Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          pMVGqIWRK65f7nkFAuqQw8QVRxuJpACOy86V0IGFWRo=
Subject key identifier:   36:38:96:5D:6D:8B:30:65:96:DB:BE:68:77:91:A2:77:14:C2:48:4E
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       019741AE94B2DEF9AA93987941E9E0375948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          1583
Signing time:             Thu 05 Jun 2025 20:00:49 +0000
Manifest this update:     Thu 05 Jun 2025 20:00:49 +0000
Manifest next update:     Fri 06 Jun 2025 20:00:49 +0000
Files and hashes:         1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=)
                          2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=)
                          3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=)
                          4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=)
                          5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=)
                          6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=)
                          7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=)
                          8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=)
                          9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=)
                          10: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=)
                          11: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (hash: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=)
                          12: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=)
                          13: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=)
                          14: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=)
                          15: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=)
                          16: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=)
                          17: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=)
                          18: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=)
                          19: PTnNClWHp1d--BUxbWLDjKFgR4k.roa (hash: Yk+rKEpa0bWVY6yPPIw9uodRmdnQbnqYhCRKjGuB+uA=)
                          20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=)
                          21: Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa (hash: M7l/qsGDZqsfsCy3P3qXjnQMiv57RlRkHNf7JU+oLbI=)
                          22: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=)
                          23: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=)
                          24: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=)
                          25: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=)
                          26: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=)
                          27: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=)
                          28: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=)
                          29: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=)
                          30: ax-rFfxzuS70EDlTYH9V_s95_1k.roa (hash: No066zTAnofxIrnWO37cHRdDuGWjMPdRY7sfnOCfJs8=)
                          31: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=)
                          32: kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa (hash: OvdkZzlx4GDhrRDRIhoTB0lqGB519lq0sYMZBqzO8uc=)
                          33: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=)
                          34: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=)
                          35: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=)
                          36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: P0MyVyVlqeSKCsBfE/M5ISxJg7yleCQzs5nZRnyFqX8=)
                          37: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:ae:94:b2:de:f9:aa:93:98:79:41:e9:e0:37:59:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jun  5 20:00:49 2025 GMT
            Not After : Jun  6 20:00:49 2025 GMT
        Subject: CN=3638965d6d8b306596dbbe687791a27714c2484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:be:a8:dd:d3:44:0b:4a:ea:48:13:6d:51:
                    cf:7b:bf:66:7e:60:6b:89:e4:25:1b:a2:80:e5:c7:
                    1d:29:46:15:7c:cd:16:7c:3a:b0:93:58:9e:1b:e2:
                    2b:07:6b:7e:8d:63:df:ce:b3:88:6a:24:dc:76:d3:
                    0a:5c:1a:e0:f4:89:df:c4:97:1e:25:96:84:d2:d6:
                    6c:8a:f6:ec:27:07:3a:ac:02:9c:af:be:f5:b8:f6:
                    19:34:b5:cc:e0:4b:2a:09:ac:e3:0c:aa:4e:b0:67:
                    d7:06:5f:7a:fe:19:62:08:0b:0d:cc:58:d3:34:17:
                    73:38:d3:09:2e:39:df:d7:b0:ad:d2:0f:c3:13:e8:
                    34:a1:c2:0a:e5:ce:af:fc:b4:ec:ca:bf:61:6d:82:
                    06:82:35:14:1a:22:c8:09:1a:17:5b:82:36:90:b8:
                    9d:f7:45:f8:9a:be:f2:a7:25:a6:5d:19:43:c7:db:
                    81:13:77:6f:fb:d3:26:ed:1b:ca:78:c9:a8:a7:f3:
                    fc:e8:d6:88:1a:11:f1:d2:d4:03:39:75:73:49:b0:
                    54:1b:41:4b:58:43:66:37:c9:15:b9:28:fc:0e:01:
                    df:68:e7:82:89:62:1b:d5:8a:b3:8e:b1:90:23:55:
                    54:81:42:bf:61:eb:8f:fa:76:ea:09:e2:47:d7:de:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:38:96:5D:6D:8B:30:65:96:DB:BE:68:77:91:A2:77:14:C2:48:4E
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:56:60:df:91:ca:54:90:58:de:8c:b3:a7:2e:50:f0:81:3e:
         0a:67:2a:6d:02:e1:21:12:35:83:94:49:7c:90:70:ea:1b:c1:
         8b:99:ce:b6:a6:06:be:e9:96:67:a5:42:2f:22:b1:fb:6f:02:
         d2:87:97:3e:a1:b0:54:8b:fd:f7:5b:07:95:f8:16:a9:a3:07:
         08:3d:a9:64:0b:a2:32:b1:08:c3:fa:48:3c:f4:3b:a5:21:e2:
         21:41:a8:22:43:c7:53:a2:73:78:f6:69:88:32:23:21:dc:8e:
         72:98:a7:63:b3:c7:7a:3c:76:42:09:1e:97:3f:56:89:9a:bf:
         49:85:d1:da:81:04:ac:32:37:50:23:fe:67:02:97:17:b2:f6:
         96:3d:dd:06:ff:a2:0d:e7:ba:1f:95:37:b1:bb:bc:de:3c:a2:
         f1:26:37:fe:5e:5a:a4:62:5b:de:40:69:56:f7:bc:c8:34:b2:
         56:b0:c7:0d:ea:90:c6:65:f9:00:8a:35:8e:e1:f9:25:f6:0e:
         bb:10:78:02:42:2b:94:c2:15:fb:54:d4:57:00:a2:69:24:85:
         d7:5f:f3:aa:98:be:1d:cf:03:b8:27:8b:32:8d:a9:d2:a8:0f:
         25:3a:d6:ce:b7:c0:0e:a9:33:4f:7f:0b:90:fd:8c:c7:b3:8c:
         4a:46:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:00:14 2025 by rpki-client