Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          lsf4udoFmiPvmu+/eKEr6RJT0lg0QRBcbnDoBq7wmo4=
Subject key identifier:   09:0F:FB:3D:79:9A:B7:4C:6F:FA:CC:C5:D6:B8:B2:4D:14:A4:DC:7C
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       0198413DBF2475B2A8EFFF72125507F0B170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0B9C
Signing time:             Fri 25 Jul 2025 11:00:22 +0000
Manifest this update:     Fri 25 Jul 2025 11:00:22 +0000
Manifest next update:     Sat 26 Jul 2025 11:00:22 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: k/jVFKPhfah74ViIiJPblhLhrOvPh28pCMqh5VVMJHo=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: h7Gclrhu6SOaWvFbiHElhAwE2xc.roa (hash: hHmeLevnWBoLoCenM/A/c8Y0QgQSSX5DM+SnErFkEgU=)
                          5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:3d:bf:24:75:b2:a8:ef:ff:72:12:55:07:f0:b1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jul 25 11:00:22 2025 GMT
            Not After : Jul 26 11:00:22 2025 GMT
        Subject: CN=090ffb3d799ab74c6ffaccc5d6b8b24d14a4dc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:06:10:77:82:e3:4a:47:52:65:1a:1f:30:
                    70:81:6b:cb:03:4b:3e:55:7a:10:cf:4b:6b:1b:3d:
                    12:5b:8f:de:08:12:72:5e:b6:12:54:18:05:eb:c0:
                    bd:ec:45:68:67:2c:d1:bf:29:a7:74:c1:0c:6a:42:
                    39:53:fd:6d:d1:cd:60:5a:90:18:de:24:92:d6:30:
                    51:e3:62:76:a1:b5:63:76:ff:04:17:35:00:35:4c:
                    f4:6a:a1:a7:bd:24:19:41:c1:ee:0c:1c:73:dd:29:
                    9f:d5:6b:ec:d6:5f:2a:18:d4:bb:46:ba:3c:7d:9b:
                    aa:9a:16:19:cc:8c:d9:94:de:84:2f:9f:50:0d:72:
                    71:4c:98:ce:ad:1f:92:2e:e5:c5:a6:d0:3b:d0:32:
                    b8:b8:b8:45:8d:56:22:00:20:71:1a:3c:99:d3:f2:
                    ae:49:2f:57:bb:2c:75:40:cd:b8:1f:7b:3e:75:f4:
                    0a:c1:96:b8:49:5d:54:e9:fc:1e:46:3e:9e:03:5e:
                    d8:f4:84:04:ac:ea:f7:d1:a2:83:bc:f3:46:b7:b9:
                    9a:2b:2b:f2:c0:b2:a3:f8:43:b7:fe:33:23:cc:f0:
                    63:8c:76:fd:ef:1c:05:fe:35:6e:a3:9f:84:03:a1:
                    a9:ab:ad:9e:59:7c:1a:31:5e:9e:d6:1d:ca:6e:55:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:FB:3D:79:9A:B7:4C:6F:FA:CC:C5:D6:B8:B2:4D:14:A4:DC:7C
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:04:12:44:ca:db:36:54:06:4c:e4:d9:72:d1:5c:57:c0:
         ee:86:f5:50:a2:c6:d4:e6:63:04:33:91:d6:eb:1c:47:99:a8:
         7b:ce:ad:4c:a8:f0:bd:cd:7d:b6:8d:fa:f7:37:f3:96:72:4e:
         c7:43:44:e0:27:c4:9d:3c:c0:ef:2a:1b:3d:ea:0f:21:88:94:
         13:2a:fc:99:87:75:ad:4c:0e:11:0c:ce:a4:61:8a:e5:bc:83:
         89:05:57:ce:cd:0e:b1:71:eb:4e:54:fb:7a:81:f6:54:60:3a:
         fb:41:df:30:ef:5f:fb:69:0e:62:dd:67:28:b5:cb:a8:59:c2:
         e6:9d:2b:e5:60:3b:85:85:9c:99:be:ee:ea:c9:9a:c7:77:53:
         bc:68:d5:08:68:ed:ac:eb:0b:4e:34:6a:b7:ad:28:e6:9d:70:
         ff:68:71:7e:9e:e4:c7:80:98:fe:7d:c4:58:4e:c3:40:43:0f:
         f5:19:1d:ff:2a:ae:c8:b5:b6:be:12:bc:1e:62:ff:84:8b:25:
         8d:80:7f:50:66:10:ba:d7:87:f9:75:82:ab:78:eb:e2:17:3e:
         0e:c9:81:c6:6b:9e:ee:33:68:90:7f:04:de:ca:3e:7e:21:54:
         90:a3:e0:b4:90:1f:85:85:e5:35:72:7e:4b:7a:a2:c3:01:00:
         ae:27:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:13 2025 by rpki-client