Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          2xQ2S+HLAfprkwnH6d7FLdd1lAMcczc0y1ZpvJnxTME=
Subject key identifier:   7C:B4:55:28:FA:C1:0B:B7:C1:47:E5:EC:A1:B4:71:8C:0B:33:30:5D
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       0196729D85889CC20D5DD8D0F8D0832CA871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0AAC
Signing time:             Sat 26 Apr 2025 15:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:47 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: Y6pwMHF6eSvzmGb+6mz8Q0cT4gtKIwk27KJjeVLTS5E=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          5: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
                          6: o2wn3mbItTBjc_bcacCib0Z56J0.roa (hash: 4MU1GeOc8ffLN6ba0fSqewF7b8KH+w7vt1UXghMCELk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:85:88:9c:c2:0d:5d:d8:d0:f8:d0:83:2c:a8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Apr 26 15:00:47 2025 GMT
            Not After : Apr 27 15:00:47 2025 GMT
        Subject: CN=7cb45528fac10bb7c147e5eca1b4718c0b33305d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:2e:56:28:e2:13:69:0b:cb:ad:ab:c7:71:
                    b3:28:c0:7d:11:21:a5:74:a9:b4:0e:bc:bf:e8:6b:
                    f5:86:5f:d0:50:b4:e1:f9:11:80:32:5e:b9:56:6d:
                    dd:6d:08:8e:e9:b4:46:3d:68:92:05:22:3a:ba:be:
                    74:a0:29:25:60:93:bd:b9:7b:29:43:ed:03:61:fb:
                    f4:45:9c:a3:26:c7:f1:62:64:f5:55:04:7c:42:ad:
                    c9:65:39:5d:b8:35:fc:06:e1:c6:29:e9:71:e8:32:
                    ec:45:4c:fc:a7:cf:dd:97:c9:a6:d0:cd:3c:1e:a1:
                    5a:3f:c8:50:da:9f:ee:65:66:6d:33:c3:55:9e:8f:
                    c2:d0:ff:70:ed:2b:ad:3b:aa:f5:0e:cb:1c:1e:2b:
                    bd:b2:1d:fd:4f:a4:c6:23:75:cd:af:00:16:4f:28:
                    bc:5e:a7:a5:e6:fc:69:6b:a2:4d:62:fd:4e:5e:1e:
                    07:08:0f:85:a4:54:05:de:0b:07:8d:d1:00:3e:c2:
                    a6:46:9a:cf:f5:76:1f:af:cd:d5:c3:4f:4b:71:bd:
                    88:65:a0:52:2d:6c:f2:22:ce:be:95:01:13:f0:4c:
                    92:d3:fc:37:b6:42:ed:21:91:79:a9:16:b5:96:33:
                    d4:65:61:3e:ee:70:1e:fd:82:c6:4b:09:36:8d:18:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:55:28:FA:C1:0B:B7:C1:47:E5:EC:A1:B4:71:8C:0B:33:30:5D
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:f6:59:3d:74:87:de:33:ed:4d:4f:0b:e8:a2:d9:7f:33:
         a0:7e:e4:85:d5:1f:20:e9:6d:cc:ce:84:1e:f3:25:d3:3b:36:
         55:3c:93:77:3a:49:49:6a:d8:74:27:3f:0c:33:20:59:d3:28:
         ec:74:07:cc:0c:ce:d7:5a:16:dd:bd:85:72:a7:53:52:48:10:
         b7:37:31:81:ef:0c:69:9b:3a:8d:41:5c:fa:50:38:55:b3:cf:
         1a:cd:35:b8:3c:1d:88:5b:77:3a:4f:82:06:ac:2a:1d:f9:60:
         31:13:91:6d:d5:6a:e1:bb:a9:45:c4:9d:26:19:4e:63:ae:ac:
         84:be:e5:a8:5b:ed:4a:9b:a3:c0:f0:4b:dd:13:f7:bb:9c:28:
         f2:04:20:0e:eb:4b:29:a5:f7:fc:ae:f0:6d:3c:cc:04:ad:ed:
         b7:ec:55:d2:cd:7e:80:e6:c1:07:43:66:93:9e:c7:f3:6e:1a:
         90:14:1b:76:af:c8:ed:d0:4f:26:57:2b:39:bd:99:2d:e6:af:
         56:27:6a:0f:e3:85:8c:2c:23:2e:57:e2:cc:f5:56:08:b6:a7:
         ee:7c:f8:5a:0b:2a:f2:e9:b4:b7:39:7c:1a:c0:11:f3:86:e9:
         6e:86:5b:a0:7c:62:14:23:60:e7:d6:a8:e4:60:2b:5e:0a:b5:
         1f:94:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:59:25 2025 by rpki-client