Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          GjIT+nFkDwT3FVOtIJ3Yl2yGy4fZWlkxSeGCdhULD7g=
Subject key identifier:   95:84:35:9B:64:F0:80:56:3F:DB:38:9F:4B:96:58:2C:83:5D:6C:FD
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       01993680E303E2BEA9A160C670A3A62DAA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          136B
Signing time:             Thu 11 Sep 2025 02:00:40 +0000
Manifest this update:     Thu 11 Sep 2025 02:00:40 +0000
Manifest next update:     Fri 12 Sep 2025 02:00:40 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: 8uMwnrbGZ3Ae4Fxl/eqmjgOPJAJdX2+ooQggOUdrOXY=)
                          2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
                          6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:80:e3:03:e2:be:a9:a1:60:c6:70:a3:a6:2d:aa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Sep 11 02:00:40 2025 GMT
            Not After : Sep 12 02:00:40 2025 GMT
        Subject: CN=9584359b64f080563fdb389f4b96582c835d6cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:33:2c:1d:9b:a5:14:c8:9e:03:41:80:94:
                    65:03:53:f6:2c:22:6a:2f:bc:41:a2:03:82:ce:0f:
                    2f:bc:c9:9a:83:d5:d7:92:4f:c7:b5:b7:3c:9a:6f:
                    b8:b9:98:31:52:c6:e6:e1:40:91:eb:0c:15:bd:23:
                    8d:be:12:f7:3a:f1:75:11:fd:4f:50:e5:af:ed:12:
                    9f:5f:22:2f:1f:ff:0f:35:93:4c:bc:5f:2a:01:c1:
                    81:8d:51:f6:b1:44:87:04:b6:33:0e:50:7b:cb:a6:
                    14:27:b5:2f:23:bd:92:11:fa:64:32:aa:a7:b2:a7:
                    da:aa:99:89:66:20:7d:d1:87:09:49:5b:8f:3f:6c:
                    76:fe:29:01:1a:3f:b6:a6:f0:55:1f:1e:44:1e:b7:
                    33:98:06:29:aa:56:37:a6:bf:25:66:f2:56:df:99:
                    39:6e:b3:b4:8a:02:74:3e:34:87:75:eb:b6:36:c2:
                    62:00:25:af:d8:eb:d0:f8:85:7a:d7:9d:8a:ae:e9:
                    9e:55:d7:9b:ff:88:28:77:4b:cd:10:43:7a:e5:19:
                    2b:0c:97:ba:69:29:eb:51:a8:0c:1b:f5:49:2f:7d:
                    55:1c:fd:07:00:1e:b4:73:f7:51:19:6c:b8:b4:0e:
                    74:51:0f:30:4d:1c:1a:8d:8d:9e:85:ad:a4:9c:73:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:35:9B:64:F0:80:56:3F:DB:38:9F:4B:96:58:2C:83:5D:6C:FD
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:ce:27:cc:75:a0:f2:6a:db:22:10:de:cd:3d:7b:f4:80:
         8b:50:c2:8e:70:1d:b7:6a:35:c7:f6:92:91:c4:89:29:74:84:
         2b:47:6f:4e:56:b2:2c:f6:5d:13:c5:cd:28:e8:2f:13:0f:2c:
         a5:af:29:2c:7c:00:96:f9:fa:df:9d:6b:e5:ba:19:7c:f1:af:
         c7:17:78:e0:30:bc:91:95:59:c7:a1:b0:91:98:90:56:71:5d:
         8c:f4:09:38:be:05:60:0e:a3:d7:49:38:08:09:22:8f:76:0b:
         ac:c6:cf:1c:55:d5:fd:97:42:1d:02:ac:dc:0b:c4:06:ba:9e:
         4e:b5:1c:44:fb:53:2a:cd:4d:81:bc:33:33:a8:cf:4a:db:04:
         9c:af:94:77:8a:eb:12:a3:b9:b0:00:63:c8:a1:6c:99:07:ea:
         e9:e9:84:58:bc:9c:a6:1e:64:ce:d0:b8:b1:b5:e0:24:a0:e6:
         e4:41:9a:18:b8:8d:4c:50:b9:a8:74:e2:e6:56:fb:df:8b:1f:
         bc:b1:a6:ad:f8:8f:97:9d:b0:ac:49:27:27:9d:c2:45:60:94:
         04:f8:5b:6d:88:33:03:e9:f7:97:ce:6a:0e:20:82:34:b4:48:
         3e:54:3e:5b:d5:41:7c:12:56:73:21:df:e0:b1:66:5f:fb:3c:
         24:fd:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:05:59 2025 by rpki-client