Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          F66HZDARaGGZ5Hf5UAcXj/JbgwYSeS4Dou1UO0gjiX4=
Subject key identifier:   B8:25:4E:6B:8F:F0:64:2E:9B:64:C9:45:C4:CA:AA:F6:7B:F4:76:ED
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01A08BD639242E81FA1A245CEA9F7AB0FDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0FEB
Signing time:             Thu 10 Sep 2026 15:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:07 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: ONylVPeeDIm2AGWSbcDLNVCxfEVNGfuvkxleZ76p+7Y=)
                          4: dOZ-UZAilPuTxMdA91BX6bqpZdo.roa (hash: EnTNe2Fu+ylf9yT4Bos+C9yigYIvj4IsKWPgtuOze0Y=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:39:24:2e:81:fa:1a:24:5c:ea:9f:7a:b0:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Sep 10 15:01:07 2026 GMT
            Not After : Sep 11 15:01:07 2026 GMT
        Subject: CN=b8254e6b8ff0642e9b64c945c4caaaf67bf476ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:af:60:5e:7b:73:c3:d9:57:37:cd:e0:ce:
                    83:79:f4:54:b4:95:19:21:55:f0:e8:17:10:d4:4b:
                    f4:bc:83:f8:e4:87:17:29:aa:73:cb:96:04:66:76:
                    97:58:24:ba:e8:0e:47:68:ec:e5:de:f4:9a:1d:20:
                    a4:41:46:d9:fc:5c:be:7f:6e:e9:92:87:6e:32:68:
                    ed:6d:98:6c:63:25:fe:b6:9f:90:56:37:4e:cc:7c:
                    54:95:01:4f:de:56:74:e9:5e:40:f9:56:a6:7a:c9:
                    93:7d:e3:a8:6e:33:11:f5:35:88:0f:26:a6:37:0e:
                    5d:be:0a:d9:68:0c:b3:f9:fa:8b:ed:55:32:cc:41:
                    e8:6f:1e:2e:82:dc:e0:af:f8:1f:bd:20:3d:d4:57:
                    77:76:e6:c7:9c:c2:ba:99:dc:9d:b8:ac:b7:79:6c:
                    77:9a:2c:89:08:0e:79:9b:be:9f:ea:b4:08:56:9f:
                    3a:81:a5:ef:0a:3b:09:c8:e6:cf:d0:95:81:d8:98:
                    df:72:82:18:b1:86:e9:3a:e3:5f:3c:22:8b:ec:75:
                    d4:1b:43:cd:a8:1c:1b:a7:0e:0e:b2:80:ea:68:9d:
                    7a:5c:23:21:f2:78:97:87:b1:62:75:f3:58:8d:52:
                    d5:11:44:37:31:ed:92:71:e0:33:0d:31:ff:96:59:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:4E:6B:8F:F0:64:2E:9B:64:C9:45:C4:CA:AA:F6:7B:F4:76:ED
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:1b:23:2e:78:b0:a0:50:d0:e4:6d:86:69:d6:2b:f8:27:
         28:44:fb:2f:25:b1:9b:f4:87:df:0c:cb:14:58:cf:6b:d1:91:
         cc:ca:70:80:09:63:46:2f:17:a6:67:d9:e9:71:4f:65:a8:c9:
         05:8d:7c:06:1e:8b:e1:c4:7e:29:02:51:b8:b6:49:01:f3:7e:
         ba:99:e4:e8:ee:4f:fd:7d:97:f0:49:a5:0e:02:1d:3c:cf:b9:
         f7:f9:dd:33:a3:75:3b:4e:7e:50:b9:c4:90:77:45:f7:52:2f:
         91:f3:b3:45:d1:00:62:bc:81:88:06:3b:62:f8:af:3c:a0:1a:
         42:42:93:33:e8:a0:0d:43:42:7f:cc:65:b6:ff:c7:24:03:a3:
         70:54:64:f8:53:5e:6c:86:20:2d:61:94:dd:cd:69:ee:12:19:
         97:6b:b3:b1:47:d0:26:e2:d3:13:18:c1:d3:01:e1:8d:99:a3:
         e7:f8:90:35:5a:7a:c8:9a:f4:e7:4b:78:5f:4f:06:c4:71:02:
         a0:49:89:a9:16:03:a3:58:9c:73:e7:df:e2:66:b0:c7:c0:9e:
         be:4b:6f:77:31:f5:af:0d:9f:c3:75:1e:ea:64:75:55:2b:7f:
         11:6c:7c:4e:b3:b7:86:68:0b:98:70:be:19:33:84:93:92:b0:
         b8:ca:b1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1jkkLoH6GiRc6p96sP3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh
ZWZjZDAwHhcNMjYwOTEwMTUwMTA3WhcNMjYwOTExMTUwMTA3WjAzMTEwLwYDVQQD
EyhiODI1NGU2YjhmZjA2NDJlOWI2NGM5NDVjNGNhYWFmNjdiZjQ3NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJCvYF57c8PZVzfN4M6DefRUtJUZ
IVXw6BcQ1Ev0vIP45IcXKapzy5YEZnaXWCS66A5HaOzl3vSaHSCkQUbZ/Fy+f27p
koduMmjtbZhsYyX+tp+QVjdOzHxUlQFP3lZ06V5A+VamesmTfeOobjMR9TWIDyam
Nw5dvgrZaAyz+fqL7VUyzEHobx4ugtzgr/gfvSA91Fd3dubHnMK6mdyduKy3eWx3
miyJCA55m76f6rQIVp86gaXvCjsJyObP0JWB2JjfcoIYsYbpOuNfPCKL7HXUG0PN
qBwbpw4OsoDqaJ16XCMh8niXh7FidfNYjVLVEUQ3Me2SceAzDTH/llnlPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLglTmuP8GQum2TJRcTKqvZ79HbtMB8GA1UdIwQY
MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt
NzcwZjhlYWIyYWU3LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3
LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSsbIy54
sKBQ0ORthmnWK/gnKET7LyWxm/SH3wzLFFjPa9GRzMpwgAljRi8XpmfZ6XFPZajJ
BY18Bh6L4cR+KQJRuLZJAfN+upnk6O5P/X2X8EmlDgIdPM+59/ndM6N1O05+ULnE
kHdF91IvkfOzRdEAYryBiAY7YvivPKAaQkKTM+igDUNCf8xltv/HJAOjcFRk+FNe
bIYgLWGU3c1p7hIZl2uzsUfQJuLTExjB0wHhjZmj5/iQNVp6yJr050t4X08GxHEC
oEmJqRYDo1icc+ff4mawx8CevktvdzH1rw2fw3Ue6mR1VSt/EWx8TrO3hmgLmHC+
GTOEk5KwuMqx2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:40 2026 by rpki-client