Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          ZoadkjKrzQrqNcAqL+2c9Ts/5nO9NnPtMTZox/jD6Ho=
Subject key identifier:   E1:13:31:E6:31:28:F3:6E:F8:76:4A:69:AD:EC:CA:AC:EE:6B:EB:03
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019FA228EBC14090528C5A37D40545991F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0F72
Signing time:             Mon 27 Jul 2026 06:00:18 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:18 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:18 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: 6sUHTGu145UhcDwnGpr8sRRZ9skgQwY+y4Vy+mdNa4A=)
                          4: dOZ-UZAilPuTxMdA91BX6bqpZdo.roa (hash: EnTNe2Fu+ylf9yT4Bos+C9yigYIvj4IsKWPgtuOze0Y=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:28:eb:c1:40:90:52:8c:5a:37:d4:05:45:99:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jul 27 06:00:18 2026 GMT
            Not After : Jul 28 06:00:18 2026 GMT
        Subject: CN=e11331e63128f36ef8764a69adeccaacee6beb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:b1:08:e3:45:31:3b:0a:f1:1a:c3:db:7a:
                    cd:d0:d4:32:ee:c5:93:9b:18:48:df:a1:dd:b1:88:
                    c7:7c:c8:92:e0:2f:3c:9c:a8:09:d6:fc:ad:3f:1a:
                    e5:6b:0f:02:1f:3d:13:5a:8c:f2:fe:69:ca:c8:cf:
                    c5:10:0b:e7:1c:f2:36:45:7a:c7:f5:c4:4a:55:ae:
                    9f:ee:64:61:7e:15:32:39:e5:ca:b5:f8:e7:00:73:
                    fd:e9:55:9d:1d:84:8a:7d:57:46:5b:cf:8c:d9:78:
                    ae:7e:3e:46:8a:a8:e0:b7:3f:9a:d6:09:96:2c:b3:
                    8d:23:96:26:1c:47:b4:82:47:0b:99:6f:83:36:41:
                    45:11:25:52:34:ac:78:26:7b:6f:cf:84:50:46:aa:
                    22:59:d4:36:ca:fa:68:d0:4f:4f:fd:73:83:aa:95:
                    51:54:b0:bc:a0:44:a2:ad:8b:94:41:e8:e2:f0:8e:
                    88:c7:5e:0c:9d:27:81:08:40:ab:7c:3b:83:92:5a:
                    0d:5f:b4:ae:3e:81:6a:34:25:8a:1f:29:64:d6:00:
                    6e:d2:7f:1a:82:d7:98:ea:12:67:a0:2b:0b:b9:19:
                    bc:67:f1:99:89:16:4b:76:f8:4c:91:5a:8b:e9:3e:
                    6e:57:43:9b:5c:39:79:e8:e5:4d:5e:fd:6e:6d:22:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:31:E6:31:28:F3:6E:F8:76:4A:69:AD:EC:CA:AC:EE:6B:EB:03
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:fb:92:65:c8:a1:c3:76:a5:a1:33:ff:62:17:7b:71:f7:
         59:a1:03:0f:c6:3c:1d:23:66:12:ff:43:f1:84:41:f5:35:7d:
         df:d2:67:d5:cd:53:3f:c7:52:2c:b9:65:b9:31:e1:17:24:ca:
         1d:58:01:59:26:b6:6e:3e:4b:e7:d9:1c:34:9e:02:c4:83:08:
         e1:d8:94:4f:82:35:27:e2:67:38:ad:bd:de:fb:79:b9:4c:46:
         17:ac:d1:ff:d2:0a:8a:c6:99:f0:be:dc:f9:29:92:44:47:35:
         8d:1d:b5:0a:fa:68:38:e6:5a:6f:6d:e7:2b:5c:5e:5d:54:c8:
         73:20:06:63:bb:c4:00:46:41:6b:b6:f7:38:63:90:ee:5c:9f:
         d9:20:f5:0a:7d:cf:73:eb:02:b2:e2:09:05:58:7f:a5:3c:11:
         e3:af:1f:b8:dc:7f:30:d3:5f:e0:45:07:b6:96:eb:b5:ba:25:
         2a:25:42:3f:83:a2:4e:b4:41:ee:0e:90:49:00:8a:37:32:8f:
         7e:ac:20:48:16:8e:14:b9:87:ca:12:10:74:e2:a9:85:45:a9:
         c6:61:ad:1a:5c:24:88:2b:41:c1:c9:a9:24:fc:e9:9e:36:40:
         b5:8c:fd:2c:c9:18:1f:9c:1d:6a:8c:af:61:9e:bb:62:5c:33:
         80:f2:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:02:01 2026 by rpki-client