Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          FydwcoKPTZtrqn6AKhZdpuvyajzYknSoQga9Sk2ZKCQ=
Subject key identifier:   93:1D:34:75:84:86:62:4E:6E:02:F0:B8:2D:FE:53:81:51:8D:61:34
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       0196B85A557B3C1BCB111CC11A24F900977E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          121F
Signing time:             Sat 10 May 2025 04:00:49 +0000
Manifest this update:     Sat 10 May 2025 04:00:49 +0000
Manifest next update:     Sun 11 May 2025 04:00:49 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: 6w6eGVvQRDUTNlB0bd4nHGGVcPRfc1ZiE/vLCe6ybKM=)
                          2: JO9p7ll9zISZm_xFhXLEAHl9qVY.roa (hash: 0DU1k9iGKTCSkZjHepyU1MLXd84qinXMdi3Y0J9F55E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:55:7b:3c:1b:cb:11:1c:c1:1a:24:f9:00:97:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: May 10 04:00:49 2025 GMT
            Not After : May 11 04:00:49 2025 GMT
        Subject: CN=931d34758486624e6e02f0b82dfe5381518d6134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4d:87:9e:8a:68:36:13:94:76:2e:d3:69:15:
                    84:d3:33:cf:f2:e8:12:6c:bc:a4:fc:d2:ef:4b:da:
                    19:a0:78:37:c9:5e:5b:08:77:a3:0e:50:2b:52:f2:
                    88:ae:ec:34:36:c7:5d:73:1a:e2:2a:68:2f:a3:69:
                    fb:43:c5:aa:9f:b4:2b:db:33:6e:41:c5:b1:d1:8e:
                    f4:da:83:f9:d9:1f:96:5d:1e:5f:c7:30:40:f4:49:
                    be:13:cf:83:ea:04:63:62:57:1a:79:a4:6d:0a:12:
                    27:fe:25:9a:1d:ef:53:8d:52:6a:fc:de:e3:a1:6a:
                    29:88:45:60:52:d0:80:de:ea:56:40:b8:22:d1:d6:
                    85:f1:0f:b2:2f:83:0d:a0:28:2e:e6:c5:c6:4a:97:
                    2c:45:9f:2f:4e:13:11:5b:e2:f7:fa:94:a8:25:68:
                    ba:c3:38:c8:31:16:23:50:51:fb:20:8e:53:06:86:
                    74:6c:72:a2:f5:43:ec:ed:86:4e:f7:a7:69:94:8e:
                    b1:36:f0:bb:89:5b:52:de:8e:9a:8d:2b:ae:ee:fd:
                    55:73:b0:ae:17:d1:78:9d:9f:74:70:70:a3:b7:35:
                    1f:93:6b:88:de:0a:50:e9:34:84:43:37:0e:6a:b5:
                    ac:2e:9e:eb:ad:c7:23:e4:f5:80:b1:74:65:de:a2:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1D:34:75:84:86:62:4E:6E:02:F0:B8:2D:FE:53:81:51:8D:61:34
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:14:dc:c0:4e:0e:07:17:1d:27:ff:81:68:15:13:45:8e:e0:
         47:10:59:54:99:ad:ed:20:48:81:d4:d8:ea:f5:6c:69:aa:b3:
         88:0c:6e:a0:bf:6b:d7:20:72:3c:f9:3d:1a:2c:f8:f6:f5:92:
         95:ee:b9:33:95:2a:c9:01:2d:7e:09:66:f3:d8:f3:44:f3:54:
         09:4b:e0:a7:1b:30:2b:3d:a5:a9:d4:6e:0a:bb:17:b5:5a:2e:
         88:bf:fb:29:d9:77:5e:6a:02:db:3d:39:35:40:17:dd:1a:10:
         e0:57:52:22:92:87:29:f3:b0:fc:48:74:9d:e0:df:e5:88:a0:
         15:e9:d5:82:eb:fa:bb:6b:bf:e7:06:1b:53:a8:81:26:0b:38:
         17:88:e3:ca:bb:0f:23:e4:8c:c0:ac:34:ab:7d:97:98:b2:76:
         4b:37:36:d0:82:8a:4b:f8:73:cc:af:37:0b:d5:4a:3f:57:1d:
         39:09:d4:05:ca:a9:e0:5a:11:50:8d:1f:3d:f1:b0:59:b2:7c:
         14:3d:62:00:f9:b1:5e:ca:c7:8d:a6:bb:15:fb:c4:fe:09:90:
         73:b7:d6:ef:ec:e6:f9:08:7b:b1:ef:e7:fc:6f:45:bc:31:18:
         f1:87:b4:c3:ea:1b:83:11:ad:e2:fb:72:3e:fa:a5:20:00:d7:
         e7:c3:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:32:40 2025 by rpki-client