Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          AFrFDQhvsRIiWM9WIzotwQsXQ7X5yBXVgxEtC0h7avI=
Subject key identifier:   8D:51:FD:E9:2A:50:8E:1E:3B:33:5D:50:09:32:D4:45:76:0D:4D:3E
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019EBA6B044BD8D9FCBCB503CFF49DC4252C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0EFA
Signing time:             Fri 12 Jun 2026 06:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:35 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: Rh4C0g3fPaE9ixIzy3Do89Q3cDHLxWAqN4Q4/E8kNJc=)
                          4: dOZ-UZAilPuTxMdA91BX6bqpZdo.roa (hash: EnTNe2Fu+ylf9yT4Bos+C9yigYIvj4IsKWPgtuOze0Y=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:04:4b:d8:d9:fc:bc:b5:03:cf:f4:9d:c4:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jun 12 06:00:35 2026 GMT
            Not After : Jun 13 06:00:35 2026 GMT
        Subject: CN=8d51fde92a508e1e3b335d500932d445760d4d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:f0:99:36:6d:f9:8c:ee:29:07:49:f9:a5:
                    76:92:f2:12:7a:f6:67:a2:db:72:c5:f8:a8:29:b5:
                    10:8b:fc:51:72:e8:64:05:64:18:be:a6:ee:e8:a3:
                    aa:e9:fb:80:7c:a0:d6:2a:3b:87:9c:89:59:88:2c:
                    c5:42:63:7a:77:ca:e5:15:05:37:ac:31:c6:4b:de:
                    98:9d:a9:61:b9:64:15:c7:08:d4:20:d4:63:9c:ca:
                    1e:7a:04:34:0f:db:1a:1e:b7:5d:4d:6b:62:ee:af:
                    bd:51:39:6c:cc:ff:b7:fd:14:ef:e5:88:69:40:64:
                    e6:e6:a2:ef:17:1f:20:64:d9:6f:8b:91:11:10:08:
                    a9:ce:ba:e6:d9:4d:89:0c:45:7e:be:3c:07:75:54:
                    bc:3f:38:42:2d:2e:3b:9b:26:bd:c6:54:81:de:dd:
                    de:b3:7b:e8:2b:ba:af:15:5f:6b:ed:13:2c:3b:70:
                    52:71:95:1c:1d:c6:f1:e8:13:e2:4f:b7:3b:35:17:
                    73:d2:2a:04:18:7c:0f:6d:22:85:84:6d:3b:8b:af:
                    cd:69:01:13:b7:7c:8c:5b:a8:5c:ef:98:bc:d1:b6:
                    60:52:ca:a4:e3:4c:d4:bd:bc:66:1a:9c:06:9a:21:
                    fc:fb:65:a1:19:f5:e6:f9:a1:d2:38:f8:9e:e3:6d:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:FD:E9:2A:50:8E:1E:3B:33:5D:50:09:32:D4:45:76:0D:4D:3E
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:91:bb:6e:87:72:e5:20:8d:8c:73:ba:58:65:24:a7:01:6a:
         42:8a:a0:2d:fc:38:a8:70:b4:31:02:ba:c3:59:72:f1:50:e3:
         9a:38:08:b8:50:1a:9c:04:50:19:94:72:d7:20:c0:6d:54:7a:
         9e:56:f8:d9:82:94:ad:35:8f:8f:7a:4e:62:0d:75:bd:a5:bb:
         9b:9d:ef:9f:a4:91:89:39:06:e0:ec:c1:b9:62:50:04:73:26:
         a3:d2:9c:bd:45:b4:df:e9:5c:ef:d9:e8:c7:54:c4:8f:42:4e:
         d0:f6:5d:63:58:e7:bb:ea:24:d9:08:89:e9:b1:95:42:06:d1:
         87:7b:e2:45:aa:0d:6e:77:9f:bd:46:c6:e3:8e:2a:7e:94:97:
         a8:2f:25:d9:b3:8f:6c:37:ba:d4:1d:02:f0:fa:4f:bb:2f:ba:
         72:af:dd:6a:ef:49:04:47:12:6f:11:dc:1c:50:56:13:21:9b:
         fa:ee:41:17:b6:bd:d5:29:18:e6:e6:12:6c:a9:49:d4:ff:8e:
         76:54:ac:93:f3:74:0c:1e:98:1e:86:92:53:29:be:12:5c:00:
         2e:54:24:ef:fe:bb:7d:bb:9e:9f:bc:e4:96:a8:ef:e1:75:ce:
         6c:bf:9c:35:d6:c8:7c:a1:a0:5b:19:fe:45:95:f3:80:fd:df:
         6e:91:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:44:13 2026 by rpki-client