Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          YQnlR0sXIPvggJLKaRZmCclK3ZNfDSAFa6NrFao52sg=
Subject key identifier:   48:8E:A7:A5:12:1B:22:B2:98:42:A2:DE:59:A3:D2:91:A7:10:2C:E9
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       0196B85A0C8C7910E9E6D31A61D407DE3FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          1553
Signing time:             Sat 10 May 2025 04:00:31 +0000
Manifest this update:     Sat 10 May 2025 04:00:31 +0000
Manifest next update:     Sun 11 May 2025 04:00:31 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: Y8c0bvQ9jSE5xFwY4r3rcirnny83hd35DNI+fxndfoU=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:0c:8c:79:10:e9:e6:d3:1a:61:d4:07:de:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: May 10 04:00:31 2025 GMT
            Not After : May 11 04:00:31 2025 GMT
        Subject: CN=488ea7a5121b22b29842a2de59a3d291a7102ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:60:45:5c:43:1e:42:0f:5c:9f:86:3a:c9:
                    65:c0:cc:57:9f:bf:ad:3b:2c:b7:24:81:e4:95:3e:
                    51:dd:0e:be:d3:8e:37:5a:9b:c5:45:55:5b:04:44:
                    60:e2:e6:d9:5f:64:e3:ab:08:d2:19:6b:f3:b6:65:
                    5f:c1:4c:a7:30:75:84:fd:b9:9d:34:fe:5f:1d:26:
                    f8:7e:ab:a3:78:66:5a:c9:06:6f:6f:80:8b:07:39:
                    8d:98:0d:91:a2:40:eb:ce:60:15:f7:a7:7c:4b:e8:
                    49:fc:4d:a0:09:98:2d:52:70:75:b9:3d:6b:fb:5e:
                    61:0e:68:c6:53:44:bf:81:10:e0:74:22:25:37:2c:
                    30:86:ef:98:25:3d:b8:2b:2e:4e:34:7c:6c:25:26:
                    63:7b:68:94:fe:43:c3:d1:fe:4e:51:64:20:6a:1b:
                    e7:96:bb:ab:e7:25:ff:9f:bb:b8:f4:f1:5e:62:bd:
                    f7:0d:53:49:3e:aa:52:c4:b2:b0:f1:40:88:0f:bb:
                    cf:eb:ac:c4:df:ed:6b:32:44:bd:0e:cd:b2:64:79:
                    d5:d9:19:12:65:11:99:63:df:b1:30:6b:97:b5:e6:
                    9b:c0:6d:12:96:9a:11:91:bd:a4:1d:7d:07:f7:28:
                    5d:05:41:f1:18:0c:21:04:e6:80:66:bc:cf:64:f2:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8E:A7:A5:12:1B:22:B2:98:42:A2:DE:59:A3:D2:91:A7:10:2C:E9
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:b8:7b:ec:87:84:de:71:d8:d2:5e:47:13:f4:17:14:01:
         f8:77:a9:86:3f:1a:ec:40:8e:31:ed:19:f5:e6:fc:74:3e:fa:
         e8:c9:8a:d1:df:de:f0:f1:75:d3:15:92:ed:17:9f:18:fe:3b:
         c9:f5:87:3a:49:ef:ae:7c:71:b3:d9:3f:56:04:de:2d:0d:75:
         cb:d3:48:07:8e:95:16:88:45:0f:6a:ed:5c:ec:c1:dd:8d:10:
         0d:cc:03:7e:da:50:e3:5f:04:3b:50:9b:4b:69:75:0c:47:09:
         62:8c:fc:50:34:8e:37:c4:85:d5:af:df:da:c3:c0:e6:d8:bf:
         0d:e4:7f:41:fb:60:eb:96:30:e0:10:f7:e1:cc:1d:84:43:ab:
         f4:e1:5b:0c:89:ea:3e:03:1c:d6:ff:28:26:9c:6b:5b:54:32:
         cd:c7:3e:dc:e4:e4:96:c5:df:64:98:4f:53:9b:6c:99:d8:c1:
         64:e5:1b:5d:4b:f0:f1:1e:ba:f7:91:d7:a1:38:5a:46:80:88:
         8b:1e:c9:28:9b:3e:fc:57:3c:4f:b2:76:e9:ef:30:91:28:a9:
         d8:e5:14:88:b7:c0:02:a5:01:a5:41:0a:f7:b7:aa:10:9b:ec:
         33:b5:5f:14:7d:7c:fe:04:90:b7:e7:93:58:74:c0:7b:f6:29:
         77:9e:75:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WgyMeRDp5tMaYdQH3j+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjUwNTEwMDQwMDMxWhcNMjUwNTExMDQwMDMxWjAzMTEwLwYDVQQD
Eyg0ODhlYTdhNTEyMWIyMmIyOTg0MmEyZGU1OWEzZDI5MWE3MTAyY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oxgRVxDHkIPXJ+GOsllwMxXn7+t
Oyy3JIHklT5R3Q6+0443WpvFRVVbBERg4ubZX2TjqwjSGWvztmVfwUynMHWE/bmd
NP5fHSb4fqujeGZayQZvb4CLBzmNmA2RokDrzmAV96d8S+hJ/E2gCZgtUnB1uT1r
+15hDmjGU0S/gRDgdCIlNywwhu+YJT24Ky5ONHxsJSZje2iU/kPD0f5OUWQgahvn
lrur5yX/n7u49PFeYr33DVNJPqpSxLKw8UCID7vP66zE3+1rMkS9Ds2yZHnV2RkS
ZRGZY9+xMGuXteabwG0SlpoRkb2kHX0H9yhdBUHxGAwhBOaAZrzPZPJVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiOp6USGyKymEKi3lmj0pGnECzpMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWia4e+yH
hN5x2NJeRxP0FxQB+Hephj8a7ECOMe0Z9eb8dD766MmK0d/e8PF10xWS7RefGP47
yfWHOknvrnxxs9k/VgTeLQ11y9NIB46VFohFD2rtXOzB3Y0QDcwDftpQ418EO1Cb
S2l1DEcJYoz8UDSON8SF1a/f2sPA5ti/DeR/Qftg65Yw4BD34cwdhEOr9OFbDInq
PgMc1v8oJpxrW1Qyzcc+3OTklsXfZJhPU5tsmdjBZOUbXUvw8R6695HXoThaRoCI
ix7JKJs+/Fc8T7J26e8wkSip2OUUiLfAAqUBpUEK97eqEJvsM7VfFH18/gSQt+eT
WHTAe/Ypd551UQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:41:37 2025 by rpki-client