Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          5Nph5l2buCFKsyJxDMJ2sLQGaCug4jcqLQ0cJZsJGjU=
Subject key identifier:   D1:EE:DC:4C:EF:50:52:3C:78:4A:0A:00:4F:74:4F:DB:2F:18:F0:29
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       0197B632A64E4BC71FBFB714433342C4915B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          12A4
Signing time:             Sat 28 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:02 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: X2w1+qUCGrZ4sZ8fl6lTr+8tW4A61nrSbKEGHP3cyCE=)
                          2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
                          6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a6:4e:4b:c7:1f:bf:b7:14:43:33:42:c4:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Jun 28 11:01:02 2025 GMT
            Not After : Jun 29 11:01:02 2025 GMT
        Subject: CN=d1eedc4cef50523c784a0a004f744fdb2f18f029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:e0:4f:dd:b2:13:c5:be:49:53:13:61:3b:
                    2c:e4:10:e7:1d:94:fb:29:65:eb:b7:44:5a:43:75:
                    35:72:69:e3:1b:af:bd:32:cd:d8:40:f4:19:f4:17:
                    55:19:3a:60:39:5b:0d:88:30:1c:4a:29:7b:b3:2b:
                    49:66:da:86:f9:c5:e4:1a:45:f4:9f:df:b2:2e:7e:
                    94:82:66:8f:c4:7c:54:8e:b8:97:32:af:fd:ec:4d:
                    96:99:84:e3:e2:f1:49:5a:8c:83:9a:4f:88:cc:ac:
                    92:9f:fc:9b:5f:8e:ff:6d:33:f6:f3:f4:a4:db:92:
                    04:24:83:de:0a:d5:0a:80:a7:36:03:d0:1a:4e:5b:
                    78:89:dc:6e:3c:de:ff:a6:c8:77:56:0d:5d:74:4e:
                    e2:8b:d2:c4:9d:12:57:01:c1:6d:0d:ac:ad:85:0d:
                    00:0f:c4:12:23:52:a4:03:49:f7:c9:be:e3:9e:97:
                    0b:15:57:60:0a:ae:94:84:98:43:ac:64:cf:33:dd:
                    b8:05:a1:59:84:2e:99:ca:fd:a1:e1:ce:94:dc:fe:
                    1d:17:f3:70:37:42:c0:0b:0a:68:d6:0e:dc:99:e3:
                    5e:9c:90:d6:1a:04:18:29:88:87:49:de:8b:16:e8:
                    19:29:dc:da:00:5a:c4:09:be:24:c8:48:5f:a6:16:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:DC:4C:EF:50:52:3C:78:4A:0A:00:4F:74:4F:DB:2F:18:F0:29
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:9b:39:bb:89:0f:aa:19:6b:bc:1b:9d:3b:07:86:de:93:
         a9:8d:d9:00:d2:9a:59:e7:15:a0:1d:e8:72:0d:98:35:71:67:
         c7:98:0a:b8:ec:df:31:36:03:e9:0c:cd:03:28:e2:b2:db:03:
         5c:23:d9:2d:76:cb:9f:d4:a1:3b:c4:57:7b:2e:5b:8f:07:1c:
         bb:09:87:35:06:68:b8:61:24:25:3f:d9:be:cb:c1:7f:36:1b:
         eb:b7:88:6d:05:08:62:4b:d8:02:94:ac:12:79:f2:23:23:af:
         a2:79:58:10:16:5f:04:dd:80:34:9e:ba:91:dd:9f:ef:0b:40:
         db:39:f5:41:c2:eb:0f:27:ea:8f:66:21:58:fb:97:06:db:38:
         9d:9a:13:e4:bf:a1:c1:91:f1:35:15:68:bb:33:35:d7:0b:2a:
         87:99:51:99:93:51:8b:42:2b:2e:13:7c:03:f2:c7:72:31:a2:
         ae:07:0a:4f:f4:b0:5b:3d:2f:b6:e6:42:2d:72:95:05:d2:c4:
         0e:26:53:33:a3:b4:72:b8:45:80:f3:46:cf:94:03:7d:51:03:
         19:41:3b:4a:b7:70:53:a6:88:34:a3:ca:b2:ff:0e:fb:0f:27:
         28:df:18:67:72:69:9e:00:31:f5:42:d1:fd:81:c1:77:c7:a2:
         fd:fb:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client