Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          DvTEOITGm23R2I5U8G/z24tL0FKW3qaQCAXJRYssxF8=
Subject key identifier:   C1:B4:FA:EF:FB:CD:8A:02:B5:8A:4E:2B:AF:B9:3C:58:00:A0:C7:6E
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01992CD91D41B5312BB368F5B856B9391FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0C16
Signing time:             Tue 09 Sep 2025 05:00:50 +0000
Manifest this update:     Tue 09 Sep 2025 05:00:50 +0000
Manifest next update:     Wed 10 Sep 2025 05:00:50 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: fFcAYu3GhUYYnwSfcp7z8YBjq4o1KCbP/V8CQmnedb4=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: h7Gclrhu6SOaWvFbiHElhAwE2xc.roa (hash: hHmeLevnWBoLoCenM/A/c8Y0QgQSSX5DM+SnErFkEgU=)
                          5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:d9:1d:41:b5:31:2b:b3:68:f5:b8:56:b9:39:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Sep  9 05:00:50 2025 GMT
            Not After : Sep 10 05:00:50 2025 GMT
        Subject: CN=c1b4faeffbcd8a02b58a4e2bafb93c5800a0c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:fc:15:8e:e4:d0:d0:c2:45:15:37:96:e7:
                    72:51:70:28:b9:56:f0:6d:fe:74:d8:dd:31:1d:3c:
                    81:b2:73:94:5f:7f:fa:3a:85:ae:58:cf:98:20:27:
                    fa:3b:5a:ac:31:e1:6f:23:ce:31:19:32:b2:a3:04:
                    d9:38:0f:b1:74:0e:97:c5:01:be:f9:f2:0b:7a:a0:
                    6c:51:2f:33:98:27:17:c5:2f:db:9c:4e:60:a8:e3:
                    7d:c4:07:92:04:69:9c:5e:24:4c:75:5d:92:cc:44:
                    4c:1f:55:0c:d7:1c:4f:99:bc:a4:00:f2:9e:c2:1f:
                    fa:ef:38:1c:e4:19:27:e3:81:4d:33:91:0a:14:fd:
                    0d:d0:d1:ef:58:40:01:62:6d:d2:5a:55:6b:5f:08:
                    40:32:f5:33:ea:70:6e:eb:87:d9:2e:e3:ab:67:4f:
                    29:d4:39:f6:f1:9e:fd:38:d0:35:53:cf:74:8c:91:
                    20:dc:3b:f4:f4:ff:fa:d7:f0:13:f3:2f:14:0d:db:
                    13:d5:4d:06:fa:c1:55:cb:81:18:2c:cd:21:85:7d:
                    e2:1a:b9:f9:3e:1c:99:7f:6d:6f:04:ba:63:a0:d9:
                    40:46:65:bc:1e:23:20:12:3a:b5:df:e2:03:85:be:
                    14:d2:d7:f5:05:de:e3:5e:83:f1:82:5a:e6:50:58:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:FA:EF:FB:CD:8A:02:B5:8A:4E:2B:AF:B9:3C:58:00:A0:C7:6E
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:8f:b0:29:bd:3c:c1:f6:de:e3:39:ab:1d:9d:6b:a1:69:
         7c:0e:08:c1:87:c5:72:1b:be:55:3f:2f:c0:8b:78:14:a3:e8:
         53:39:64:46:e3:04:cf:eb:2b:0e:13:28:84:01:36:67:3d:0d:
         7f:66:34:08:c8:2d:27:9b:b7:8d:fa:18:51:97:5a:cd:28:10:
         01:9d:ef:e3:ed:43:7a:cf:1c:4e:3f:37:06:5f:06:c5:e2:8b:
         ac:1c:19:dd:19:65:97:72:66:35:17:27:a6:f1:27:da:bf:0b:
         f9:ae:82:b9:75:dc:64:67:45:78:e8:57:5f:1d:8f:64:75:3d:
         32:5a:87:dc:55:06:40:fc:82:3b:a5:7c:14:66:16:3d:24:5a:
         5f:b2:78:e3:97:bf:cf:6c:32:d0:05:a3:5a:c3:be:48:8d:56:
         af:c0:76:ff:7f:47:56:09:15:76:5d:39:25:df:39:3b:ca:dc:
         89:5d:4c:0a:2e:2c:16:38:71:54:6b:35:ec:d0:84:d3:8b:47:
         9c:f1:b1:24:27:03:cc:14:1e:71:d2:e2:61:29:03:d0:95:18:
         6d:b6:89:ff:be:46:9d:d1:6f:a2:17:1f:cf:60:6b:3c:be:5b:
         b8:e2:df:33:04:76:09:e5:8d:ab:6b:9c:48:51:67:4c:ba:fd:
         f7:af:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:47:58 2025 by rpki-client