Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          88ev23LleQmeO3w3ADtUP0gUC5ZKxGQIIJJ/dGAoyc4=
Subject key identifier:   9D:48:E0:D3:5A:7C:F0:F7:F5:A3:3B:78:77:91:55:09:C4:1E:34:D7
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019921E7B76D7ACDB40331B97D135A9450AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          16A0
Signing time:             Sun 07 Sep 2025 02:00:57 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:57 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:57 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          12: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          13: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          14: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          15: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: 9G6RDShVKKcttJgf+orWz1p4wbDgFm9LX44rZQL1hMY=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:b7:6d:7a:cd:b4:03:31:b9:7d:13:5a:94:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Sep  7 02:00:57 2025 GMT
            Not After : Sep  8 02:00:57 2025 GMT
        Subject: CN=9d48e0d35a7cf0f7f5a33b7877915509c41e34d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:fb:da:90:f3:ce:9c:7f:37:f6:fc:a2:40:
                    bf:2a:1b:0f:82:6d:40:8e:f4:80:ff:7a:78:2d:f8:
                    46:a2:06:76:86:4e:ef:09:60:6e:91:10:93:11:a7:
                    61:79:20:8a:e0:5e:33:16:16:1a:0a:05:7d:7e:ae:
                    ce:c1:20:02:14:6f:62:f9:58:f2:c3:96:e9:c4:89:
                    61:24:88:68:70:26:49:1a:52:f7:23:8c:7e:73:be:
                    2f:df:c7:0e:82:99:47:0f:04:8b:09:39:7f:77:68:
                    62:a8:67:b9:9f:06:0c:f8:1e:10:41:c5:f1:53:d7:
                    bb:3f:8a:ad:27:e2:f7:ab:e6:7c:b1:ef:68:b1:ef:
                    c0:1b:25:27:1e:c5:01:61:b6:81:ac:80:9d:c0:88:
                    4e:40:a1:1b:38:17:e5:de:35:a2:3f:a2:a5:57:f9:
                    9a:b7:cd:cf:69:62:04:03:f0:42:bf:c7:05:28:fe:
                    b8:23:69:2e:88:9d:c5:22:da:b7:53:21:18:c1:bb:
                    1c:44:c7:c3:ee:e9:bc:06:a6:63:cb:15:d0:96:8f:
                    4d:2d:c7:a9:02:3c:4b:46:64:be:9a:29:54:97:20:
                    2b:b7:49:01:a2:b3:e0:dc:92:46:44:44:f7:4d:b3:
                    02:87:90:65:46:8e:2f:33:20:d4:b0:6f:38:51:0d:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:E0:D3:5A:7C:F0:F7:F5:A3:3B:78:77:91:55:09:C4:1E:34:D7
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:a3:5c:0e:77:46:11:1d:c6:30:6d:eb:13:e9:97:d6:e2:
         ae:97:3c:4f:b0:b4:2c:71:bc:bb:b1:e5:cc:e3:51:2f:e2:74:
         dd:da:75:e1:54:99:53:8d:ce:f9:2c:c8:16:f8:b5:75:3a:7d:
         55:7d:6b:00:4e:c2:c6:61:b5:29:3c:63:92:2c:f8:e9:0d:df:
         45:0d:ee:17:50:d0:c8:d6:57:6d:cd:c6:f6:e9:d3:01:14:fb:
         46:60:c0:fb:d7:d5:d6:f2:e3:9d:b4:dc:d7:26:47:24:24:b9:
         79:6c:2a:6a:fb:90:37:c3:ae:f0:82:57:a1:23:42:ba:2d:e1:
         2c:41:80:1f:d2:60:61:31:6b:93:85:d6:e9:2b:3c:fa:cb:35:
         d8:ae:d9:6f:f4:5f:92:d7:66:35:4c:ac:64:09:82:25:f0:fc:
         d5:ac:07:0f:94:4d:77:34:0b:6f:e1:77:44:9d:5c:00:f1:d9:
         4e:3c:10:28:ba:69:72:88:8f:68:9c:3a:9f:d6:4b:03:a9:1c:
         36:e6:c4:c5:9b:bc:45:3d:79:2a:29:1b:7d:4a:4d:09:bf:94:
         5b:a1:1d:e6:93:00:25:27:27:de:30:54:0b:0d:35:1f:31:eb:
         b4:46:a4:f4:d5:81:e5:0f:d7:2f:be:db:ed:ae:8c:33:56:49:
         50:12:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:37:01 2025 by rpki-client