Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          ysubWoxkHbDBEsdDW6/oX0IlZIJh2SOZvhAXB22tmAA=
Subject key identifier:   98:4C:D9:AA:B8:E1:93:C8:DB:2E:B6:11:E7:15:AC:A8:74:38:5F:BD
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019CE5FF02F2A6FC8BE0B5E6F95296DA6EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0E06
Signing time:             Fri 13 Mar 2026 07:00:20 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:20 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:20 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 6wUOIPFBERkUTQmc4fru_-px0Tk.roa (hash: 7k1O0fB7z/MoZhbw4RMzyFvLT3i7T+rSfTUmJTBuUb0=)
                          3: 8CxQcTO3gzXmwcuG0fFVXjw_yfA.roa (hash: nNtkgz35KV+aXckr0faszMZ/wBI6TdmhZfb4uKa2DV8=)
                          4: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          5: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: i8auLC8K+cXu6JX7nCqIQClqAuenF+7XlQSRujD+O0k=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:ff:02:f2:a6:fc:8b:e0:b5:e6:f9:52:96:da:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Mar 13 07:00:20 2026 GMT
            Not After : Mar 14 07:00:20 2026 GMT
        Subject: CN=984cd9aab8e193c8db2eb611e715aca874385fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:a8:d9:1e:1b:44:35:1b:96:62:b0:05:8f:
                    51:61:dd:9c:a6:30:81:e3:ee:a5:3e:50:f2:33:5c:
                    d8:cf:98:db:06:2c:72:95:1f:09:0d:c5:3b:40:c5:
                    55:a5:4a:a7:cf:64:b8:9b:d8:c2:a0:15:54:90:59:
                    8c:f9:a1:d2:4b:95:a6:15:27:e0:4d:f4:5c:da:01:
                    e4:5f:00:17:49:67:13:57:96:da:88:6c:88:9d:e0:
                    09:68:c3:45:ce:01:4d:d3:72:68:e3:05:f9:1d:a1:
                    d1:23:df:22:04:b8:55:33:58:69:05:3c:24:95:70:
                    a3:ad:b0:20:c4:3c:55:13:8c:1d:4a:2c:fb:ac:91:
                    d9:3b:86:43:36:da:0f:46:65:70:dd:74:14:ed:59:
                    a1:35:e3:b1:f3:20:44:b8:69:8f:8b:bb:45:c9:5a:
                    33:ef:72:42:50:48:ac:ce:2d:fc:d3:33:59:f5:e2:
                    cc:cb:a1:c4:d5:c7:d2:92:d2:0e:a9:c2:bb:3e:d3:
                    da:78:87:d7:0d:f3:a6:43:b0:e8:a6:e6:c5:63:1c:
                    56:91:c9:07:1b:67:bb:eb:a0:bb:ce:46:6b:7e:c5:
                    54:89:77:13:8f:c6:ea:7f:e3:3d:d3:13:91:7e:4c:
                    92:b8:5d:c2:ce:a4:b1:11:90:71:21:c7:6f:ce:63:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:D9:AA:B8:E1:93:C8:DB:2E:B6:11:E7:15:AC:A8:74:38:5F:BD
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:49:93:9a:83:50:ff:99:2b:ca:b5:27:5d:a7:9c:69:af:
         35:83:44:f1:87:83:0d:c6:d0:43:b4:7a:8e:ed:12:f6:ae:51:
         03:03:92:dd:ca:10:9c:f7:21:46:fc:40:c7:ec:44:e6:48:30:
         69:7d:9e:07:7a:9c:43:a6:cd:ef:31:fa:1b:27:29:38:39:23:
         49:e4:9f:a6:72:0f:69:c6:ef:6a:d4:66:f9:cb:a9:57:86:3a:
         98:40:0d:05:87:f1:8e:c0:10:aa:e8:1c:27:17:de:54:db:02:
         0e:59:ad:f3:e6:d4:b0:37:1a:21:69:52:79:56:3e:a1:02:03:
         05:7d:2d:bd:4a:37:20:4c:01:0a:99:7f:0a:e2:13:83:80:24:
         b9:11:4a:48:3f:48:14:5d:51:4d:85:a5:a6:3a:29:e2:1c:68:
         33:09:79:fb:51:04:9f:07:8f:d7:aa:8a:d9:ec:c7:ad:21:3f:
         f0:2f:8e:84:b6:eb:e1:2e:7f:50:4f:83:03:83:88:ee:92:6c:
         bc:78:f9:5e:09:01:6a:6b:1d:df:f6:7a:35:ab:a2:b0:be:b6:
         3f:fb:2b:19:12:53:31:4c:5e:a7:56:34:64:9c:48:8b:04:7e:
         33:98:89:1b:e4:cc:fd:a8:56:94:cc:f1:cb:9b:90:bd:5c:fc:
         2d:88:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:05 2026 by rpki-client