Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          x3RUtc4BM1q0bEHeKPk29CdN7jr4RQn57NpfCntkJQE=
Subject key identifier:   93:B7:34:E5:01:4D:30:93:D0:27:34:70:D3:A1:F1:7F:F5:13:E2:9B
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       019682472881D5CC303B0F733AEE93A25343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          1537
Signing time:             Tue 29 Apr 2025 16:00:23 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:23 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:23 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: XNJhwGkz6Zhh2oJvMgC5rf5T/CfWEyFCPeyMeXUNkHw=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:28:81:d5:cc:30:3b:0f:73:3a:ee:93:a2:53:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Apr 29 16:00:23 2025 GMT
            Not After : Apr 30 16:00:23 2025 GMT
        Subject: CN=93b734e5014d3093d0273470d3a1f17ff513e29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:69:e3:28:db:9d:b7:11:d8:92:17:8d:85:
                    fc:71:2c:34:eb:e5:41:df:fd:47:f8:eb:11:39:5d:
                    6b:15:ce:27:05:61:5d:61:f9:d8:ff:c7:df:bf:a1:
                    30:34:66:e4:fb:20:76:4f:7a:49:22:01:45:f6:b9:
                    09:75:87:92:a1:e0:62:e2:7e:b2:02:ea:94:ba:35:
                    4d:c5:03:e1:13:2e:ec:68:d2:cb:14:78:45:51:b0:
                    1b:3f:fc:10:9b:51:5d:3b:1c:ac:2d:59:54:2a:65:
                    29:bb:9a:15:cd:fc:0f:d5:6a:1f:c9:67:59:8a:b4:
                    b7:38:fb:81:8f:d9:29:24:5a:9e:f4:32:4c:68:d8:
                    64:c8:c6:1b:36:dc:5b:60:07:0b:5e:70:10:72:8a:
                    83:f8:ef:55:ea:a5:ec:be:15:f1:0b:d0:5e:e3:ae:
                    b5:69:4d:24:36:b8:1f:f9:30:b9:49:47:a6:01:b2:
                    f1:13:3e:c4:0d:15:fb:d9:41:ff:27:08:30:97:b0:
                    51:83:ba:f3:66:23:5a:d3:38:a5:00:4a:ca:06:03:
                    f7:38:05:27:b9:4a:90:e0:32:8c:00:f8:ba:d7:5f:
                    34:e7:07:51:f6:f4:4e:6e:a4:2b:8d:ed:3c:2b:08:
                    0d:d0:8a:97:d3:07:d9:66:27:2c:80:ff:d2:59:ef:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:34:E5:01:4D:30:93:D0:27:34:70:D3:A1:F1:7F:F5:13:E2:9B
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:62:c8:d9:9d:39:83:61:d3:76:f0:16:bb:55:05:41:09:
         1e:b0:81:86:fa:68:5f:ad:c4:dd:50:65:3f:18:aa:96:a4:09:
         5c:72:71:ca:5e:a1:bd:b0:8f:74:78:f0:51:f4:04:5a:9b:9f:
         ef:98:d1:d2:f2:f8:84:c0:0e:96:c8:39:66:bf:0c:e8:2d:75:
         eb:4b:6e:8c:a7:ba:31:d0:02:15:9d:2a:db:ce:74:99:d1:2c:
         fb:57:bf:92:c9:69:03:f2:8e:07:df:2b:77:c4:db:3b:93:82:
         b2:f1:ba:29:23:46:1d:ad:05:bc:a6:4a:ed:f5:45:40:84:11:
         12:6f:28:12:d7:d0:e0:c2:fb:35:7b:a2:2c:b4:fb:a8:38:69:
         12:35:24:64:34:5b:31:21:a9:c4:41:e5:a8:ba:60:a2:b7:0c:
         79:75:70:08:ec:ee:25:0c:3e:e9:5a:b1:19:1d:8c:82:19:79:
         10:c1:94:1c:d6:99:9e:d7:f1:d2:4f:f5:08:e4:df:9c:fd:cb:
         9f:7e:0e:c5:60:6d:b2:20:52:c1:a5:8d:f3:61:43:6c:d2:a6:
         c1:c1:b1:f1:3a:03:fc:8d:7e:d3:81:cf:ec:29:f9:88:70:67:
         42:20:0d:31:60:98:75:07:5e:aa:35:d3:a0:a2:1a:d7:de:ed:
         3d:2f:81:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCRyiB1cwwOw9zOu6TolNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjUwNDI5MTYwMDIzWhcNMjUwNDMwMTYwMDIzWjAzMTEwLwYDVQQD
Eyg5M2I3MzRlNTAxNGQzMDkzZDAyNzM0NzBkM2ExZjE3ZmY1MTNlMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPxp4yjbnbcR2JIXjYX8cSw06+VB
3/1H+OsROV1rFc4nBWFdYfnY/8ffv6EwNGbk+yB2T3pJIgFF9rkJdYeSoeBi4n6y
AuqUujVNxQPhEy7saNLLFHhFUbAbP/wQm1FdOxysLVlUKmUpu5oVzfwP1WofyWdZ
irS3OPuBj9kpJFqe9DJMaNhkyMYbNtxbYAcLXnAQcoqD+O9V6qXsvhXxC9Be4661
aU0kNrgf+TC5SUemAbLxEz7EDRX72UH/Jwgwl7BRg7rzZiNa0zilAErKBgP3OAUn
uUqQ4DKMAPi611805wdR9vRObqQrje08KwgN0IqX0wfZZicsgP/SWe+z6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO3NOUBTTCT0Cc0cNOh8X/1E+KbMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrJiyNmd
OYNh03bwFrtVBUEJHrCBhvpoX63E3VBlPxiqlqQJXHJxyl6hvbCPdHjwUfQEWpuf
75jR0vL4hMAOlsg5Zr8M6C1160tujKe6MdACFZ0q2850mdEs+1e/kslpA/KOB98r
d8TbO5OCsvG6KSNGHa0FvKZK7fVFQIQREm8oEtfQ4ML7NXuiLLT7qDhpEjUkZDRb
MSGpxEHlqLpgorcMeXVwCOzuJQw+6VqxGR2Mghl5EMGUHNaZntfx0k/1COTfnP3L
n34OxWBtsiBSwaWN82FDbNKmwcGx8ToD/I1+04HP7Cn5iHBnQiANMWCYdQdeqjXT
oKIa197tPS+BAQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:25 2025 by rpki-client