Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          MEPuVtft7e+ZmEnEAaPJclbGLfb6DB5mMoOa2ihFMc4=
Subject key identifier:   3E:AA:C6:4C:45:FA:16:74:10:F0:36:74:EC:C9:87:9D:51:E0:CE:1B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       0199FC21456C7429D74153B5148A98CD8C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1711
Signing time:             Sun 19 Oct 2025 11:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:02 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=)
                          12: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          13: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          14: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          15: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: B+ntuQ2wn5efizbGS8FICUS697uNkZtlx6ic84lywoU=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:45:6c:74:29:d7:41:53:b5:14:8a:98:cd:8c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Oct 19 11:01:02 2025 GMT
            Not After : Oct 20 11:01:02 2025 GMT
        Subject: CN=3eaac64c45fa167410f03674ecc9879d51e0ce1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:b6:f2:87:7e:a5:8a:8a:89:3c:8a:37:6e:
                    78:9b:3f:56:e2:62:c1:da:72:1c:9b:be:d0:8c:37:
                    63:66:60:11:69:bc:10:35:c1:ee:7b:c2:66:f8:a1:
                    96:b2:af:38:c4:c4:9b:27:90:16:fb:0e:4c:57:d5:
                    55:aa:2b:c5:a6:0a:bd:af:ff:77:61:e0:6f:dd:0e:
                    4a:ce:53:a8:24:f6:92:87:35:5c:f4:88:31:75:5d:
                    6f:f2:4a:b7:ea:b6:d2:21:5b:cd:20:cd:e8:0f:4e:
                    49:7b:e1:24:5c:87:2f:91:7d:2e:32:d8:0d:d2:7f:
                    9c:08:93:62:c8:09:8c:9e:0b:e3:83:74:aa:a7:ea:
                    59:d0:12:17:c9:38:d5:33:78:2a:f5:54:d3:fe:a0:
                    91:13:f5:28:ec:c4:2f:4a:8f:09:5a:2a:38:f9:a0:
                    6c:8e:4f:eb:18:35:44:34:ea:6c:19:1c:0b:51:83:
                    b7:70:21:1c:41:29:da:e5:76:39:99:5a:af:9d:30:
                    0d:f0:2d:a5:5d:6e:de:80:f5:09:cb:49:5a:01:99:
                    36:0f:ea:02:ec:b9:fc:8e:6c:91:e2:0b:09:92:30:
                    c7:d6:13:ba:c2:87:64:e4:59:45:b3:00:f9:84:46:
                    f0:d9:22:91:a1:4c:32:bc:90:ad:9d:7e:df:46:e5:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:C6:4C:45:FA:16:74:10:F0:36:74:EC:C9:87:9D:51:E0:CE:1B
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:b3:bc:83:59:87:8d:e0:39:7e:01:bf:b1:7e:b2:87:cb:
         59:47:28:90:74:2d:f8:c7:0a:a0:d3:bd:0f:97:40:60:f2:1a:
         ad:db:ca:dd:d6:ed:1f:80:5d:e3:ba:44:70:1d:0a:b9:90:38:
         88:83:4b:47:4d:8d:1d:57:cc:70:ce:d7:89:72:3e:e4:d9:89:
         c3:ef:37:bb:59:b6:15:9a:2f:bf:31:e6:80:1a:a8:98:b9:df:
         26:b6:d4:3c:31:ac:7a:3d:79:5b:4b:f0:30:bf:23:e6:17:68:
         c2:d0:7c:db:38:cb:1b:f7:b9:a1:6f:77:3e:f0:4c:60:3d:3d:
         e2:8e:2a:9c:ca:10:ac:c4:b2:1d:12:4e:63:8d:b3:32:b4:7a:
         c3:5b:1b:ce:d4:71:df:e4:6f:65:63:a7:92:5a:31:63:82:4b:
         bc:9f:56:e9:b0:2a:34:31:93:81:64:2e:2d:4b:df:ec:93:b2:
         ed:5b:7d:d5:74:32:e2:fb:9f:4b:56:70:d5:94:48:b4:d4:7f:
         94:86:20:9c:70:89:55:df:25:2d:4c:cb:7c:2c:4d:c3:00:91:
         68:df:4c:93:54:69:1a:19:ee:5c:18:3c:3b:2a:2c:ac:e3:02:
         26:34:be:c8:75:f8:b1:b7:43:47:b9:17:9b:7b:eb:9b:a2:b3:
         b2:05:d4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUVsdCnXQVO1FIqYzYx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUxMDE5MTEwMTAyWhcNMjUxMDIwMTEwMTAyWjAzMTEwLwYDVQQD
EygzZWFhYzY0YzQ1ZmExNjc0MTBmMDM2NzRlY2M5ODc5ZDUxZTBjZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysS28od+pYqKiTyKN254mz9W4mLB
2nIcm77QjDdjZmARabwQNcHue8Jm+KGWsq84xMSbJ5AW+w5MV9VVqivFpgq9r/93
YeBv3Q5KzlOoJPaShzVc9IgxdV1v8kq36rbSIVvNIM3oD05Je+EkXIcvkX0uMtgN
0n+cCJNiyAmMngvjg3Sqp+pZ0BIXyTjVM3gq9VTT/qCRE/Uo7MQvSo8JWio4+aBs
jk/rGDVENOpsGRwLUYO3cCEcQSna5XY5mVqvnTAN8C2lXW7egPUJy0laAZk2D+oC
7Ln8jmyR4gsJkjDH1hO6wodk5FlFswD5hEbw2SKRoUwyvJCtnX7fRuUJZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6qxkxF+hZ0EPA2dOzJh51R4M4bMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM2zvINZ
h43gOX4Bv7F+sofLWUcokHQt+McKoNO9D5dAYPIardvK3dbtH4Bd47pEcB0KuZA4
iINLR02NHVfMcM7XiXI+5NmJw+83u1m2FZovvzHmgBqomLnfJrbUPDGsej15W0vw
ML8j5hdowtB82zjLG/e5oW93PvBMYD094o4qnMoQrMSyHRJOY42zMrR6w1sbztRx
3+RvZWOnkloxY4JLvJ9W6bAqNDGTgWQuLUvf7JOy7Vt91XQy4vufS1Zw1ZRItNR/
lIYgnHCJVd8lLUzLfCxNwwCRaN9Mk1RpGhnuXBg8OyosrOMCJjS+yHX4sbdDR7kX
m3vrm6KzsgXUwg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:50 2025 by rpki-client