Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          AzzNed9SLYNNa4RLuORZJPI0GrjvrJAAioTgjpAH2Hs=
Subject key identifier:   C8:3F:EB:E4:16:FC:2F:73:48:00:0F:23:99:84:2A:96:16:BA:29:56
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019D999955C4D4CF14EF19F3952EF2E2A4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0E64
Signing time:             Fri 17 Apr 2026 04:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:56 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8CxQcTO3gzXmwcuG0fFVXjw_yfA.roa (hash: nNtkgz35KV+aXckr0faszMZ/wBI6TdmhZfb4uKa2DV8=)
                          3: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          4: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: mhvRa3O50FeYWfdsAgllfkKorBhkpTRxPXpl5fju4hQ=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:55:c4:d4:cf:14:ef:19:f3:95:2e:f2:e2:a4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Apr 17 04:00:56 2026 GMT
            Not After : Apr 18 04:00:56 2026 GMT
        Subject: CN=c83febe416fc2f7348000f2399842a9616ba2956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:f4:4b:e9:bd:76:00:9b:9b:3e:63:f0:06:
                    69:25:d9:87:ce:f3:b7:29:81:7e:97:6f:fc:28:71:
                    3e:84:53:56:18:1a:63:ed:c8:8b:24:6d:33:a6:00:
                    90:7a:25:8f:52:28:20:a8:73:70:ca:41:58:a5:80:
                    b8:53:d0:b3:90:1e:3d:bf:4f:0a:c8:50:d4:b6:94:
                    1c:a0:a0:0e:8d:81:91:66:f8:f5:5a:44:99:14:45:
                    65:19:28:a9:a1:c8:41:b2:f0:f1:70:ca:01:4c:f1:
                    5f:be:2a:36:e6:c5:8e:25:0d:a3:13:f5:bf:2f:ae:
                    8d:35:dd:10:d6:93:3c:8e:e7:01:10:7c:dd:0c:d8:
                    45:b1:a2:41:04:3f:a6:e6:77:0b:e5:98:87:98:e9:
                    25:cb:03:b4:be:9c:ab:12:17:d5:d0:3a:3c:3c:33:
                    7e:24:7e:63:c6:f4:e7:7b:7b:a9:f2:39:7d:c1:25:
                    f6:90:f9:74:f9:a6:a9:0a:e5:20:39:15:d0:08:59:
                    4b:b1:28:cb:00:aa:b2:33:29:b8:b9:05:05:89:81:
                    72:0c:c2:c2:e6:89:04:07:f5:ed:02:2e:77:cd:49:
                    ff:75:7c:36:56:0c:23:fb:c6:50:c3:94:25:e6:5e:
                    24:42:bb:99:9f:57:bf:d3:37:66:14:e9:9e:c2:87:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:EB:E4:16:FC:2F:73:48:00:0F:23:99:84:2A:96:16:BA:29:56
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7b:86:c8:2c:26:43:15:50:9d:f6:3c:30:13:3d:3d:40:4b:
         f9:04:12:d6:ff:47:4c:08:ff:61:1d:ab:a4:bb:31:dc:38:3d:
         6a:75:b8:ef:68:c6:b8:b2:8d:7c:25:1c:77:4b:e0:4e:24:ee:
         54:18:fd:b8:6f:45:b4:22:1a:45:0d:99:3c:a2:63:7a:f7:ab:
         0f:b4:7e:24:ae:41:3d:64:45:8b:94:13:35:d4:29:35:07:9f:
         71:b4:4d:35:f0:4e:47:5e:eb:f3:36:04:e7:3b:5b:26:a7:75:
         74:f6:ed:a8:dc:a2:4a:9a:c6:4e:d8:b1:6d:1c:40:4c:8c:bf:
         0e:da:5a:45:69:75:cf:ea:fa:e0:e0:3e:8d:76:31:1c:63:1d:
         1e:11:f7:87:4e:6e:ea:2a:84:ce:38:7e:ac:f6:74:d6:d9:d8:
         8b:6b:bb:8c:b6:d7:d5:69:e4:58:3b:f5:51:55:86:13:ee:49:
         7d:3e:54:64:30:93:19:65:03:22:c6:2b:c1:e5:a7:e2:5f:08:
         16:b4:a2:a7:dd:84:1b:6c:cb:67:40:29:b3:7e:cf:c7:c3:ef:
         a4:c9:3c:03:b8:a3:66:69:a6:11:1c:e9:d1:52:33:64:da:ea:
         d8:20:7e:1a:9b:84:84:b6:55:9c:eb:19:4d:1d:db:6f:c1:46:
         13:69:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:10 2026 by rpki-client