Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          6tUv6t7fA0mHFJyR9P0ueGrBZPUo1+TT0nhx8AxCaDI=
Subject key identifier:   59:BE:14:DD:91:A7:A9:EE:68:91:BA:DD:02:DD:DC:71:1A:14:DF:C0
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       0199FB7C9095752D1147842DFD2CB87B53DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0C81
Signing time:             Sun 19 Oct 2025 08:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:08 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: 88gg7fO7ffnzL5ZQY85plq8MB9vNXJNsyhpAaP9vSh8=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: h7Gclrhu6SOaWvFbiHElhAwE2xc.roa (hash: hHmeLevnWBoLoCenM/A/c8Y0QgQSSX5DM+SnErFkEgU=)
                          5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:90:95:75:2d:11:47:84:2d:fd:2c:b8:7b:53:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Oct 19 08:01:08 2025 GMT
            Not After : Oct 20 08:01:08 2025 GMT
        Subject: CN=59be14dd91a7a9ee6891badd02dddc711a14dfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:db:2a:34:b0:5b:f6:aa:84:79:82:0c:36:
                    e6:6e:dc:24:aa:40:cd:2c:7d:27:d3:ea:a6:6a:90:
                    cc:43:2a:e1:86:d9:b8:d1:7a:74:21:d7:70:60:3e:
                    27:2a:34:70:26:e8:ee:fa:7c:39:33:6d:8b:24:be:
                    4d:ad:d8:f4:42:a7:dc:cc:5c:54:8f:8a:45:87:28:
                    e6:94:56:0b:24:10:58:63:cf:4d:06:ab:dd:96:8a:
                    6e:d2:1a:01:3f:54:93:2e:b1:ab:b5:a3:d6:75:8b:
                    f9:c9:b1:b6:a0:73:fc:b6:0d:d8:2a:33:13:9c:04:
                    e6:7c:6f:1b:01:5b:a7:9a:5e:3d:8d:42:6c:80:1c:
                    b1:b2:90:d9:15:26:06:6b:53:d7:6f:de:cf:fb:a8:
                    6f:42:dd:0e:0f:87:89:ae:c9:c3:fd:a6:ab:d9:a2:
                    35:1f:a9:11:09:ca:8e:b5:12:e5:3d:9b:b5:40:17:
                    94:1f:5a:15:ab:a5:10:7f:b7:cb:14:9a:db:45:4d:
                    be:c1:35:62:cf:5c:54:21:cd:51:b5:c5:85:62:c0:
                    7c:d7:40:58:06:09:82:26:28:97:ca:88:c6:70:ac:
                    3c:3a:17:7e:f9:28:71:0b:4a:a3:a6:78:da:a6:6d:
                    8c:2c:80:86:82:0d:c1:08:c1:70:88:35:f5:c2:e8:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:14:DD:91:A7:A9:EE:68:91:BA:DD:02:DD:DC:71:1A:14:DF:C0
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:56:fc:91:88:85:75:56:31:b1:64:45:36:7d:62:82:4b:
         36:0f:9b:98:67:d6:38:2b:05:d2:71:54:49:4e:99:b2:e2:61:
         3f:22:50:c1:0f:02:12:8c:21:99:ad:e2:9c:1c:f1:0e:a0:b0:
         47:56:3a:1f:12:52:bb:93:ab:b0:88:d8:45:1c:1e:c2:bf:ac:
         02:52:a6:21:3c:cc:89:96:7f:82:be:65:57:30:2c:7b:a0:01:
         2a:49:19:9d:7d:f9:c6:d8:df:32:e0:c2:e9:30:8f:7d:eb:f3:
         33:e0:ea:46:75:11:f6:6d:5a:cf:b1:17:0f:8b:91:59:74:f7:
         bc:20:a7:ec:84:20:83:fc:6e:6f:91:8f:ef:6b:41:59:6e:a6:
         cb:2d:d6:ec:c4:94:9f:14:42:bd:f2:0b:20:a9:f9:ff:0b:d3:
         b2:12:b2:13:1c:d5:46:b6:fc:05:7c:b2:c1:0a:56:9c:a5:b9:
         9f:89:e2:02:55:bb:8b:13:ef:67:e1:fb:ee:a4:ee:e6:68:5a:
         c2:08:3a:6c:90:f6:cd:e8:9e:8a:c9:5e:50:ae:88:c2:00:6a:
         c1:c2:24:d9:a5:1b:23:bf:87:d0:53:53:14:6b:91:3c:75:54:
         72:c7:a4:8f:ce:1b:ef:9d:13:96:29:4f:a3:fe:78:53:90:c0:
         34:04:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:51 2025 by rpki-client