Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File:                     XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier:          lKCTQtgCO21kL9+C1Ks7uWvnar6X4s46Au28dbFwKd4=
Subject key identifier:   1E:39:7E:76:21:84:AB:0F:92:AF:D7:53:A1:6C:E6:FF:05:9A:45:14
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer:       /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial:       01976BF440D179AC5EE224D90C5389DF5A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number:          61
Signing time:             Sat 14 Jun 2025 01:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:58 +0000
Files and hashes:         1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=)
                          2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: HHDkvNMhCvnPDLTbe3sTZscEUhp3Dchcl9W83rCtTH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:40:d1:79:ac:5e:e2:24:d9:0c:53:89:df:5a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
        Validity
            Not Before: Jun 14 01:00:58 2025 GMT
            Not After : Jun 15 01:00:58 2025 GMT
        Subject: CN=1e397e762184ab0f92afd753a16ce6ff059a4514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:8d:b4:df:d1:71:46:96:d4:b7:fc:42:88:
                    0e:b0:d4:9b:aa:2e:91:f1:62:45:ce:a9:21:f0:99:
                    6b:87:bf:51:9f:5c:66:24:76:15:83:b6:2a:b3:3e:
                    35:65:41:63:b0:d8:a4:7c:12:50:fe:c9:95:04:85:
                    ed:78:e3:a8:cf:6a:bf:da:d1:08:f9:6f:88:a1:73:
                    b5:82:ed:10:11:9e:c5:06:65:01:87:ef:93:d0:b9:
                    cc:eb:df:05:19:6c:b2:b6:da:98:d7:81:8d:0f:63:
                    64:1c:dd:1f:4d:7f:29:24:d7:09:fe:60:6b:de:df:
                    10:57:7c:98:fa:b0:ca:bd:d9:a0:52:65:08:ff:7c:
                    72:2a:74:9c:a2:58:49:8c:8f:a2:b6:37:98:75:e9:
                    26:b2:9e:14:0b:a2:fa:42:99:d0:55:8e:de:cd:6a:
                    42:f3:bb:27:79:92:ea:71:cd:5d:d5:89:2a:8c:89:
                    81:87:f7:7f:ad:ed:18:f4:eb:3a:e2:48:03:b1:f2:
                    d7:eb:3f:55:80:75:10:3c:2e:ec:c2:b1:0b:3e:40:
                    fc:67:39:88:44:37:83:9c:83:46:ef:b9:84:52:38:
                    40:da:0b:7e:19:9f:40:ae:dd:7f:c9:5e:c3:b8:d7:
                    07:b8:ca:2b:9c:a5:ed:28:98:a2:55:69:94:cb:87:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:7E:76:21:84:AB:0F:92:AF:D7:53:A1:6C:E6:FF:05:9A:45:14
            X509v3 Authority Key Identifier:
                keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:78:ff:a9:f5:11:a2:ed:d9:1c:80:1f:ef:a5:c9:53:69:83:
         49:f8:de:b2:8b:6e:7e:96:ab:76:28:79:69:a6:5b:d7:be:39:
         34:56:34:cf:8a:e1:f7:ca:6d:84:5c:b3:7e:8b:24:9b:7b:e2:
         5f:dd:a9:ef:c3:62:56:00:3d:63:d2:ea:23:00:17:23:25:20:
         a5:f8:1e:f4:cb:95:9d:1b:f3:40:d6:1a:fd:ab:68:84:76:f4:
         0d:97:3d:96:69:91:78:21:4c:98:6f:4c:d6:47:2a:a9:6d:8f:
         5e:e5:fb:5d:94:ba:a1:e4:b6:30:a4:1e:7c:b8:a8:e2:aa:24:
         10:07:e4:5c:e8:f8:a0:66:25:33:f3:7c:e0:14:fa:3e:43:a7:
         06:b4:8b:5c:8f:1e:5b:c8:19:f9:be:36:bd:86:11:08:33:71:
         6b:bf:ea:22:5b:a0:ff:f3:88:71:5b:10:e6:ce:75:92:4b:04:
         f4:c1:bc:97:2f:d4:6e:53:53:7c:48:65:95:dc:2c:4b:01:19:
         b6:6f:34:8c:3e:a7:7d:d2:9b:be:ed:cb:54:fb:6c:84:0a:44:
         c5:78:19:9e:02:39:74:1e:b2:77:80:f8:2b:43:5f:ea:bc:2e:
         d1:9d:f1:d7:47:b6:f5:68:72:80:c1:d6:a3:ce:51:81:a8:b5:
         68:79:f5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9EDReaxe4iTZDFOJ31oOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzE5NmRjNWY0MGY5NmQyZGU2Nzk5ZGM3NzFiYWEzYjUz
ZGNkODIwHhcNMjUwNjE0MDEwMDU4WhcNMjUwNjE1MDEwMDU4WjAzMTEwLwYDVQQD
EygxZTM5N2U3NjIxODRhYjBmOTJhZmQ3NTNhMTZjZTZmZjA1OWE0NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzECNtN/RcUaW1Lf8QogOsNSbqi6R
8WJFzqkh8Jlrh79Rn1xmJHYVg7Yqsz41ZUFjsNikfBJQ/smVBIXteOOoz2q/2tEI
+W+IoXO1gu0QEZ7FBmUBh++T0LnM698FGWyyttqY14GND2NkHN0fTX8pJNcJ/mBr
3t8QV3yY+rDKvdmgUmUI/3xyKnScolhJjI+itjeYdekmsp4UC6L6QpnQVY7ezWpC
87sneZLqcc1d1YkqjImBh/d/re0Y9Os64kgDsfLX6z9VgHUQPC7swrELPkD8ZzmI
RDeDnING77mEUjhA2gt+GZ9Art1/yV7DuNcHuMornKXtKJiiVWmUy4dU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB45fnYhhKsPkq/XU6Fs5v8FmkUUMB8GA1UdIwQY
MBaAFFxxltxfQPltLeZ5ncdxuqO1Pc2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMt
YzUyYjVkZDBlN2FjLzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMtYzUyYjVkZDBlN2Fj
LzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHj/qfUR
ou3ZHIAf76XJU2mDSfjesotufpardih5aaZb1745NFY0z4rh98pthFyzfoskm3vi
X92p78NiVgA9Y9LqIwAXIyUgpfge9MuVnRvzQNYa/atohHb0DZc9lmmReCFMmG9M
1kcqqW2PXuX7XZS6oeS2MKQefLio4qokEAfkXOj4oGYlM/N84BT6PkOnBrSLXI8e
W8gZ+b42vYYRCDNxa7/qIlug//OIcVsQ5s51kksE9MG8ly/UblNTfEhlldwsSwEZ
tm80jD6nfdKbvu3LVPtshApExXgZngI5dB6yd4D4K0Nf6rwu0Z3x10e29WhygMHW
o85Rgai1aHn1OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:50 2025 by rpki-client