: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          21: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          22: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          23: _7Xrz96iqK0o8cRfpLmW491feYk.roa (hash: TqwvStP0Oay0JmBPbcrhapGjP0FEFt/xUJr+3HQeNEw=)
                          24: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          25: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          26: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          27: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          28: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          29: jTP-5VX48T-YciHdKxsQK5ibXEA.roa (hash: TuGk9Z8jBKOomZunpwGFQNHcF5XcXRrxTkB4n3mm5T8=)
                          30: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          31: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          32: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          33: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          34: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          35: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          36: sdK_SGNByLEnaTshl3f4J-mnwhI.roa (hash: EFBk6m2IGTzBREwP3M6fW+V6jcaaklYnotKHjh7jFfg=)
                          37: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          38: woLw29-RG3GRgzF20cp1gId20nk.roa (hash: GBG9fMW8nfc0FTLP2myM9X+0j3gRBZ3yKsumioK++Rc=)
                          39: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          40: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1c:c9:0c:fb:41:65:a6:c8:31:a6:bb:0b:2d:03:ab:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Apr  9 23:01:00 2025 GMT
            Not After : Apr 10 23:01:00 2025 GMT
        Subject: CN=267b6e4b35cf34b73976ac10a14f1dba48d19e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:7d:17:ec:8f:1a:3a:3c:98:c1:d0:b6:ea:
                    3d:f0:3e:aa:75:f0:6b:59:3e:8e:26:88:06:57:ca:
                    46:31:7f:bb:94:b1:44:42:0d:0e:99:49:6a:8e:6b:
                    de:4f:24:04:7f:d0:75:dd:7d:c1:93:4a:7d:1f:50:
                    88:36:a5:f7:de:18:31:3a:d4:ca:62:dd:41:39:75:
                    b6:41:01:21:66:35:45:86:ad:01:9e:11:06:f6:6a:
                    5c:0c:58:41:44:03:8e:e5:55:0f:86:5b:6b:98:0d:
                    f6:4a:84:27:7b:68:06:7f:a4:26:41:eb:27:28:de:
                    27:a3:40:dc:a3:bc:0d:12:b5:e1:c3:10:64:19:70:
                    e2:8a:ff:6a:f4:5f:9b:ff:c4:f3:f6:13:b6:05:5d:
                    91:fa:35:ab:12:1a:63:65:6d:6d:21:c7:00:14:08:
                    08:36:ea:d2:f2:5f:5c:b5:c4:ce:b2:78:fa:9f:bb:
                    14:16:00:17:1d:d0:ec:99:37:62:a4:9c:de:27:92:
                    e5:f1:80:54:6a:54:fa:ef:57:95:09:94:50:bd:f3:
                    ce:57:ad:ea:4e:74:01:13:16:f8:cf:ca:ed:04:55:
                    a0:3c:25:39:51:f6:2f:e4:8d:96:54:09:44:c3:11:
                    6b:b4:94:01:36:c4:2f:86:8f:a1:9e:18:d3:f3:27:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:6E:4B:35:CF:34:B7:39:76:AC:10:A1:4F:1D:BA:48:D1:9E:71
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4d:93:4a:cd:d5:98:0b:08:a6:8c:e9:85:eb:66:88:78:b8:
         b2:75:e4:af:0d:77:cc:cc:61:ca:2a:c3:e6:b9:6d:f6:90:5f:
         56:6f:af:a2:18:d2:bc:6a:8e:e5:95:04:26:ab:2c:3c:53:11:
         58:db:08:0d:26:ab:4f:21:30:1a:d4:f1:d3:d3:5f:b5:79:f6:
         ac:af:53:24:a1:7e:e5:2a:44:79:5d:7c:79:b5:35:83:5f:3b:
         9a:74:5f:1a:73:c8:cb:14:4a:8e:ed:25:5f:8b:53:c6:66:06:
         0f:08:d5:1b:e8:5f:b4:53:25:b4:23:e8:5d:ae:28:f5:19:be:
         57:1f:4c:0a:1e:05:e2:d9:c5:c2:5e:7a:7d:0c:3d:9c:ac:49:
         d4:e5:75:e8:cc:a7:6d:22:5d:7c:55:bf:44:7d:b7:d2:ca:70:
         04:d5:58:4d:56:c2:f4:cb:87:dc:c1:5a:f9:39:67:05:0d:03:
         cc:da:5a:85:a9:0f:ec:63:b9:5d:e8:cc:97:7c:86:bc:52:4b:
         25:4d:34:f6:7f:a0:8f:4a:31:c3:46:e0:41:c2:e6:11:8e:dd:
         3b:f9:0d:ad:4b:89:4b:d0:43:8e:59:72:11:ed:74:06:8c:fc:
         25:4d:cc:37:f0:cd:09:a7:d0:14:d4:75:39:01:c9:09:01:3c:
         78:4d:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----