Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          JgOZCJa3+Bpz19/XFVmU4bQBx1ieXZjwYDwDsn4H2bE=
Subject key identifier:   9A:F0:19:B5:DE:92:D9:79:56:9A:64:99:3D:5F:8B:1E:6A:99:D1:A9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       01975459919069F4089EB7AF924CD3429B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          15A0
Signing time:             Mon 09 Jun 2025 11:00:45 +0000
Manifest this update:     Mon 09 Jun 2025 11:00:45 +0000
Manifest next update:     Tue 10 Jun 2025 11:00:45 +0000
Files and hashes:         1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=)
                          2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=)
                          3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=)
                          4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=)
                          5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=)
                          6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=)
                          7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=)
                          8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=)
                          9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: JJ/2dN7AhZj4AZOZPwbKxPXxPkz1+lkVjcI5yDQGj9Q=)
                          11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=)
                          12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
                          13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=)
                          14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=)
                          15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
                          16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:59:91:90:69:f4:08:9e:b7:af:92:4c:d3:42:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Jun  9 11:00:45 2025 GMT
            Not After : Jun 10 11:00:45 2025 GMT
        Subject: CN=9af019b5de92d979569a64993d5f8b1e6a99d1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:e1:36:aa:94:1a:b7:a3:45:5a:bd:0b:40:
                    15:46:4c:6e:ae:39:66:6b:39:e6:f7:57:1f:41:09:
                    91:e0:6a:9c:75:50:7b:d9:81:c8:52:1e:16:25:7d:
                    06:b6:6c:f1:fe:d2:52:2a:7b:e2:e5:81:36:a6:80:
                    ee:fd:67:4e:26:3b:fc:32:0d:57:b9:3b:d3:3f:40:
                    df:7b:3c:25:54:f6:ce:91:16:a7:25:19:61:ad:eb:
                    73:55:fc:fe:8f:8f:9e:b7:bc:76:26:b8:db:48:97:
                    65:0f:c5:71:21:b3:dd:46:ec:57:20:98:00:78:18:
                    44:ff:ba:ef:ba:68:7f:b1:1d:6f:0c:d3:62:b6:7e:
                    9c:6e:00:f5:72:13:d0:f9:70:b9:cf:d5:3c:86:b4:
                    38:66:ce:50:f9:b2:11:5b:4c:75:46:47:81:05:54:
                    33:e4:2b:91:cd:4c:b4:ab:a2:ac:c7:28:38:45:a0:
                    a4:be:13:e0:8f:a8:0e:5c:19:c6:e9:45:d4:40:b0:
                    8a:3f:b6:1b:e5:29:22:bf:ee:42:71:74:0c:c6:84:
                    35:77:fe:8f:ad:74:0d:e1:12:37:5d:95:1e:ce:57:
                    90:d5:26:e6:44:38:14:29:37:fa:4d:11:1c:f7:b7:
                    61:9d:07:45:51:a3:62:21:d9:b0:b1:b0:c6:62:8e:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:19:B5:DE:92:D9:79:56:9A:64:99:3D:5F:8B:1E:6A:99:D1:A9
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:fa:ed:11:28:8b:44:93:64:74:6d:1e:76:46:8d:6b:6b:
         29:46:4c:96:85:52:05:44:71:b4:ab:7b:7b:a4:ff:f1:44:e5:
         92:a2:c0:96:4d:dd:ce:89:9b:79:c7:f1:cb:a9:96:5b:8b:6a:
         40:f5:de:96:eb:68:e3:b9:30:f6:04:64:b2:63:f4:e1:95:9e:
         5a:fe:a5:2c:f6:f0:e5:79:47:c6:61:e8:8c:3b:5d:ca:a7:75:
         cd:4e:8a:d9:2b:41:70:87:9c:d1:43:27:0c:03:59:0f:d8:f0:
         29:c5:64:4d:7e:75:75:f1:70:8e:c7:c8:3e:57:5c:db:e5:24:
         9e:fb:dc:26:77:cc:79:48:e9:82:cc:02:ea:0e:ae:a0:44:d4:
         b3:ab:2e:6a:f8:04:56:1c:95:b0:fc:bb:03:95:c9:df:d8:5c:
         15:80:71:01:e1:42:32:79:4e:3e:31:3b:2c:96:ea:76:50:47:
         29:9f:5b:16:cb:0c:f0:cb:16:8f:28:ef:f4:47:7b:91:50:af:
         57:80:1c:b2:8a:3e:29:87:16:d4:aa:15:39:72:e9:81:bf:c4:
         ce:8d:69:e2:a5:a5:c9:6d:fa:2f:a3:54:bb:03:4e:d7:cb:4c:
         2e:ad:13:2e:dc:57:3b:cb:2f:64:bb:83:57:ad:4d:22:e3:19:
         66:12:05:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUWZGQafQInrevkkzTQptCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjUwNjA5MTEwMDQ1WhcNMjUwNjEwMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg5YWYwMTliNWRlOTJkOTc5NTY5YTY0OTkzZDVmOGIxZTZhOTlkMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jhNqqUGrejRVq9C0AVRkxurjlm
aznm91cfQQmR4GqcdVB72YHIUh4WJX0Gtmzx/tJSKnvi5YE2poDu/WdOJjv8Mg1X
uTvTP0DfezwlVPbOkRanJRlhretzVfz+j4+et7x2JrjbSJdlD8VxIbPdRuxXIJgA
eBhE/7rvumh/sR1vDNNitn6cbgD1chPQ+XC5z9U8hrQ4Zs5Q+bIRW0x1RkeBBVQz
5CuRzUy0q6Ksxyg4RaCkvhPgj6gOXBnG6UXUQLCKP7Yb5Skiv+5CcXQMxoQ1d/6P
rXQN4RI3XZUezleQ1SbmRDgUKTf6TREc97dhnQdFUaNiIdmwsbDGYo6D3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrwGbXektl5VppkmT1fix5qmdGpMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx767REo
i0STZHRtHnZGjWtrKUZMloVSBURxtKt7e6T/8UTlkqLAlk3dzombecfxy6mWW4tq
QPXeluto47kw9gRksmP04ZWeWv6lLPbw5XlHxmHojDtdyqd1zU6K2StBcIec0UMn
DANZD9jwKcVkTX51dfFwjsfIPldc2+UknvvcJnfMeUjpgswC6g6uoETUs6suavgE
VhyVsPy7A5XJ39hcFYBxAeFCMnlOPjE7LJbqdlBHKZ9bFssM8MsWjyjv9Ed7kVCv
V4Acsoo+KYcW1KoVOXLpgb/Ezo1p4qWlyW36L6NUuwNO18tMLq0TLtxXO8svZLuD
V61NIuMZZhIF2g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:27 2025 by rpki-client