Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File:                     DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier:          ucyYsRwmd4OkTXs1EeykHHBhKDI8Wvy5PvMSpbzVZts=
Subject key identifier:   78:8C:8E:A7:F3:07:F5:89:2F:B6:D7:D7:ED:C6:F5:2A:8E:80:6A:1C
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       019510C7D24E17F1EC78812E921D097AA95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number:          117D
Signing time:             Sun 16 Feb 2025 22:01:25 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:25 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:25 +0000
Files and hashes:         1: CLChwLW02ELwkahXwyfiLI_9qug.roa (hash: ZY2Z4KqkvJ5GmWXUsGBRyVc2LlG/nyUr0SW4E8BAqyI=)
                          2: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: 3jNVCT9x2oCREJ4ETTuLQttlTyZP+AZKK/EzK0ce2OA=)
                          3: QsN_S_wgLVUeKoFdH1UAJoSMjns.roa (hash: Vc/DvrUf2/Yc4I+n11f3kpmfdmIWYVq+oYgVY/8/vB4=)
                          4: R3lT-gTuGnDZeA96aEZQGFFOq_o.roa (hash: jGjkqK3So3KAtBAOEFdSRvrFV4KRi6t938Te18eLgog=)
                          5: XwDIJJPJ760h-XL6w1NNvKGdN7s.roa (hash: C/7NZrx1rODi4OfoG6IBJqHANimfyAXK9IDyt9/pFYE=)
                          6: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:d2:4e:17:f1:ec:78:81:2e:92:1d:09:7a:a9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: Feb 16 22:01:25 2025 GMT
            Not After : Feb 17 22:01:25 2025 GMT
        Subject: CN=788c8ea7f307f5892fb6d7d7edc6f52a8e806a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:04:97:cd:60:2f:4b:f4:c4:6d:22:f4:ed:
                    b4:ca:4b:ff:7f:52:33:4e:42:f0:9c:d2:f8:e8:77:
                    ff:89:11:22:23:5a:8a:1f:a4:de:cc:67:b0:69:82:
                    08:a2:9b:64:9f:d4:07:62:bd:a6:dd:c1:ad:ed:93:
                    2a:77:be:cb:b7:0b:85:fc:f8:6f:b9:e1:37:f0:ff:
                    9b:b7:c8:e5:d0:e3:78:44:8b:79:e9:63:32:2d:32:
                    de:7d:b1:54:ba:c5:40:cf:a2:aa:fa:8a:5f:26:66:
                    81:e1:e5:b6:15:69:85:b9:a2:a0:17:d3:a1:93:be:
                    c4:69:a9:9e:fa:22:c6:a4:db:33:ce:b3:05:5b:35:
                    99:43:bc:1f:35:65:11:86:4a:f9:d2:18:37:18:d0:
                    57:b2:5e:68:84:9d:39:b6:4d:39:78:e0:01:1b:26:
                    59:3e:74:fa:96:06:2f:86:96:b0:6b:b6:6d:61:69:
                    a8:68:4f:d4:c9:c3:84:00:59:c9:4d:c2:46:73:15:
                    fc:cf:45:4c:3f:6f:4d:0d:9f:6a:71:5f:85:d9:4d:
                    db:31:2f:f0:07:94:68:16:49:b7:b2:6f:46:1e:14:
                    b5:86:ed:68:c8:57:d7:1b:88:fb:c5:e7:17:1b:c8:
                    f9:3f:5f:f4:ca:fe:08:6d:32:d4:6d:5a:26:b2:56:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:8E:A7:F3:07:F5:89:2F:B6:D7:D7:ED:C6:F5:2A:8E:80:6A:1C
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:0f:c8:12:be:25:64:9d:af:3c:da:63:c6:f2:20:0d:4c:
         27:de:9f:f5:ad:da:ac:80:85:36:0e:9e:6a:a1:70:d7:54:b2:
         af:55:af:da:da:23:4d:dc:8b:ef:38:a8:e2:dc:64:23:07:55:
         ae:7b:03:13:66:3d:f6:15:10:0e:04:4e:40:be:10:33:f1:fd:
         a4:3f:96:49:f0:e9:97:f1:0c:e6:ce:2a:14:30:3d:ab:66:2e:
         8f:9f:b3:86:10:54:2c:90:82:ee:43:b7:5c:b4:cf:84:30:13:
         cd:01:83:d0:67:a4:c6:92:69:fb:5d:77:53:bf:0e:8b:53:7c:
         4c:ca:60:e4:21:88:58:64:f7:fd:fd:06:38:8b:31:77:54:ae:
         2a:61:7b:d1:52:06:f3:62:64:7c:7c:66:59:8e:ab:ab:a5:e5:
         c5:6d:2e:b0:90:58:75:c2:cd:2b:87:39:f7:1f:18:da:91:12:
         1a:9f:b5:17:4c:09:c2:9b:fa:08:db:8e:67:2b:cd:f5:34:4f:
         c4:a4:36:93:61:53:a0:b5:2a:92:01:69:6d:93:83:8a:ef:08:
         c5:eb:76:e0:55:b5:9b:85:42:fa:de:1f:ca:a6:cd:94:89:34:
         d7:95:d3:9f:c5:52:7c:6a:1b:79:c9:4b:87:35:e1:1a:dd:99:
         ce:02:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:43 2025 by rpki-client