Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          4WsaQIYgzoko7OA8orVPXWURe4ZsroJYb7lIqdBe72M=
Subject key identifier:   03:D0:3F:DA:7F:6A:99:AF:FE:AF:36:58:77:95:FC:C7:97:C6:E4:5A
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019A21E4B9EFF9543687E460548B2DBE6931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0C95
Signing time:             Sun 26 Oct 2025 19:00:29 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:29 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:29 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: JmE2DotJFzee6ZEkJABlOvGfUi0.roa (hash: kTxgn5V7rU8GaSWrPY2IpRexVO3i36geJ6EK2nXDe04=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: 7egzTxuqQcxWvx51GSodALgzejyCcsUaT727Juxf0y0=)
                          4: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:b9:ef:f9:54:36:87:e4:60:54:8b:2d:be:69:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Oct 26 19:00:29 2025 GMT
            Not After : Oct 27 19:00:29 2025 GMT
        Subject: CN=03d03fda7f6a99affeaf36587795fcc797c6e45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:2b:a6:22:d1:31:4d:0e:9e:be:9a:23:7f:
                    73:bd:45:06:65:99:5d:e7:3c:c8:0d:f2:35:ee:2c:
                    a5:0f:1f:af:2c:6d:a5:ba:3b:6a:c5:d5:64:8b:e7:
                    33:85:41:1c:8e:0a:a1:f4:11:03:dc:84:9c:aa:69:
                    a3:a3:cb:e3:e6:a9:65:b9:ee:a4:c8:d2:f6:9b:60:
                    4f:17:f9:cf:42:77:1e:39:4f:aa:ae:cb:7d:47:c7:
                    4f:a6:f7:78:76:02:e0:59:c5:8f:71:4a:db:96:c4:
                    34:73:93:9e:72:2b:8e:87:6a:a1:24:ec:96:de:da:
                    59:77:04:1a:97:d2:2e:20:52:84:72:c1:e1:51:55:
                    04:01:bd:fe:a5:80:bf:03:67:0b:a7:32:2e:3d:36:
                    a1:d2:3a:89:23:39:9f:4b:22:c7:48:e3:52:92:62:
                    da:e9:3d:a2:00:42:ab:14:ec:1a:9a:70:18:b3:7f:
                    30:a9:09:a7:86:40:69:09:cf:fb:fc:21:50:6b:6b:
                    28:bc:bd:2a:c3:94:da:04:26:5c:e5:01:02:d1:38:
                    83:6a:d3:31:03:53:19:98:40:d4:c7:64:34:68:2b:
                    6d:0a:a3:bf:91:0d:81:18:dd:0f:65:57:70:e5:37:
                    b3:45:45:f0:b5:51:a3:9a:4b:e2:7c:2e:b7:74:44:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:3F:DA:7F:6A:99:AF:FE:AF:36:58:77:95:FC:C7:97:C6:E4:5A
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:ef:7b:b9:f2:7f:a6:5e:5f:bb:9c:ad:51:a2:c1:d9:a5:
         6a:55:bf:05:1c:53:2b:a0:7b:fa:03:3a:b3:fb:6b:a5:65:cc:
         a7:44:c5:3f:34:f4:5b:e0:4f:f4:95:62:f0:ee:80:4f:93:84:
         b5:c4:0f:8d:8d:87:4c:9e:01:3e:27:8d:21:48:74:a1:7d:a4:
         91:50:18:e6:c8:f3:f2:c8:56:15:a7:01:6e:8f:ec:00:6a:77:
         42:eb:6c:df:95:21:ae:06:c4:60:9c:42:e1:70:ab:6e:f5:51:
         29:d9:b1:c7:3b:28:fa:db:d3:6b:14:9e:f8:63:d4:21:25:b6:
         5b:75:6d:17:d2:c5:78:4a:09:b1:0b:ce:21:ac:af:74:89:6f:
         1c:8a:3e:47:f4:8f:89:a7:a1:4f:5a:0f:5f:60:68:51:cd:72:
         58:48:03:f7:86:6e:68:7d:0d:e0:eb:46:e8:55:47:9e:2c:7d:
         51:d7:f0:45:20:93:b9:02:7e:00:03:ff:6f:82:5f:da:90:bb:
         5e:ac:2d:17:c5:e7:9f:40:77:4f:d5:82:3b:71:00:23:f1:6a:
         0c:dc:34:45:3c:17:05:50:08:90:5a:a1:62:d4:f6:68:69:05:
         37:43:bb:55:57:4c:58:07:2a:29:04:8d:5d:3e:06:30:4c:80:
         42:42:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:42 2025 by rpki-client