Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          uRKJCQYUqd/EbkHWK0BwJgt9syINh4kpSqg/GSb33Ro=
Subject key identifier:   E7:28:8A:82:75:E0:FC:02:AE:2E:B5:01:56:13:B3:16:47:F3:19:DA
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01976DABA4CF14EBC35B451BA7E2E08A968C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0B2E
Signing time:             Sat 14 Jun 2025 09:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:54 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: /uU1hwwupytjQHH2kNgnISR8e3E/0HQ7XoSvB8XCHAo=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          5: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
                          6: o2wn3mbItTBjc_bcacCib0Z56J0.roa (hash: 4MU1GeOc8ffLN6ba0fSqewF7b8KH+w7vt1UXghMCELk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:a4:cf:14:eb:c3:5b:45:1b:a7:e2:e0:8a:96:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jun 14 09:00:54 2025 GMT
            Not After : Jun 15 09:00:54 2025 GMT
        Subject: CN=e7288a8275e0fc02ae2eb5015613b31647f319da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:b0:96:eb:c0:89:7a:9b:7f:a7:6b:10:b9:
                    14:b3:d9:b7:ad:48:0e:11:08:41:f0:ce:7a:a9:37:
                    fe:4c:2e:f3:c3:9d:24:5b:9c:12:c1:6a:ed:6a:0f:
                    97:fd:b1:02:8d:ad:4f:9f:2b:23:e2:4f:35:65:ae:
                    0f:01:09:cd:ed:02:2d:0d:78:b1:32:0c:0b:7b:22:
                    74:59:6c:3b:3f:2d:59:70:1c:e8:18:5b:c0:e8:35:
                    94:6e:d8:71:62:e5:18:28:29:58:d5:05:ef:ab:23:
                    3e:22:2b:f5:9f:b5:08:97:32:32:2d:da:f9:0e:92:
                    7a:a7:8b:5b:fe:9c:64:3d:fb:47:ee:61:fb:11:5d:
                    43:c0:ec:ce:f0:b2:ae:65:5c:3c:d2:46:ba:e4:91:
                    63:b3:b9:c6:79:f5:46:19:6c:85:30:a6:e5:38:b0:
                    db:0b:a0:99:57:02:dd:64:27:ec:56:1f:15:03:af:
                    d7:82:2f:59:40:42:0a:a9:65:ec:53:0f:22:59:a5:
                    7b:37:77:50:d3:6e:a7:54:23:62:50:ac:98:de:a9:
                    f1:d3:a8:0a:b8:51:8f:d4:dc:02:e0:d4:21:d6:ed:
                    c0:e1:75:cf:89:ce:68:04:cd:18:a4:3b:55:13:9e:
                    7d:b5:5c:0b:09:8b:8c:a1:32:91:81:cf:6d:4f:40:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:28:8A:82:75:E0:FC:02:AE:2E:B5:01:56:13:B3:16:47:F3:19:DA
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:8e:91:8a:2e:0c:90:b9:c0:6a:eb:73:af:63:9e:f5:cb:
         6e:f0:ab:10:ef:68:78:93:13:a8:56:be:3c:07:be:ac:31:d4:
         20:cc:26:26:11:8f:4d:86:96:d2:16:a0:8d:b5:f6:b5:63:c3:
         d0:c8:8f:a1:35:0d:b1:43:af:ed:5d:63:37:ab:bd:f9:b2:52:
         7e:dd:cd:07:e3:d4:f8:6f:10:c6:f1:7a:29:cf:dc:44:c4:b8:
         39:97:d9:2e:0f:02:1e:02:55:81:da:11:3c:54:fb:f4:17:c0:
         d3:e8:aa:87:f6:ab:13:b0:2a:84:94:a9:55:d9:87:a3:f2:4e:
         21:24:6c:13:09:34:da:41:69:e6:e1:94:c2:54:19:8b:ff:0c:
         86:7c:cd:8b:0c:85:c9:94:a9:09:ad:59:53:68:e2:33:c8:cd:
         f9:6c:fc:3d:7e:2d:59:c9:ef:57:9e:07:16:18:f1:eb:33:52:
         69:14:bc:d1:ad:30:89:b8:25:ed:a4:72:14:21:bb:96:cc:75:
         bf:95:62:ea:a4:10:6c:55:59:eb:cb:40:8c:64:52:21:ef:87:
         6f:31:03:80:a4:c0:fd:23:4e:5f:26:23:0d:c3:16:4a:be:f1:
         f6:ea:1a:c5:ce:79:7e:3e:f3:07:32:c0:aa:de:71:05:bb:1d:
         46:b8:53:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:38:12 2025 by rpki-client