Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          hvcFDe/LwuitPnaage055nBcAPc087ZOEu92Qp9SjCc=
Subject key identifier:   19:F7:AD:74:4F:1D:44:15:94:AF:A6:B8:9F:51:35:37:7C:35:EF:6B
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019763CC423FE23E07B2A81FC1C11D955FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          15A8
Signing time:             Thu 12 Jun 2025 11:00:20 +0000
Manifest this update:     Thu 12 Jun 2025 11:00:20 +0000
Manifest next update:     Fri 13 Jun 2025 11:00:20 +0000
Files and hashes:         1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=)
                          2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=)
                          3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=)
                          4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=)
                          5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=)
                          6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=)
                          7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=)
                          8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=)
                          9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: 5CLwBr8ZBSlZSg0MAGztAxQLQq8k7PxX5D5+FoLKUnY=)
                          11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=)
                          12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
                          13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=)
                          14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=)
                          15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
                          16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:cc:42:3f:e2:3e:07:b2:a8:1f:c1:c1:1d:95:5f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Jun 12 11:00:20 2025 GMT
            Not After : Jun 13 11:00:20 2025 GMT
        Subject: CN=19f7ad744f1d441594afa6b89f5135377c35ef6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:7e:42:16:91:9d:96:75:b9:5f:9e:10:80:
                    d4:7a:01:5d:85:0d:d7:2a:ad:ee:db:fd:0d:45:5a:
                    c9:9a:9f:bc:e2:80:f9:8c:ff:92:a6:29:e9:47:7a:
                    ce:0a:6f:a8:26:32:50:37:21:5f:0a:42:2a:38:29:
                    ae:e2:b8:95:88:24:82:83:8a:79:a8:a9:fb:fc:83:
                    58:6f:1d:a9:71:3d:18:0a:7e:39:8a:35:47:37:09:
                    db:59:1a:b3:d8:6d:49:22:27:24:3a:7d:eb:51:5a:
                    8c:96:94:6e:97:b3:75:a3:f2:ed:d2:97:3e:1b:1f:
                    67:bc:df:cd:5d:e6:a3:2d:f1:9d:98:a4:b8:c3:41:
                    f6:8d:f7:81:89:d9:4b:ed:4b:9c:ca:c0:b2:7c:5f:
                    8c:e2:e9:3e:54:ab:16:f4:b9:7e:d4:c9:71:de:c1:
                    1b:23:24:4b:9f:4b:08:7e:4f:c3:2d:ea:29:53:42:
                    ea:d2:c3:6e:22:0c:6a:01:06:fe:ec:92:bf:78:b1:
                    dc:25:97:59:e9:56:7c:89:d9:27:aa:54:bb:d9:1e:
                    d9:55:66:b3:44:2f:ac:83:cb:ce:39:d2:46:37:11:
                    cd:5c:22:0d:74:80:d7:23:da:3c:aa:53:cd:95:cf:
                    1b:e3:d7:5a:6e:26:54:5a:10:a7:45:88:fa:a5:b1:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:AD:74:4F:1D:44:15:94:AF:A6:B8:9F:51:35:37:7C:35:EF:6B
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:5f:d3:c3:fc:e3:cb:a2:73:b1:31:43:17:c4:eb:62:1e:
         c9:5d:15:d3:9e:79:60:bb:cf:ea:c8:6b:25:97:33:69:13:9f:
         c1:f5:93:09:8a:e9:d3:93:a8:20:bf:95:fb:89:c4:66:ca:c5:
         45:96:7e:b9:72:77:74:03:3d:e0:c8:9f:dc:bb:12:1b:70:61:
         a9:36:ef:35:55:9b:a9:c4:3e:c2:5a:d7:c8:fc:70:09:d6:fe:
         1c:eb:5a:87:6b:33:01:17:88:6f:64:68:60:49:c0:7c:77:de:
         b5:fa:b5:f0:e1:b9:0d:36:7a:ec:30:2e:82:5f:61:2e:b4:bf:
         3d:05:90:46:57:d4:eb:d8:a3:b0:e3:3c:8e:57:56:08:39:5b:
         e5:61:b9:09:87:52:e0:e2:db:33:94:c6:f1:11:f2:8c:c0:9e:
         58:cb:64:16:c1:60:c6:88:cc:47:0a:7f:01:f2:17:54:fd:97:
         d7:8f:a1:5a:1e:f6:0a:5c:a0:1d:23:45:20:55:7a:65:38:3e:
         65:37:20:d0:b3:9c:87:87:c2:34:59:5a:25:b0:88:95:f3:31:
         4d:b6:cc:2a:0a:98:76:1d:d0:06:79:60:d3:99:bc:6f:11:80:
         df:96:d5:1d:06:a6:e7:90:f3:a0:73:d1:b7:71:5c:e2:2d:9e:
         71:f1:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:53:47 2025 by rpki-client