Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          YKZJhTZVhu64TqGbCVVDXVfSqAWEhfYNj4xfuNvNT/k=
Subject key identifier:   F0:B1:E3:C9:2E:83:8B:BF:C9:64:D8:D7:32:E5:57:15:45:FE:DA:7A
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019649D8740AF369EFB3C84C950007E1B67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          1516
Signing time:             Fri 18 Apr 2025 17:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:44 +0000
Files and hashes:         1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=)
                          2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=)
                          3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=)
                          4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=)
                          5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=)
                          6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=)
                          7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=)
                          8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=)
                          9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: LVqNiIYq1GPQH/dCMMTYYzGwEI7rirfTDhmatpCaaG0=)
                          11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=)
                          12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
                          13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=)
                          14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=)
                          15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
                          16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:74:0a:f3:69:ef:b3:c8:4c:95:00:07:e1:b6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Apr 18 17:00:44 2025 GMT
            Not After : Apr 19 17:00:44 2025 GMT
        Subject: CN=f0b1e3c92e838bbfc964d8d732e5571545feda7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:8c:7f:bb:72:75:e3:b9:32:66:39:6c:2f:
                    e7:4c:41:36:e3:0c:78:b5:9c:67:2b:28:f9:4b:05:
                    c6:fe:6a:6b:b1:23:77:e5:2c:c2:ac:95:71:25:cf:
                    ec:8a:5c:12:f7:a8:8a:a4:e0:f2:ec:61:e3:05:1b:
                    ae:38:50:ef:0f:de:86:cf:1a:53:fc:33:30:bb:b5:
                    c3:eb:b2:f9:8b:9e:9d:93:38:e8:ff:62:ad:70:01:
                    24:21:7d:2f:e1:9d:85:c9:ac:89:77:e7:a1:98:6b:
                    6c:56:30:76:8d:9c:22:9e:03:5b:c8:cd:07:e6:79:
                    d2:2a:2f:76:35:07:34:0b:dd:0c:f0:04:74:9d:83:
                    25:25:24:3f:94:60:a3:bd:16:b6:ff:63:34:fd:d0:
                    58:2a:2c:ef:bb:cd:71:82:73:33:28:a1:0a:82:61:
                    4c:92:eb:31:9b:37:4a:34:d4:d4:a1:6d:e5:7c:5d:
                    5b:1d:f0:4d:6b:30:98:99:70:29:8e:33:b2:3a:94:
                    72:f2:c9:0b:90:26:f3:ec:89:f8:1b:c0:a1:d4:ce:
                    bc:35:de:65:23:68:cc:6c:c7:1c:f2:1f:b0:57:c5:
                    ec:ee:30:e2:6a:c4:58:df:32:87:78:ff:d2:94:ea:
                    92:49:a2:78:f5:fb:bb:69:5b:5b:81:61:ff:c9:e8:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:E3:C9:2E:83:8B:BF:C9:64:D8:D7:32:E5:57:15:45:FE:DA:7A
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:61:30:98:2a:1c:df:41:2e:c5:32:21:58:b6:2f:99:d7:58:
         87:05:04:9c:a3:52:7a:fc:07:86:ba:27:65:e1:47:f3:b3:22:
         25:04:ab:4b:04:68:f8:db:b2:83:e1:88:1f:16:c3:51:9c:16:
         d6:91:c7:01:ce:57:db:85:3c:9a:0d:51:3c:88:b2:c2:c4:95:
         98:d1:ac:80:d5:ed:67:af:85:03:93:16:19:d8:38:56:5f:d1:
         14:0b:fd:4a:14:7f:66:6e:9f:37:03:a0:2d:08:42:cb:3b:c8:
         26:a9:d2:f9:73:55:46:2b:4b:7f:1d:5f:2c:ac:0a:5f:d4:f8:
         58:64:91:9e:86:a1:95:f2:00:33:2b:e5:25:45:81:3f:da:c8:
         f1:d7:4c:fc:57:2a:d3:13:97:75:62:f1:c7:de:06:4e:50:59:
         c0:5a:a1:98:ef:ce:38:86:47:80:5f:41:38:7d:60:c0:d4:71:
         94:5b:17:62:46:49:54:56:a9:7c:0e:69:22:12:d0:b8:0d:98:
         bd:cd:55:00:ac:08:a7:ef:3f:e9:33:af:80:fd:51:d5:b9:c7:
         da:76:b9:10:f1:b0:c7:72:00:7d:98:be:ce:53:c3:38:43:25:
         d9:b2:aa:3f:76:a3:c5:35:a8:56:a1:f4:00:9f:7c:f0:a2:20:
         b0:d6:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:39 2025 by rpki-client