Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          fYNByNU7mklDRdmddqSzuUpRMNRM6XTrXT8f+hl+eDw=
Subject key identifier:   19:50:65:07:0C:01:EE:C2:6D:F4:E5:1A:31:41:0C:97:AD:7E:7C:90
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       01A1859B4F654DF24997353072315E884F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          1AD2
Signing time:             Thu 29 Oct 2026 03:01:50 +0000
Manifest this update:     Thu 29 Oct 2026 03:01:50 +0000
Manifest next update:     Fri 30 Oct 2026 03:01:50 +0000
Files and hashes:         1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: cqK1L+FIfF2xJ/Kd5ArvqBg5jw58/QKwShnsYSB2RCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 03:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:9b:4f:65:4d:f2:49:97:35:30:72:31:5e:88:4f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Oct 29 03:01:50 2026 GMT
            Not After : Oct 30 03:01:50 2026 GMT
        Subject: CN=195065070c01eec26df4e51a31410c97ad7e7c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:87:a3:ae:b5:bc:9c:44:ff:f2:ba:c1:c5:
                    11:76:88:d6:94:af:c9:1c:dd:1d:6b:c6:d2:2b:59:
                    8b:29:e1:9b:d5:9a:78:16:c5:c8:fe:44:89:a2:16:
                    fb:7d:86:b9:57:01:d3:b1:1a:8e:97:ff:16:31:fd:
                    22:8d:3a:4e:b7:f6:bf:0b:9b:ba:24:5d:b4:fb:3f:
                    05:cd:dc:d9:d5:1a:72:42:d7:1a:4e:69:1c:9d:f3:
                    a4:ae:f9:57:54:38:0b:e8:7c:ad:63:47:6c:25:d2:
                    56:13:3c:d9:3f:97:54:25:9e:5d:8a:3e:08:f1:28:
                    92:22:de:05:eb:b0:ab:6a:73:67:12:8c:13:5d:59:
                    77:5f:cf:5f:f6:90:88:c3:c3:18:7e:e4:9f:27:de:
                    df:00:e5:fb:62:96:cc:7b:c1:98:7a:a6:a1:d9:0d:
                    fc:11:26:e9:06:e5:b1:ac:50:32:98:7e:cf:9f:f0:
                    6c:75:87:ce:ba:f4:4c:19:59:a8:17:ae:57:cb:d9:
                    2e:3a:50:d0:e7:50:37:8b:26:96:1b:35:0b:b4:5e:
                    c8:75:03:3f:58:16:cd:a2:6c:80:f4:a0:db:f1:32:
                    22:d7:7c:d7:3d:bb:d1:ec:66:f0:e4:46:9f:a5:97:
                    14:94:24:f7:f9:e3:c3:03:cc:ac:21:5e:92:d7:68:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:65:07:0C:01:EE:C2:6D:F4:E5:1A:31:41:0C:97:AD:7E:7C:90
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:79:43:1e:5e:34:94:28:a5:26:04:82:90:07:71:8b:9f:
         18:f5:99:84:7a:86:f9:5d:a8:9c:08:0d:ec:4d:17:34:9a:8f:
         d9:92:06:33:d7:b7:e3:50:d3:b5:11:3c:d9:ec:42:9d:25:aa:
         3b:3d:95:74:8f:66:23:37:77:68:2c:c6:20:8a:bc:f4:d1:fe:
         86:47:b4:0b:c8:f4:70:38:37:68:53:53:63:0a:2a:d1:f4:b2:
         4c:b1:d2:1a:c0:fb:83:10:e2:a3:9e:93:d1:a9:4e:14:ea:49:
         1e:6b:9b:f1:ec:a9:8c:27:28:e7:2a:a2:d4:29:d0:64:8c:31:
         0f:88:89:64:f7:a4:d9:9c:d5:fc:65:d1:d6:eb:54:e0:b7:73:
         f2:73:52:93:e0:19:9c:c7:cb:7a:ba:9e:fa:c8:a2:47:94:11:
         78:e4:09:0e:95:24:8b:43:c2:40:0e:2f:fa:8a:0a:13:08:3c:
         5c:ba:cd:e2:33:6a:5b:d5:61:ef:f7:b3:59:51:2b:d9:8b:c7:
         67:28:4c:a8:f3:45:c3:f6:a9:1f:18:3d:56:5e:57:5a:73:e4:
         f6:a4:92:b7:04:96:4d:c6:dd:6c:d4:63:c6:9a:89:12:a6:97:
         76:2d:f5:e1:13:67:3d:f6:ef:2b:8b:a4:ea:4e:d5:a5:22:06:
         0f:a7:01:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFm09lTfJJlzUwcjFeiE+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjYxMDI5MDMwMTUwWhcNMjYxMDMwMDMwMTUwWjAzMTEwLwYDVQQD
EygxOTUwNjUwNzBjMDFlZWMyNmRmNGU1MWEzMTQxMGM5N2FkN2U3YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/iHo661vJxE//K6wcURdojWlK/J
HN0da8bSK1mLKeGb1Zp4FsXI/kSJohb7fYa5VwHTsRqOl/8WMf0ijTpOt/a/C5u6
JF20+z8FzdzZ1RpyQtcaTmkcnfOkrvlXVDgL6HytY0dsJdJWEzzZP5dUJZ5dij4I
8SiSIt4F67CranNnEowTXVl3X89f9pCIw8MYfuSfJ97fAOX7YpbMe8GYeqah2Q38
ESbpBuWxrFAymH7Pn/BsdYfOuvRMGVmoF65Xy9kuOlDQ51A3iyaWGzULtF7IdQM/
WBbNomyA9KDb8TIi13zXPbvR7Gbw5EafpZcUlCT3+ePDA8ysIV6S12idhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlQZQcMAe7CbfTlGjFBDJetfnyQMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhB5Qx5e
NJQopSYEgpAHcYufGPWZhHqG+V2onAgN7E0XNJqP2ZIGM9e341DTtRE82exCnSWq
Oz2VdI9mIzd3aCzGIIq89NH+hke0C8j0cDg3aFNTYwoq0fSyTLHSGsD7gxDio56T
0alOFOpJHmub8eypjCco5yqi1CnQZIwxD4iJZPek2ZzV/GXR1utU4Ldz8nNSk+AZ
nMfLerqe+siiR5QReOQJDpUki0PCQA4v+ooKEwg8XLrN4jNqW9Vh7/ezWVEr2YvH
ZyhMqPNFw/apHxg9Vl5XWnPk9qSStwSWTcbdbNRjxpqJEqaXdi314RNnPfbvK4uk
6k7VpSIGD6cB/Q==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:47:17 2026 by rpki-client