Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File:                     xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier:          QvJJGpt+pN3MLtzz1G9uQKfSLWtJE9Yrs5Sa5rt5ztY=
Subject key identifier:   E1:5B:B1:8B:8B:95:E4:93:16:46:5B:90:2D:16:40:F0:13:B0:E8:11
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       01976C98C1FD8D1D87E4950EA20AF4C57857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number:          15A9
Signing time:             Sat 14 Jun 2025 04:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:39 +0000
Files and hashes:         1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=)
                          2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=)
                          3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=)
                          4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=)
                          5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=)
                          6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=)
                          7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=)
                          8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=)
                          9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: /bRpsTfanNbW9HQ1TtR8sAWeJd3SJ4LoQ3BsF9mrRc0=)
                          10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:c1:fd:8d:1d:87:e4:95:0e:a2:0a:f4:c5:78:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Jun 14 04:00:39 2025 GMT
            Not After : Jun 15 04:00:39 2025 GMT
        Subject: CN=e15bb18b8b95e49316465b902d1640f013b0e811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:14:79:51:8c:ed:37:53:79:2f:48:dc:a9:
                    65:83:c5:d2:f8:0b:ac:87:82:f4:d3:d0:c1:51:2a:
                    24:8d:7f:79:77:61:40:2b:f6:cd:e0:35:54:cc:3b:
                    53:0e:de:2a:bb:6b:a9:fb:a7:4f:1e:d5:7c:7c:53:
                    9d:6b:3e:a0:af:dc:d3:e5:e6:f1:02:eb:71:fc:ef:
                    a9:fa:9d:fe:fb:e6:20:9c:f7:5a:f8:cb:ba:a9:62:
                    fe:61:f7:a9:80:0a:4f:2f:62:85:0d:7d:1f:a2:4a:
                    bf:4b:c6:8c:16:e1:92:6c:c2:c7:44:39:fc:1b:78:
                    09:dc:37:20:a1:a2:ba:16:23:47:ed:db:d4:ba:ee:
                    e2:1f:96:36:2b:82:1e:fd:09:b2:9d:c1:e6:4b:d5:
                    fb:8c:a4:9c:6a:a7:a6:10:0e:63:fc:c3:6d:df:23:
                    a1:e7:e6:25:66:9a:b5:c8:db:eb:c8:90:bf:3f:1f:
                    a8:b1:b8:f0:7d:d2:5c:b5:93:25:4c:76:9c:cd:69:
                    af:92:3f:44:d0:15:5d:32:1f:5d:e5:ed:68:16:e8:
                    ad:86:8f:80:a1:18:e6:52:41:47:8b:d7:ba:00:ae:
                    53:ed:cc:3c:5d:7e:3a:cd:7f:74:36:ed:90:66:1c:
                    1d:54:4a:2f:6a:45:73:25:7b:d5:5b:8e:4e:03:4c:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:B1:8B:8B:95:E4:93:16:46:5B:90:2D:16:40:F0:13:B0:E8:11
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:f7:4e:59:38:fa:12:d5:5d:c6:2b:36:67:21:0f:f3:fb:6f:
         5f:a2:20:44:93:da:3f:dc:00:59:67:47:a1:cf:e4:6b:76:6e:
         50:c2:47:15:a7:e4:03:73:9d:75:81:8a:bd:39:1a:da:2a:ab:
         25:b3:c6:ab:36:e0:df:15:cb:66:77:dd:05:85:96:70:41:f4:
         27:52:2e:d8:9b:1a:1f:b7:6c:f8:72:af:f2:b5:a1:90:7c:07:
         0a:55:de:aa:bf:e0:fe:ff:af:a4:d6:21:a8:ed:84:22:41:01:
         17:4a:3a:78:4d:0e:34:c9:99:86:2a:72:e8:74:82:6a:b7:b4:
         e6:da:ad:43:d1:6a:f2:80:29:da:db:83:a6:0f:25:f2:5c:4f:
         b3:be:b0:c3:b6:99:d9:8c:1d:65:d5:c4:e5:5a:04:eb:1e:56:
         bb:29:b4:10:a8:70:19:da:f4:6a:d1:a6:8b:40:45:87:4b:cf:
         fe:d8:dc:11:4b:5f:a6:f7:63:86:a1:12:8c:c9:65:a1:16:d6:
         eb:cf:f2:38:28:6e:49:c6:8b:f2:3e:12:c6:ad:b9:74:02:df:
         af:82:62:6b:99:6d:06:a4:0c:ef:04:0c:55:f2:bf:79:73:e7:
         fb:29:96:99:d8:fb:02:4d:34:94:53:37:c6:58:7a:21:03:58:
         1f:f7:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:38:03 2025 by rpki-client