Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          WJ0XXju1SYdiGW5uN3CPyGRDotQbkypRLOjw8XIckYI=
Subject key identifier:   EC:E8:74:57:E7:2B:1F:7D:B8:1F:0C:53:DF:EE:CF:C6:78:02:DF:6B
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01A0D917AF570B05432CA1A23BA81ABC21FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          1013
Signing time:             Fri 25 Sep 2026 15:03:23 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:23 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:23 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: 2O36i8UYFbEZiuF5CwoMN9MtF7RR91nbnlmvGtDNemo=)
                          4: dOZ-UZAilPuTxMdA91BX6bqpZdo.roa (hash: EnTNe2Fu+ylf9yT4Bos+C9yigYIvj4IsKWPgtuOze0Y=)
                          5: oirT68elnD8WOEzPZnA1_dmBao4.roa (hash: Akx9tyxE9m7xqNhCByZw0ZpZ6/f1RmbIztXn55qynJM=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:af:57:0b:05:43:2c:a1:a2:3b:a8:1a:bc:21:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Sep 25 15:03:23 2026 GMT
            Not After : Sep 26 15:03:23 2026 GMT
        Subject: CN=ece87457e72b1f7db81f0c53dfeecfc67802df6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:26:84:95:39:8d:b7:cc:a5:b8:79:48:ed:
                    a2:0d:ed:af:80:63:9f:a2:c4:8c:0c:c4:ca:26:58:
                    8d:2b:9b:89:69:89:2e:5a:97:8a:d1:66:15:c2:80:
                    ab:3b:ee:2b:a7:fc:48:ba:36:f6:4d:db:fd:6b:ab:
                    83:02:a2:88:6b:12:2b:52:76:ae:aa:4c:f4:0b:bf:
                    10:84:1c:de:c8:f1:98:1f:5d:06:0b:c4:4c:20:44:
                    f7:57:c4:d9:55:19:bb:00:35:da:8d:39:92:f7:61:
                    0b:70:1a:7f:fd:7e:3f:fc:de:56:80:36:b0:49:ec:
                    6a:f1:21:86:8c:3e:00:a5:0c:7f:26:94:b8:41:b4:
                    48:1f:ac:f6:95:6c:91:11:bb:d7:10:d7:29:df:f4:
                    7c:a5:3c:6c:4f:12:81:72:ef:7f:3e:80:66:25:a0:
                    fb:fc:a8:f7:d6:fb:36:46:fc:be:ed:1a:f3:31:fb:
                    bc:b9:87:f4:e7:23:04:ce:3b:10:95:68:1f:6c:fe:
                    c3:6d:df:c1:c2:1a:13:96:69:47:b0:4d:72:ff:30:
                    24:38:8e:f3:37:6e:85:9b:b7:2c:dd:4a:c7:89:99:
                    92:d2:c4:01:fe:34:5a:dd:00:81:8e:c0:ea:57:6f:
                    82:0f:52:fe:c1:8b:0b:87:5a:de:a0:35:82:e9:d9:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:74:57:E7:2B:1F:7D:B8:1F:0C:53:DF:EE:CF:C6:78:02:DF:6B
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:c6:44:a1:3f:3d:8f:27:fd:0d:9b:20:69:07:ba:ba:e9:
         5b:53:d8:0e:bd:d2:0e:1d:4d:59:5a:99:fe:19:26:c6:33:05:
         b1:c7:0c:ba:5e:37:38:fc:32:80:6b:33:0d:2d:95:33:85:83:
         cd:41:7c:a2:cc:b8:77:42:98:5d:dc:9c:ad:aa:e7:5f:3f:2f:
         a3:e7:ea:62:4f:9b:79:5c:5c:45:7e:42:e9:97:f9:5c:bb:a7:
         53:14:cd:08:37:78:44:4c:10:b0:db:dc:87:aa:ae:c8:ee:38:
         10:a5:b7:a0:56:04:df:f8:1b:c5:72:a8:4c:52:0f:27:31:85:
         bf:28:94:eb:ea:68:46:c4:da:71:3c:3a:0f:43:32:bd:58:ce:
         8e:06:d7:6d:e5:53:63:28:5b:a0:29:98:09:bc:ab:76:db:a5:
         08:bd:9b:51:ce:e6:c0:5a:c8:3f:67:31:e5:94:ce:4f:03:4b:
         f0:92:40:d6:a1:b6:ce:08:a6:c9:e3:b0:c7:90:33:f0:81:da:
         37:b5:08:cc:93:a6:3e:bc:ee:9c:31:7e:88:d0:6c:a4:10:b5:
         d3:9b:d7:ae:ac:68:65:3c:fe:5d:be:48:11:56:72:e8:cf:bc:
         60:6e:d9:49:87:01:63:cf:6f:b8:02:12:03:77:88:81:01:a5:
         ef:27:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:27 2026 by rpki-client