Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          CIpR4E9GSj5Vb0kEdrk9JCmg88pNQrB4GiowHEWFbxc=
Subject key identifier:   67:CF:C9:F7:8C:57:B5:EF:C3:8F:6E:C1:3E:85:6F:50:CE:EC:69:82
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       0197B632B5DAAEBAE699A5869879A0CC517C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0B54
Signing time:             Sat 28 Jun 2025 11:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:06 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: nQYOw73Sz5IO3WlZhVDE9Shdvd4BB541o8YdJnWar0g=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: h7Gclrhu6SOaWvFbiHElhAwE2xc.roa (hash: hHmeLevnWBoLoCenM/A/c8Y0QgQSSX5DM+SnErFkEgU=)
                          5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:b5:da:ae:ba:e6:99:a5:86:98:79:a0:cc:51:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jun 28 11:01:06 2025 GMT
            Not After : Jun 29 11:01:06 2025 GMT
        Subject: CN=67cfc9f78c57b5efc38f6ec13e856f50ceec6982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:fb:e6:23:68:83:01:9d:6d:e7:de:12:d5:
                    a7:de:78:6f:6c:ea:13:b1:2a:df:f7:27:df:4d:0f:
                    04:ca:9a:01:75:24:6e:44:e7:ce:f5:95:5f:30:d1:
                    b5:14:ae:6a:d2:0e:b5:4a:fa:6f:3d:e9:a1:46:c8:
                    5a:51:fa:12:22:e9:e9:1d:8b:dd:74:c9:80:99:e7:
                    db:ad:e4:af:a3:28:ea:93:93:13:89:90:3c:a2:fc:
                    02:85:f4:5d:2e:3a:d4:24:59:90:26:91:94:22:a2:
                    42:5c:15:1b:38:ce:0d:bb:3f:b6:47:3e:52:ed:6f:
                    ac:d3:15:ca:82:b3:89:12:e6:8a:51:09:1d:36:7d:
                    63:05:29:07:d1:11:13:7c:80:c7:87:6d:d7:d8:93:
                    d6:a9:46:c9:40:56:20:4b:59:7b:29:e2:c1:aa:38:
                    dd:cd:97:fe:7a:3e:0a:70:a3:1e:e3:e6:be:f8:5d:
                    16:48:6c:bf:80:b7:e1:ed:1e:2a:a5:76:4b:c3:23:
                    c7:d5:c5:b1:b1:2d:e8:b6:a3:27:c1:3b:80:49:53:
                    aa:21:00:d1:10:d3:87:4f:8d:c3:9d:ce:ca:e2:7b:
                    53:b5:13:62:27:ef:a8:51:9b:07:6f:d0:02:fa:c3:
                    69:5d:1b:94:d1:92:b6:e0:9a:a3:b3:d6:76:40:5b:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CF:C9:F7:8C:57:B5:EF:C3:8F:6E:C1:3E:85:6F:50:CE:EC:69:82
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:43:4f:ed:d4:b7:b4:46:24:75:8a:49:3d:36:86:51:36:78:
         21:2a:d8:08:98:5b:75:bd:45:d9:83:fe:6e:3c:55:12:a3:4d:
         f6:5f:42:24:f1:0e:97:5b:59:d4:2b:b3:d4:5e:d4:9b:28:84:
         63:62:75:cc:cd:b6:7c:b7:0e:b4:b1:d7:df:85:11:e7:ba:12:
         60:94:1f:e9:e1:1f:84:4f:49:e8:81:77:eb:bf:01:e5:de:12:
         93:43:9b:87:d1:a1:67:0c:f1:5e:e9:5b:bc:cf:b7:60:d3:d6:
         e3:5c:d7:8d:bf:03:e2:42:92:dd:c7:ed:02:94:66:47:6e:53:
         e2:90:29:9d:ee:20:d9:60:0b:62:4d:ef:1e:ff:d0:06:25:18:
         38:b0:20:7f:98:3c:cb:92:31:20:ee:d4:df:21:a8:86:1e:f6:
         6f:ad:0f:58:98:9c:56:85:3f:cf:3f:7b:0f:18:17:bc:e8:d0:
         c4:af:f6:20:b8:45:73:4f:d0:50:6f:e1:c7:4c:66:bf:36:1a:
         f4:4b:e1:5e:1c:77:ee:9f:3c:cf:e5:30:e8:60:66:68:af:67:
         a1:8e:dd:ac:d5:73:a4:0a:fa:b8:01:51:dd:ea:bb:31:1c:2c:
         3f:87:fc:ed:45:60:ef:1d:5c:7b:12:2d:28:87:2b:bc:54:86:
         46:1f:a7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:46 2025 by rpki-client