Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          FJtsLMIcS5LdNcqBpC86Xp4Sb8Bl7tjaW1H4v/LZ8Z0=
Subject key identifier:   23:D8:EF:F3:D5:0A:BF:BE:10:85:DC:D7:99:A0:AE:89:A3:81:0E:E0
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019D25BA798868193E017807FFD4D3CD9A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0E27
Signing time:             Wed 25 Mar 2026 16:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:10 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 6wUOIPFBERkUTQmc4fru_-px0Tk.roa (hash: 7k1O0fB7z/MoZhbw4RMzyFvLT3i7T+rSfTUmJTBuUb0=)
                          3: 8CxQcTO3gzXmwcuG0fFVXjw_yfA.roa (hash: nNtkgz35KV+aXckr0faszMZ/wBI6TdmhZfb4uKa2DV8=)
                          4: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          5: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: nJS8qAi3/bcul6pfI6HUYjnwCsq7KYuxNoXDNnPReW8=)
                          6: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (hash: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:79:88:68:19:3e:01:78:07:ff:d4:d3:cd:9a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Mar 25 16:01:10 2026 GMT
            Not After : Mar 26 16:01:10 2026 GMT
        Subject: CN=23d8eff3d50abfbe1085dcd799a0ae89a3810ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:0a:12:d7:de:81:86:1f:31:c4:65:d4:d5:
                    49:fa:83:01:0e:ed:ea:0c:08:a7:ea:56:55:8e:3a:
                    cc:71:a9:9a:e9:40:5f:20:ea:a7:7e:cd:19:42:2f:
                    b3:03:5d:1f:03:03:df:3e:b7:ad:04:49:d6:10:8c:
                    c0:07:66:fd:05:5a:25:3d:62:0d:36:86:01:ae:58:
                    c1:74:b5:2f:5d:e2:e8:b7:97:12:49:87:ab:06:7a:
                    4f:11:01:af:7b:ad:39:8b:02:b6:f0:21:53:a8:91:
                    11:df:4c:04:b0:c1:03:20:1e:48:c6:dc:b0:81:6d:
                    6c:a6:5b:d6:0b:61:f4:e5:ab:d4:98:ba:6f:d1:40:
                    1e:ab:45:dd:0a:c2:12:44:0b:fc:8b:9c:55:f0:87:
                    35:08:f8:e6:44:3f:c1:cc:37:59:90:c3:20:63:50:
                    78:83:b3:d6:9f:2a:bb:5f:fa:79:c7:cc:08:bf:88:
                    25:87:c0:30:8e:0e:2d:44:e6:74:77:72:80:35:b9:
                    f9:63:0f:9d:de:b5:b9:2c:ab:81:27:7d:8b:46:46:
                    87:ed:38:86:24:c6:93:b6:f1:df:f0:32:5b:d0:4c:
                    aa:3b:19:99:dd:43:0b:54:98:26:71:6d:e5:31:84:
                    71:fa:56:f3:c7:f9:3f:24:a4:9c:dd:02:6c:cc:2a:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:EF:F3:D5:0A:BF:BE:10:85:DC:D7:99:A0:AE:89:A3:81:0E:E0
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:88:c4:18:b7:c7:28:72:94:39:7b:f2:cb:af:fc:d6:1e:ed:
         b3:19:44:9e:05:41:e4:c6:85:8e:b1:b9:38:3f:bc:f0:92:80:
         41:ec:7d:ac:9c:3e:cf:f1:01:d7:8f:6b:1a:c5:46:23:09:6f:
         65:5f:7d:d6:05:88:4a:56:a3:79:f5:e1:38:46:68:58:e4:4e:
         5f:cb:69:12:24:57:b6:cf:8f:64:89:80:7e:85:cf:6b:b4:c8:
         4a:a4:fe:c5:f3:e0:5e:08:74:f1:f5:b5:b1:37:fa:2f:3f:70:
         11:1a:16:ef:e7:0e:6e:99:c3:fd:9e:98:61:cf:04:65:c0:e6:
         5e:84:8c:d5:fa:bd:46:b8:89:af:85:16:6f:24:11:ca:88:25:
         59:ea:4f:7d:b9:3a:97:14:71:f8:58:49:3a:6b:b1:93:52:41:
         ec:2e:69:3a:68:17:eb:59:3a:74:d5:e6:c7:85:b1:3f:56:19:
         b8:62:bb:c7:dd:21:b7:ec:a0:97:a0:ba:c7:fe:14:c2:fe:a8:
         3d:1b:03:55:2c:c9:45:39:10:d5:8e:5c:da:93:ed:2d:2d:40:
         68:cd:ea:d6:de:4d:f8:26:f0:1d:5d:4c:52:31:ea:8b:05:d5:
         fe:43:31:93:c3:7c:ca:a8:8b:88:e4:db:22:f8:d0:8a:00:c4:
         ac:55:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:32 2026 by rpki-client