Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File:                     _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier:          aJVeTuEw/vCV0IaCIQlKNRjy9DNsEOyVUzrRXlbCytE=
Subject key identifier:   7A:11:0D:DE:39:74:91:8B:36:35:15:92:3F:70:81:8B:AD:A8:4F:F8
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019D1EDCC56B89993F2FC7AD3C21302E2784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number:          1597
Signing time:             Tue 24 Mar 2026 08:01:17 +0000
Manifest this update:     Tue 24 Mar 2026 08:01:17 +0000
Manifest next update:     Wed 25 Mar 2026 08:01:17 +0000
Files and hashes:         1: 5EVB14c1Wp9DUMGncO8dMnhYewQ.roa (hash: 1+PPE2vwCT1DcBSpKhNOM70ibVxoJXlF1C7YdpbIQkU=)
                          2: HfW4Jiyf53p7x5-Kb1-uc4hpoGM.roa (hash: ItbBsidfK75EByPpSVV1rRPrzshBhT0F7TIXOQLP7jM=)
                          3: JptumZK_o26NVGZw2bJJ29wzj98.roa (hash: SmAhkDSWvGNAUul7qwEsVxdhO2v2bdTfJVR8jW5J3l8=)
                          4: R7Cay2ueq0WnTCeL2uX-2wJUHco.roa (hash: GQcuyMDby4kskPuI7EodSnNGXQ1UXDDiaDHBI1s2tqA=)
                          5: VTWYM5_h2r_wOOam9C7I8csXqsk.roa (hash: WSCVM2YwK2Bau1T7dP/pHh4RPax7RnffqIsFUaM96+w=)
                          6: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: e+JIX352N4WL7rQAmVK31fk3sWxT6NEn0rKG2mfFjEc=)
                          7: yhnnUlHPho1nYO-dZwOKzIeaEJk.roa (hash: rmW7wcZhu2IUsjlBMz6pwL3ALA5wovd1jow+J3zxFQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1e:dc:c5:6b:89:99:3f:2f:c7:ad:3c:21:30:2e:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Mar 24 08:01:17 2026 GMT
            Not After : Mar 25 08:01:17 2026 GMT
        Subject: CN=7a110dde3974918b363515923f70818bada84ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:82:55:a9:8e:cb:b5:a0:69:97:48:28:ce:
                    d4:4a:4b:e3:7f:e4:8f:a6:79:24:ed:c4:13:95:b5:
                    43:74:a8:7e:21:43:68:fb:0f:db:b2:fd:90:1a:0f:
                    b8:61:a7:bc:b1:62:03:f3:63:43:64:d2:52:16:8d:
                    81:f2:a6:80:f0:3a:be:9e:b1:39:7b:75:fe:86:72:
                    86:c5:f3:5b:c4:ce:0d:74:70:7b:5c:ab:24:d2:34:
                    65:5b:b1:bb:82:74:5b:4d:06:89:04:91:0d:5b:8c:
                    af:15:c1:34:16:14:0e:67:80:de:47:42:96:61:ac:
                    83:0e:72:a9:a1:9a:0a:ba:be:fd:07:51:78:ef:bf:
                    b6:2e:72:95:9b:22:fb:51:b7:f8:17:dc:0e:08:bd:
                    3b:b8:1c:9a:e6:d9:cf:b4:91:d5:fa:70:45:c7:90:
                    58:f9:eb:45:61:1b:c0:15:8d:86:ab:40:b9:a2:f4:
                    80:aa:aa:81:bf:93:c8:86:10:fc:be:21:ef:02:4f:
                    31:98:bd:2d:88:ad:4f:5f:72:83:df:73:fe:44:2d:
                    bb:3a:21:cb:c3:83:bb:5c:f4:f3:57:9b:3e:6e:29:
                    7d:18:36:3a:d2:85:71:e4:a4:02:04:73:80:f7:8b:
                    2f:52:29:9f:ce:21:ad:54:70:26:02:e7:44:7c:f9:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:0D:DE:39:74:91:8B:36:35:15:92:3F:70:81:8B:AD:A8:4F:F8
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:d5:1d:e0:85:47:3c:c3:8b:08:ca:b5:83:6a:f1:99:fd:
         a6:8c:b4:30:e5:49:90:3d:32:c4:12:a0:37:8e:c2:2d:e1:75:
         7e:a1:99:5a:c0:de:28:60:ae:71:fc:42:78:4f:0a:1f:b0:bb:
         6b:84:3d:2f:6a:90:e4:7b:88:2b:15:38:42:1c:bf:49:f2:f2:
         a3:98:f2:e3:de:6a:09:b6:71:a5:f4:e6:55:91:2d:d5:93:bb:
         44:45:e1:90:dc:4a:54:24:18:0b:90:fa:35:e0:55:9a:8c:61:
         b5:f2:5e:fa:3d:74:a7:18:12:11:df:e4:8a:c0:10:ee:b8:f3:
         43:3f:e1:6e:1d:9a:b0:73:cc:e5:7e:a2:78:a7:83:f7:cd:81:
         0d:38:2b:e7:8f:42:42:53:4d:7c:27:59:de:b1:ae:88:8b:8b:
         33:23:2f:21:72:c1:c1:1a:f3:0e:35:2a:d5:ff:e5:f3:cc:9b:
         df:d0:f4:5c:e8:43:c1:15:16:cb:3b:c9:5d:be:01:1e:a8:9c:
         93:47:b7:95:92:d4:c2:2b:a1:de:63:76:49:fe:96:f4:2e:20:
         99:10:ea:51:12:f8:89:cf:00:ab:69:3b:70:05:0b:85:d7:94:
         35:83:e2:d4:1b:49:55:eb:c1:a5:dd:05:eb:7d:48:3e:cd:cf:
         b1:86:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 15:50:43 2026 by rpki-client