Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          7FJbOSYAWMEoBaCba0wukbiOXNwQzf2uEaGEG3KAkxM=
Subject key identifier:   CC:DF:A9:6C:2D:A3:DE:39:B0:FF:78:1B:79:1D:AC:CD:61:32:85:B5
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       0196A8AFFD93EB1B2F7FDE6D459CB1A2FA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0AC8
Signing time:             Wed 07 May 2025 03:00:28 +0000
Manifest this update:     Wed 07 May 2025 03:00:28 +0000
Manifest next update:     Thu 08 May 2025 03:00:28 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: l9UzoBst5Cefn4RRM5yH34YtDlR8l7xSA3FBU1RKkAI=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          5: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
                          6: o2wn3mbItTBjc_bcacCib0Z56J0.roa (hash: 4MU1GeOc8ffLN6ba0fSqewF7b8KH+w7vt1UXghMCELk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:af:fd:93:eb:1b:2f:7f:de:6d:45:9c:b1:a2:fa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: May  7 03:00:28 2025 GMT
            Not After : May  8 03:00:28 2025 GMT
        Subject: CN=ccdfa96c2da3de39b0ff781b791daccd613285b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:65:0d:e9:92:ae:42:f1:6f:2a:5c:6d:49:
                    59:9c:9a:e2:2a:02:32:be:ee:7b:ed:e3:62:d6:38:
                    7d:58:fe:8e:98:35:fc:45:59:52:ce:d9:db:e7:e3:
                    6b:c9:98:da:44:a1:f4:7f:10:5c:9e:6b:bf:1b:08:
                    18:e0:80:53:f7:0f:00:f7:ce:63:8c:1e:a5:ad:e7:
                    be:0b:bc:e5:b2:cf:e1:73:da:3d:b8:f5:80:49:74:
                    d0:c0:9c:46:42:f4:5e:5b:7b:bf:60:e5:19:d2:ef:
                    78:a7:5a:50:09:0b:9b:18:82:1b:72:84:40:4f:66:
                    63:a4:bc:89:98:12:4e:3a:c3:1d:c8:00:7f:cd:1d:
                    3a:e8:7f:05:28:69:eb:6f:63:50:5a:00:ca:55:bc:
                    ee:45:a4:0a:f7:06:65:5f:1f:b3:66:5a:26:22:d3:
                    07:f9:3a:a3:3d:27:47:56:99:3e:2a:45:dd:d6:fe:
                    c2:e4:0e:b6:bb:8e:9b:eb:10:82:59:ac:c2:48:8b:
                    28:a5:73:86:52:a5:39:12:90:ac:22:57:2a:45:35:
                    df:08:09:3e:ac:04:cc:3e:85:d0:3d:1a:5a:ff:4a:
                    c9:3b:84:1e:76:a0:3f:78:7f:48:0c:b2:85:dd:1b:
                    5e:33:7f:bb:e9:65:79:63:7c:4c:18:7d:45:f0:a4:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:A9:6C:2D:A3:DE:39:B0:FF:78:1B:79:1D:AC:CD:61:32:85:B5
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:10:ed:80:c1:8f:ee:e3:c1:3a:1d:75:ac:33:c4:4c:13:
         7f:17:61:75:f3:93:b5:b9:72:aa:f7:cf:c8:99:c2:0d:27:5e:
         4c:5f:b0:8b:8b:7b:3a:1c:5a:17:cb:4a:12:39:dc:7c:71:ef:
         c3:94:dd:77:47:6a:0b:d9:6d:3b:33:86:57:d2:0d:b2:78:96:
         eb:bd:c7:e8:ac:03:46:a8:74:d5:4a:6f:9c:c0:06:7d:91:df:
         0d:7c:d1:63:44:90:4b:2d:ab:a5:38:93:7c:42:a0:07:cb:f7:
         d0:6a:f3:e1:e9:15:c0:be:e1:08:1b:97:d0:55:d6:5c:ce:24:
         96:12:b3:25:85:de:52:3f:c2:a4:b7:58:ad:53:1c:42:4b:e1:
         f0:0f:2e:e8:f3:c1:21:e6:52:8d:e5:62:40:3c:b5:5c:5a:f3:
         d8:e5:40:2f:e6:d4:bb:0e:a8:4e:82:98:27:5e:53:8d:ec:76:
         27:1c:44:41:36:0c:7f:67:f7:15:65:a5:07:8d:c5:e6:53:4a:
         5b:6d:ec:fe:30:7b:23:c9:42:91:d6:15:ee:1f:b0:b3:13:41:
         6f:10:b7:3a:1c:3b:b1:28:4e:4b:ee:a5:b2:e5:97:7a:af:f5:
         be:eb:1a:65:ad:f8:89:71:83:82:41:b4:fa:15:c9:2c:a5:df:
         87:31:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:55:43 2025 by rpki-client