Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          dDeXIcQDM8izEt0d8E5rkEzr1oqXH0b7xNtlt4hyBWc=
Subject key identifier:   2A:F7:3F:37:AC:E0:5A:22:0D:D3:98:C6:4E:2D:FC:95:CC:C5:98:AA
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01A1DFB9F85F08F83F09D89DB0C0D52ECF37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          109B
Signing time:             Sun 15 Nov 2026 15:01:09 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:09 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:09 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: Gln4ZM89q4ezHCdzTQ97sgfbdBuoCauffCJkWHboook=)
                          4: dOZ-UZAilPuTxMdA91BX6bqpZdo.roa (hash: EnTNe2Fu+ylf9yT4Bos+C9yigYIvj4IsKWPgtuOze0Y=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:f8:5f:08:f8:3f:09:d8:9d:b0:c0:d5:2e:cf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Nov 15 15:01:09 2026 GMT
            Not After : Nov 16 15:01:09 2026 GMT
        Subject: CN=2af73f37ace05a220dd398c64e2dfc95ccc598aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:be:de:e8:4f:4f:ad:83:de:16:79:e1:d1:
                    41:fb:74:8d:51:89:6a:b5:ec:78:e2:a0:27:74:ac:
                    7b:66:b3:4e:d2:55:49:d5:a0:f6:56:a4:f8:45:76:
                    3b:10:fc:38:f9:0c:32:ee:0a:fe:02:6a:cf:86:f7:
                    e4:f9:1f:d2:27:92:9f:bd:d7:89:76:29:28:b8:ca:
                    ed:cc:75:4b:40:9f:1e:cf:3c:8e:c6:8c:1b:cb:6e:
                    9f:f8:0c:61:86:2d:07:07:50:3b:59:70:03:c3:88:
                    8e:66:09:0c:5a:53:8c:35:04:6d:f9:c1:ed:07:bc:
                    08:1d:8e:3f:f3:20:84:cb:b0:a1:88:f3:07:31:1a:
                    58:46:68:1f:30:56:4a:81:1c:30:d1:db:9b:83:78:
                    26:ce:62:50:bf:18:d1:e6:7c:2e:f9:fb:45:c2:b8:
                    0e:3a:51:04:ad:30:95:c3:b5:08:ea:e8:4e:85:a3:
                    c4:ff:a1:d0:15:ee:5f:7d:af:8f:ad:53:fb:6b:11:
                    4a:6e:4c:6f:45:d9:7e:c0:5b:ea:6b:3f:5d:52:b6:
                    c4:74:68:ec:13:41:14:84:ff:09:2b:28:0b:af:18:
                    fd:99:70:44:3b:0e:b0:05:8e:be:61:ec:15:9d:d4:
                    c2:08:a5:73:0d:ae:69:66:c4:a6:db:66:44:21:ef:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F7:3F:37:AC:E0:5A:22:0D:D3:98:C6:4E:2D:FC:95:CC:C5:98:AA
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:e1:36:37:7f:ae:a4:99:75:de:43:bc:e1:87:44:99:cb:
         84:58:59:dc:fe:ef:2b:37:c9:57:d7:62:ad:0e:cd:c2:33:52:
         6c:9a:84:d2:09:a8:c4:4a:c0:a8:00:5b:68:05:55:d8:b1:75:
         61:ce:43:35:aa:cf:10:ba:e4:b2:ce:16:e0:66:52:1e:00:b2:
         c8:7a:58:c8:c3:54:37:62:27:ca:5d:66:1a:45:18:ff:36:60:
         b6:52:6e:e5:e7:eb:bb:7c:2f:56:2d:13:d4:2e:07:67:4c:08:
         c2:c8:1a:7c:39:e3:a5:7d:e9:90:01:3d:f3:20:3f:86:5a:c2:
         8e:88:ca:df:a5:70:92:3a:f7:be:26:88:f9:a8:ad:8e:05:d3:
         2e:88:26:02:3e:c3:c1:22:2e:a7:56:df:a5:97:4c:e6:77:3b:
         c3:5e:fe:6c:2b:4d:d4:b9:af:de:05:1e:74:df:77:f4:21:4d:
         67:fd:1e:e8:4e:b8:a9:5f:a9:2b:a2:ea:ad:3f:ff:09:ae:e7:
         cb:d9:32:8a:2d:74:40:99:33:c8:ba:96:b6:91:3d:fa:17:f9:
         6f:41:85:49:38:63:c8:04:61:e9:7d:0b:29:59:8e:a5:76:bb:
         07:45:1b:28:38:cd:51:c7:c7:e6:40:66:af:8e:7f:92:f2:5f:
         82:49:54:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfufhfCPg/CdidsMDVLs83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh
ZWZjZDAwHhcNMjYxMTE1MTUwMTA5WhcNMjYxMTE2MTUwMTA5WjAzMTEwLwYDVQQD
EygyYWY3M2YzN2FjZTA1YTIyMGRkMzk4YzY0ZTJkZmM5NWNjYzU5OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBe+3uhPT62D3hZ54dFB+3SNUYlq
tex44qAndKx7ZrNO0lVJ1aD2VqT4RXY7EPw4+Qwy7gr+AmrPhvfk+R/SJ5KfvdeJ
dikouMrtzHVLQJ8ezzyOxowby26f+Axhhi0HB1A7WXADw4iOZgkMWlOMNQRt+cHt
B7wIHY4/8yCEy7ChiPMHMRpYRmgfMFZKgRww0dubg3gmzmJQvxjR5nwu+ftFwrgO
OlEErTCVw7UI6uhOhaPE/6HQFe5ffa+PrVP7axFKbkxvRdl+wFvqaz9dUrbEdGjs
E0EUhP8JKygLrxj9mXBEOw6wBY6+YewVndTCCKVzDa5pZsSm22ZEIe9mBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr3Pzes4FoiDdOYxk4t/JXMxZiqMB8GA1UdIwQY
MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt
NzcwZjhlYWIyYWU3LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3
LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABprhNjd/
rqSZdd5DvOGHRJnLhFhZ3P7vKzfJV9dirQ7NwjNSbJqE0gmoxErAqABbaAVV2LF1
Yc5DNarPELrkss4W4GZSHgCyyHpYyMNUN2Inyl1mGkUY/zZgtlJu5efru3wvVi0T
1C4HZ0wIwsgafDnjpX3pkAE98yA/hlrCjojK36Vwkjr3viaI+aitjgXTLogmAj7D
wSIup1bfpZdM5nc7w17+bCtN1Lmv3gUedN939CFNZ/0e6E64qV+pK6LqrT//Ca7n
y9kyii10QJkzyLqWtpE9+hf5b0GFSThjyARh6X0LKVmOpXa7B0UbKDjNUcfH5kBm
r45/kvJfgklUFg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:34:30 2026 by rpki-client