Manifest

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
File:                     60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft (raw, json)
Hash identifier:          hCDG9CIRkLG8yD6QwcbDa1WyMIjFoDMGjHRIzKo4TxE=
Subject key identifier:   9F:26:1C:AE:06:40:E2:8F:81:88:A8:38:32:E8:A9:3C:42:21:2F:26
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       2C1CD456CF9083C925F0B1DA33B4897942B7C57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
Manifest number:          0A17
Signing time:             Mon 09 Jun 2025 12:13:14 +0000
Manifest this update:     Mon 09 Jun 2025 12:08:14 +0000
Manifest next update:     Tue 10 Jun 2025 14:44:14 +0000
Files and hashes:         1: 326130633a343230303a3a2f32392d3239203d3e203438313132.roa (hash: sEjCW9FJODOwAuOa2xQ3EDOMzihAxD3E/nw+qW1SfX4=)
                          2: 326130623a326630363a3a2f33322d3332203d3e203438313132.roa (hash: md7uFM5p/9W45NXls5uuNZrJh2ilTa904DU4ZbzFaNU=)
                          3: 3138352e3137332e31362e302f32342d3234203d3e203438313132.roa (hash: TnP6eE1t/zMtuUMEl9bQLKU4fgP5RunUklgeQzdLufg=)
                          4: 34352e38392e3136342e302f32322d3232203d3e203438313132.roa (hash: hbh53rxHnDmHz2PEcqyVvOfOMwcm1fPOEzvMYdyhpnk=)
                          5: 39312e3230372e3132302e302f32332d3233203d3e203438313132.roa (hash: yRLQuMM5sTdiR8PKZYKlDIMgkV5pLcjIiqQes0FZF7o=)
                          6: 326130623a326630343a3a2f33312d3331203d3e203438313132.roa (hash: QIqWkj5VvKF7jTZ6xlPBpF4MVG4UANJEg8WKZyVJJQE=)
                          7: 323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa (hash: ckxFlkUrwseQ64/bSwyLjoUis4D774a0XcJ8Ix8hzzQ=)
                          8: 39312e3230372e3132302e302f32342d3234203d3e203537393834.roa (hash: zXxEPlLfnpKqQtuwjkfDhQUfZACOdk3GUxGA9Tw62xU=)
                          9: 3138352e3137332e31392e302f32342d3234203d3e203438313132.roa (hash: cG8qee8BRQIYLCyibaAX1PHDmMwKpglwXEp4OsS7dN8=)
                          10: 326130623a326630323a3a2f33312d3331203d3e203438313132.roa (hash: kPNbprDfP7R3YI814to1qpd5BgqC3H3j2fliaY8aGTA=)
                          11: 326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa (hash: 5TC/USmUMX9oxnG7iHXL8gGk0KxLwbsQuFwa0LfQqdc=)
                          12: 3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa (hash: uHijyOj9mpYymEff+10q95GQh8xsBMKRFz+GAKcUqeQ=)
                          13: 326130623a326630313a3a2f33322d3332203d3e203438313132.roa (hash: juccWl4druAekCdBgUUi3faMtBunmQNpwr83OEUZN7Q=)
                          14: 326130623a326630303a3a2f33322d3332203d3e203438313132.roa (hash: 57CW4xp8STDXfYck9c87XtU7ItSmlNQK/Zt9V6rKWQ4=)
                          15: 3138352e3137332e31362e302f32322d3232203d3e203438313132.roa (hash: RJ6zQFFgjy5ZrMju20xXDZ9RhX9kOOtdwEz+ZKuH1mI=)
                          16: 326130623a326630373a3a2f33322d3332203d3e203438313132.roa (hash: OZROTfVzOMELBiCwDmyAcEVZZhDAo+UD5eSklXATVaw=)
                          17: 39312e3230382e3137392e302f32342d3234203d3e203339303032.roa (hash: ILTeOsOlof1ixvEufZA9hjiO7/Gwvo8Q+3QCtH7z6x8=)
                          18: 39312e3230382e3137392e302f32342d3234203d3e203438313132.roa (hash: QWFc5480xuiX2B7iah8qYuNsztcVExs4709s2eR0koA=)
                          19: AS39002.asa (hash: hEB8BBdYVlo72zx+ljFUNEeMeK+wTDG+bdunzLzWuR8=)
                          20: 60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl (hash: P/5HJU2rh0srZFbTICI9sfL8kL3uGZxmPGW6t6uMTJc=)
                          21: 326130623a326630303a3a2f32392d3239203d3e203438313132.roa (hash: 6cZk2iLRKJZ69rak5PT6lStxMVt+r2zAJHGB1jXAUvU=)
                          22: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (hash: 4rWkDGFZwlZnGiY5TGjlIW0R8uQkkzmbz9kWTJR/nwI=)
                          23: AS57984.asa (hash: c6o9mQXDX7r8ndXCzweFPoBzRzZahx3y4GZLdP99P44=)
                          24: 3138352e3137332e31372e302f32342d3234203d3e203438313132.roa (hash: vTLdA1RUelryYTN2UgjGCNXATOBrRDvTHGrG2KRmKTs=)
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 14:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1c:d4:56:cf:90:83:c9:25:f0:b1:da:33:b4:89:79:42:b7:c5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jun  9 12:08:14 2025 GMT
            Not After : Jun 10 14:44:14 2025 GMT
        Subject: CN=9F261CAE0640E28F8188A83832E8A93C42212F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:a2:e0:77:92:17:ad:26:99:2a:f7:28:38:
                    ca:5d:e5:04:07:a4:9a:7a:64:eb:dd:1e:c2:3c:90:
                    92:17:56:c7:f8:47:5b:d6:9e:48:27:2d:c9:11:f7:
                    9e:35:60:9e:73:29:5a:e9:c2:d6:77:04:d3:1d:14:
                    90:f3:9a:c1:8f:1d:af:42:6a:ed:8b:18:52:0b:cc:
                    3a:a0:65:f4:51:e6:1f:a3:6b:19:3a:f7:df:b3:a4:
                    60:3a:15:f2:dc:f5:f6:2f:1a:be:ac:20:59:c7:af:
                    4c:d5:71:95:a6:3d:4d:0e:c9:f2:01:12:22:dc:b4:
                    a3:fc:3b:4d:04:c8:47:e4:f7:f4:d2:41:ca:0d:6d:
                    a5:8e:54:48:69:b2:b6:c6:8c:f8:ef:ac:c4:96:4b:
                    ef:e0:11:ab:32:f3:cf:fa:41:cf:41:98:9c:65:36:
                    5e:10:4b:19:9c:a3:22:c9:26:2c:4d:65:6d:d9:b2:
                    97:92:90:9d:1f:55:03:b6:88:10:4c:3c:3d:61:dd:
                    2e:05:d1:33:d6:e4:f0:49:16:85:86:e3:a8:05:de:
                    68:17:e9:ed:e9:7d:cd:42:1e:6b:fe:e9:96:4d:ba:
                    6b:fc:b1:26:73:cf:c0:1b:94:93:0b:a7:47:dc:0d:
                    a6:f8:56:c1:2b:1a:02:f5:ad:e9:86:4c:61:74:6a:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:1C:AE:06:40:E2:8F:81:88:A8:38:32:E8:A9:3C:42:21:2F:26
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6f:57:2f:43:b0:1f:31:94:e6:96:80:da:55:e9:ce:bb:65:
         35:31:bc:1e:b1:2a:49:1e:d9:3f:a1:53:84:c1:bc:20:a6:01:
         a7:0b:bc:ec:a5:e0:96:f3:ea:3b:1e:f0:6c:4e:b5:5e:d7:c2:
         38:29:78:ed:51:85:b6:28:e6:f2:23:17:bd:ea:cf:6e:b5:0c:
         de:02:fa:0a:ce:a4:f8:bc:78:70:b1:89:32:f4:76:2b:20:b9:
         72:78:cb:f3:19:1b:70:c6:01:00:9d:55:71:eb:c0:23:c3:c7:
         1e:df:4a:58:93:14:90:74:61:26:6a:a2:cf:32:f3:3d:a6:db:
         ca:bf:65:70:37:92:d0:0b:37:5b:93:c6:a3:6b:84:5d:38:86:
         93:47:10:12:68:a4:f4:8e:9b:6c:90:03:7b:0e:82:71:74:5e:
         42:8e:4e:c6:42:c7:fd:41:4b:8d:64:c6:48:39:bb:d8:aa:df:
         fc:4c:45:c3:54:1f:7d:3e:db:de:73:13:a2:f5:fc:62:64:d6:
         d1:d9:89:ef:07:65:b8:ff:58:5a:fe:0e:8d:42:49:9a:bc:62:
         0d:fc:6d:26:c3:d7:96:da:ce:34:42:2f:a6:21:e4:29:3e:f7:
         ea:ac:7d:b8:9f:65:fd:30:1f:76:7c:f7:a9:46:78:15:30:0b:
         83:2c:5a:de
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIULBzUVs+Qg8kl8LHaM7SJeUK3xX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxODMyODdlYjA4ZWNlMGM2NWZhNDlhM2Y0NTYyMWM2
MTJkZGJkMTAeFw0yNTA2MDkxMjA4MTRaFw0yNTA2MTAxNDQ0MTRaMDMxMTAvBgNV
BAMTKDlGMjYxQ0FFMDY0MEUyOEY4MTg4QTgzODMyRThBOTNDNDIyMTJGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8KLgd5IXrSaZKvcoOMpd5QQH
pJp6ZOvdHsI8kJIXVsf4R1vWnkgnLckR9541YJ5zKVrpwtZ3BNMdFJDzmsGPHa9C
au2LGFILzDqgZfRR5h+jaxk699+zpGA6FfLc9fYvGr6sIFnHr0zVcZWmPU0OyfIB
EiLctKP8O00EyEfk9/TSQcoNbaWOVEhpsrbGjPjvrMSWS+/gEasy88/6Qc9BmJxl
Nl4QSxmcoyLJJixNZW3ZspeSkJ0fVQO2iBBMPD1h3S4F0TPW5PBJFoWG46gF3mgX
6e3pfc1CHmv+6ZZNumv8sSZzz8AblJMLp0fcDab4VsErGgL1remGTGF0auI7AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUnyYcrgZA4o+BiKg4MuipPEIhLyYwHwYDVR0j
BBgwFoAUYBgyh+sI7ODGX6SaP0ViHGEt29EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS54aW5kaS5ldS9yZXBvL1hJTkRJLzAv
NjAxODMyODdFQjA4RUNFMEM2NUZBNDlBM0Y0NTYyMUM2MTJEREJEMS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL1lCZ3loLXNJN09ER1g2U2FQMFZpSEdFdDI5RS5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3Jwa2kueGlu
ZGkuZXUvcmVwby9YSU5ESS8wLzYwMTgzMjg3RUIwOEVDRTBDNjVGQTQ5QTNGNDU2
MjFDNjEyRERCRDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFb1cvQ7AfMZTmloDaVenOu2U1MbwesSpJ
Htk/oVOEwbwgpgGnC7zspeCW8+o7HvBsTrVe18I4KXjtUYW2KObyIxe96s9utQze
AvoKzqT4vHhwsYky9HYrILlyeMvzGRtwxgEAnVVx68Ajw8ce30pYkxSQdGEmaqLP
MvM9ptvKv2VwN5LQCzdbk8aja4RdOIaTRxASaKT0jptskAN7DoJxdF5Cjk7GQsf9
QUuNZMZIObvYqt/8TEXDVB99PtvecxOi9fxiZNbR2YnvB2W4/1ha/g6NQkmavGIN
/G0mw9eW2s40Qi+mIeQpPvfqrH24n2X9MB92fPepRngVMAuDLFre
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:31:13 2025 by rpki-client