Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          crVLnmNqXLmTZZ9TPgaNaRs89G2cO5TmhpQaVl2PgSs=
Subject key identifier:   ED:A8:37:90:00:DA:3E:D2:67:A4:20:6E:C3:27:0E:8E:F4:75:56:64
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       019771F648F1D9F55CAC041E3E546467383D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          159D
Signing time:             Sun 15 Jun 2025 05:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:55 +0000
Files and hashes:         1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=)
                          2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=)
                          3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=)
                          4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=)
                          5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=)
                          6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=)
                          7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=)
                          8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=)
                          9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=)
                          10: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=)
                          11: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (hash: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=)
                          12: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=)
                          13: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=)
                          14: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=)
                          15: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=)
                          16: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=)
                          17: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=)
                          18: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=)
                          19: PTnNClWHp1d--BUxbWLDjKFgR4k.roa (hash: Yk+rKEpa0bWVY6yPPIw9uodRmdnQbnqYhCRKjGuB+uA=)
                          20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=)
                          21: Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa (hash: M7l/qsGDZqsfsCy3P3qXjnQMiv57RlRkHNf7JU+oLbI=)
                          22: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=)
                          23: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=)
                          24: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=)
                          25: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=)
                          26: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=)
                          27: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=)
                          28: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=)
                          29: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=)
                          30: ax-rFfxzuS70EDlTYH9V_s95_1k.roa (hash: No066zTAnofxIrnWO37cHRdDuGWjMPdRY7sfnOCfJs8=)
                          31: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=)
                          32: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=)
                          33: kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa (hash: OvdkZzlx4GDhrRDRIhoTB0lqGB519lq0sYMZBqzO8uc=)
                          34: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=)
                          35: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=)
                          36: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=)
                          37: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: s/vXsGU8O9eJhiqn9ZgcZVSp6YBoLuspaAYUIz3+o4M=)
                          38: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:48:f1:d9:f5:5c:ac:04:1e:3e:54:64:67:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jun 15 05:00:55 2025 GMT
            Not After : Jun 16 05:00:55 2025 GMT
        Subject: CN=eda8379000da3ed267a4206ec3270e8ef4755664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:c8:1d:d4:fd:ed:25:16:60:cd:38:82:5e:
                    ca:0e:8b:b3:5d:88:65:3f:b5:9c:a3:a8:cc:d4:e9:
                    27:01:56:6e:d3:b6:e1:50:d6:f4:99:56:42:3b:a6:
                    fd:0c:7b:70:a6:3b:e8:52:4f:70:32:b7:b3:bc:6a:
                    9e:51:09:84:1b:4e:ae:bf:2f:e9:31:2d:79:d1:6e:
                    54:3e:42:e8:d8:e5:22:22:36:a1:53:9a:24:3d:8f:
                    57:29:60:3c:64:d3:c2:bd:38:f4:80:24:e9:68:3a:
                    7e:b1:32:e9:c3:4c:61:8b:66:7b:a5:de:6c:ca:eb:
                    02:cc:02:56:cb:08:6f:5a:19:12:d7:45:78:5a:56:
                    92:fe:69:18:b1:e9:d3:d4:99:be:6b:9c:f0:e4:51:
                    91:91:93:ca:1a:c4:f4:a4:bd:a9:76:e8:79:47:02:
                    0e:7c:6b:85:e6:63:59:13:f8:d1:8e:e2:35:c2:79:
                    0f:7b:97:e5:5d:2f:4d:59:8c:82:3d:ee:ef:0f:f6:
                    5a:ff:e8:13:e0:7e:70:82:ca:19:a9:01:83:9c:4f:
                    40:41:e1:80:17:e9:15:87:7e:e8:07:5c:0c:4a:03:
                    53:42:4e:48:35:67:95:7f:e8:72:9b:38:88:7e:31:
                    63:47:46:f3:f9:79:d1:65:67:11:7a:0a:de:f6:b7:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A8:37:90:00:DA:3E:D2:67:A4:20:6E:C3:27:0E:8E:F4:75:56:64
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:b2:07:7d:66:cf:70:5e:4a:da:bb:d3:0f:8a:8f:4a:05:
         10:8c:da:82:ec:71:00:eb:69:57:fd:0c:cd:de:8a:fe:86:39:
         3b:47:21:5c:5c:fb:9b:40:c5:d6:cf:1e:4c:d7:0a:60:d6:c2:
         0d:c0:e2:2e:09:98:ea:a5:51:a8:38:ba:4d:94:85:06:1f:ee:
         b4:85:a9:2f:65:81:c7:89:9d:b4:b3:db:16:cc:b6:05:d6:bd:
         fa:f4:b4:bc:c3:cf:1e:a1:82:55:47:81:f1:51:9d:eb:c3:64:
         a1:e8:d7:3b:1e:2d:a1:4c:59:20:a1:cc:19:7d:81:be:57:27:
         ed:31:8c:c6:3a:1d:8e:37:34:69:87:b4:05:bd:2f:10:37:ea:
         2a:82:a4:ff:e0:4b:ab:6c:e1:35:cb:c1:4c:50:c6:c0:3c:ec:
         ed:13:d9:9b:3a:21:02:09:38:28:a8:77:1d:a3:57:c3:51:e7:
         d1:54:47:55:b3:0f:12:08:01:2e:cb:65:79:b9:a1:4c:d4:5e:
         d7:eb:d5:1e:a9:9b:ec:61:8b:80:53:69:7c:55:32:8e:29:fc:
         2d:29:cf:63:d3:a4:9d:ac:80:52:11:78:47:7f:ea:61:7c:29:
         f2:f3:7a:0b:c7:fe:c6:13:97:7c:33:35:aa:15:3c:6c:55:d2:
         20:28:0f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9kjx2fVcrAQePlRkZzg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwNjE1MDUwMDU1WhcNMjUwNjE2MDUwMDU1WjAzMTEwLwYDVQQD
EyhlZGE4Mzc5MDAwZGEzZWQyNjdhNDIwNmVjMzI3MGU4ZWY0NzU1NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmHIHdT97SUWYM04gl7KDouzXYhl
P7Wco6jM1OknAVZu07bhUNb0mVZCO6b9DHtwpjvoUk9wMrezvGqeUQmEG06uvy/p
MS150W5UPkLo2OUiIjahU5okPY9XKWA8ZNPCvTj0gCTpaDp+sTLpw0xhi2Z7pd5s
yusCzAJWywhvWhkS10V4WlaS/mkYsenT1Jm+a5zw5FGRkZPKGsT0pL2pduh5RwIO
fGuF5mNZE/jRjuI1wnkPe5flXS9NWYyCPe7vD/Za/+gT4H5wgsoZqQGDnE9AQeGA
F+kVh37oB1wMSgNTQk5INWeVf+hymziIfjFjR0bz+XnRZWcRegre9rdbrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2oN5AA2j7SZ6QgbsMnDo70dVZkMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvGyB31m
z3BeStq70w+Kj0oFEIzaguxxAOtpV/0Mzd6K/oY5O0chXFz7m0DF1s8eTNcKYNbC
DcDiLgmY6qVRqDi6TZSFBh/utIWpL2WBx4mdtLPbFsy2Bda9+vS0vMPPHqGCVUeB
8VGd68NkoejXOx4toUxZIKHMGX2Bvlcn7TGMxjodjjc0aYe0Bb0vEDfqKoKk/+BL
q2zhNcvBTFDGwDzs7RPZmzohAgk4KKh3HaNXw1Hn0VRHVbMPEggBLstlebmhTNRe
1+vVHqmb7GGLgFNpfFUyjin8LSnPY9OknayAUhF4R3/qYXwp8vN6C8f+xhOXfDM1
qhU8bFXSICgPQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:26 2025 by rpki-client