Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          XsgfBvn1hPBRIn6iyKqH9DS5KfNGhDUzXOQVclUVp6Y=
Subject key identifier:   8A:E2:87:D3:4A:BC:B8:C6:48:D0:6C:FB:CA:9B:E6:79:96:41:20:D1
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       019768BBC51638D686E3FA6A0746826E425F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 10:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:25 +0000
Files and hashes:         1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: hkycxwgP8PAxBGWVOEUEXwWPkSCLZrfTRy9gE2zIVzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:c5:16:38:d6:86:e3:fa:6a:07:46:82:6e:42:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Jun 13 10:00:25 2025 GMT
            Not After : Jun 14 10:00:25 2025 GMT
        Subject: CN=8ae287d34abcb8c648d06cfbca9be679964120d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:ce:9d:11:dc:44:17:2d:c2:33:61:86:10:
                    d5:86:d8:4e:a5:3e:64:d0:d6:a2:8c:80:fd:f7:d6:
                    d9:04:5e:0d:1f:f0:0f:38:c3:2b:26:d3:3a:d9:e3:
                    f9:d8:53:df:52:a8:0a:c9:d8:13:61:cc:5f:67:79:
                    b9:dd:fd:ad:88:45:b9:37:c8:20:4c:6e:b5:2f:aa:
                    84:24:39:b1:5e:00:6a:d2:06:ea:15:ad:0b:be:b3:
                    47:75:7a:8d:00:e0:3f:6c:39:4b:c0:c2:a0:ff:02:
                    78:bd:51:d7:09:a9:9d:ce:8b:58:55:be:4a:08:06:
                    f1:3f:b1:d8:e4:23:c2:2c:cb:96:90:f6:72:e3:52:
                    76:21:d0:aa:90:0d:77:1f:ce:ce:92:d8:f3:69:28:
                    84:33:4c:f7:13:c1:1a:a6:4f:7a:77:87:8e:b7:79:
                    88:75:9f:a8:79:9a:cc:0b:3b:1d:ac:4f:da:39:aa:
                    b3:48:07:af:2c:e1:e3:ef:6b:43:e2:8e:ed:5b:8b:
                    b3:ee:a5:ff:b1:15:ce:1d:15:f3:b4:5b:0e:2f:b6:
                    3a:81:e3:5c:09:07:cd:b6:5d:a0:35:8e:22:58:ba:
                    66:88:85:f7:fb:4d:f6:a7:e7:43:3a:1b:81:b8:3e:
                    a4:60:4c:d4:38:bd:b9:15:7b:2a:7d:5c:46:0f:28:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:87:D3:4A:BC:B8:C6:48:D0:6C:FB:CA:9B:E6:79:96:41:20:D1
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:1a:bb:46:53:66:c0:17:2d:90:4a:48:78:46:c8:90:03:
         b5:c4:a9:85:fe:20:29:44:e1:03:24:cc:68:84:bc:b4:f3:63:
         c5:77:73:f1:22:7e:a3:bb:94:e1:60:38:f1:d9:92:0b:ca:07:
         8f:d6:5c:a0:93:02:45:1f:42:74:c8:41:6b:49:b5:31:da:3d:
         0c:d1:aa:57:98:bc:e1:88:f4:33:6b:c6:b5:32:f7:c0:a7:2e:
         c1:50:02:81:d9:6b:39:28:72:1c:2b:f7:7c:b6:e8:79:26:ab:
         ac:05:8c:a4:54:7d:78:9d:0b:3e:07:8f:61:5b:c3:3f:aa:6d:
         0c:68:37:fa:7f:c4:9d:54:42:ba:35:d2:26:50:80:60:b6:6a:
         0b:79:b0:6c:8f:34:8a:39:7d:92:d4:33:6e:34:19:7c:6e:77:
         f7:49:15:7e:3d:99:50:99:01:ce:56:4d:af:81:a2:e6:85:42:
         d0:c7:b5:ed:65:31:0e:a8:26:67:c7:13:db:57:e0:76:c3:7d:
         04:d4:bf:ee:8c:63:72:c4:ca:a1:7a:d8:0a:25:a8:8f:dd:74:
         ca:4c:49:df:1a:78:62:1b:a0:f6:3f:e8:ba:a1:4d:0f:8d:7d:
         6a:d2:a9:9b:b8:f5:ab:bb:64:9c:00:4c:da:6f:a1:e9:57:1a:
         f8:64:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:34:13 2025 by rpki-client