Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          9TL42GVfK6ZMTYBfycxChzEfKbM8Zv/0HTGbqwwMPNY=
Subject key identifier:   FD:26:5F:25:0E:F6:12:00:38:C9:0B:07:FB:4C:C0:E0:C2:A2:65:5D
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019758362A1395659DA5886ED1FDA04339F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          15A2
Signing time:             Tue 10 Jun 2025 05:00:34 +0000
Manifest this update:     Tue 10 Jun 2025 05:00:34 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:34 +0000
Files and hashes:         1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=)
                          2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=)
                          3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=)
                          4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=)
                          5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=)
                          6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=)
                          7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=)
                          8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=)
                          9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: raGWUM6FvLESzz/VTXGFjc24qaLuMTkT7ulCC7uTG5c=)
                          11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=)
                          12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
                          13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=)
                          14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=)
                          15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
                          16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:36:2a:13:95:65:9d:a5:88:6e:d1:fd:a0:43:39:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Jun 10 05:00:34 2025 GMT
            Not After : Jun 11 05:00:34 2025 GMT
        Subject: CN=fd265f250ef6120038c90b07fb4cc0e0c2a2655d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:ff:d4:eb:a2:2f:76:a5:10:5b:3d:2e:74:
                    fd:cc:7f:63:15:b9:b6:0b:bb:04:e7:db:73:6e:aa:
                    88:5b:df:3d:05:6d:92:2d:a5:0f:0e:fe:f5:7b:1d:
                    e6:9a:89:9b:91:52:e8:a2:ca:1c:fc:dc:de:a8:20:
                    da:04:32:19:f4:f7:66:e4:3a:2f:5d:18:d8:a9:10:
                    65:ce:c0:c5:b2:38:a1:c2:8e:62:2d:53:c9:c4:d6:
                    49:66:b3:df:00:7a:bd:3d:31:eb:71:4b:ce:c3:1c:
                    44:50:2f:6a:53:67:17:de:82:19:4f:e8:84:ce:10:
                    ec:29:ac:00:3f:78:ff:56:a2:d6:09:70:70:a5:cc:
                    74:95:64:a0:c7:cf:23:32:b5:f1:e8:bb:e0:62:d2:
                    3d:1b:2d:d5:12:ca:df:44:d1:ce:bc:96:98:2b:cc:
                    f1:bc:b3:10:fd:0f:46:03:f1:d1:e6:e3:a4:d8:ff:
                    a8:b6:33:13:01:1c:f3:a0:76:6d:f6:55:f6:60:ca:
                    9d:59:33:e6:2d:c5:43:94:a9:8a:29:63:08:ab:ec:
                    29:c2:04:f9:87:15:c9:5d:fa:41:85:01:2e:16:47:
                    ec:ee:4f:94:a1:6c:07:e3:4d:b2:9c:db:af:8e:db:
                    4d:54:a9:3a:e7:0c:5f:ee:e9:12:93:4f:f7:55:f1:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:5F:25:0E:F6:12:00:38:C9:0B:07:FB:4C:C0:E0:C2:A2:65:5D
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:40:a7:92:35:ea:7e:01:fc:ea:fe:80:a9:6f:32:e4:81:
         9f:f8:3b:50:af:2b:aa:b7:15:57:9a:14:d2:dd:2a:c8:e4:e2:
         ca:a2:9b:88:fc:96:85:62:05:a7:0a:dc:bd:44:38:ed:92:e0:
         b9:e2:a5:e6:6b:95:43:1d:7f:be:d1:ed:11:bd:76:1a:7b:10:
         cb:2f:5d:9c:09:ba:a9:0f:cf:72:79:50:bf:74:75:1a:57:6c:
         4d:b9:26:5e:89:e0:32:d5:60:eb:64:c9:19:d2:1b:80:55:fc:
         2d:d8:12:7a:4c:75:31:f4:61:81:ca:26:55:88:ef:75:f6:70:
         58:e4:49:63:12:5c:b5:a1:c5:cf:fb:56:93:fb:b0:94:bd:e9:
         2c:f9:57:f7:69:dc:6f:d7:91:e2:0b:03:ad:64:ba:2c:27:19:
         19:cf:63:83:48:22:07:7d:ec:04:28:cc:84:11:1d:44:0a:a1:
         e7:0a:76:2d:0c:e3:b6:33:3f:be:a0:ba:01:3d:bb:ac:da:77:
         31:fe:b4:5b:9f:dc:95:1f:93:70:e9:bb:37:e7:68:5b:f9:2d:
         5c:7e:ba:70:48:ff:fd:a3:3b:d9:55:1e:61:5c:e2:79:80:27:
         d3:ca:a7:9d:5c:0c:ca:c6:52:1c:48:87:14:46:53:e6:1e:67:
         9c:bb:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:09:49 2025 by rpki-client