Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          P25h2QxFKtfW9RrDmuMj3Mq3EsQhyN8AqEUIEMtI3x0=
Subject key identifier:   F0:D9:13:9F:08:7B:75:F6:20:86:BB:02:7E:4B:1C:DC:70:F2:4A:8B
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       019762F114821B2CD361A02A872EAF7CDD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          158E
Signing time:             Thu 12 Jun 2025 07:00:55 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:55 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:55 +0000
Files and hashes:         1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: mZgwVM6lVdwyNCndSFAv38Eg1r1WdlCCDxc1nW8rFUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f1:14:82:1b:2c:d3:61:a0:2a:87:2e:af:7c:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Jun 12 07:00:55 2025 GMT
            Not After : Jun 13 07:00:55 2025 GMT
        Subject: CN=f0d9139f087b75f62086bb027e4b1cdc70f24a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:37:92:7d:0c:fa:ab:da:9e:f2:9c:ce:a5:
                    e7:05:4e:39:89:10:11:c0:be:dd:f8:7b:9d:e3:62:
                    56:dc:4c:83:28:c3:73:30:1e:1e:4f:e9:e6:94:89:
                    0a:76:cd:6a:59:79:e0:c5:75:25:6d:19:9e:12:3c:
                    a0:f5:b6:4c:a5:8c:51:28:9d:52:77:da:19:af:2a:
                    00:c2:e8:5d:a0:c6:eb:3e:fc:05:80:7a:1b:0a:81:
                    29:b9:55:72:82:c7:1c:fd:43:b6:01:39:f4:df:47:
                    88:25:54:90:de:be:bd:3e:12:d5:33:57:c4:55:58:
                    a4:75:ef:8a:39:17:e7:cc:fc:2b:bc:a9:be:f0:4e:
                    b3:9f:b2:49:af:7a:62:29:18:de:ab:36:6e:85:f6:
                    cf:d7:a7:65:89:c0:7f:92:3e:15:21:2b:67:49:e7:
                    86:a1:2d:8b:91:b8:ad:0d:57:38:6a:d4:75:bb:5f:
                    38:1c:fa:c2:30:fd:ef:83:10:02:6a:98:83:80:dd:
                    2d:c7:c3:4d:03:28:22:44:cf:d1:f7:34:d9:63:52:
                    6e:a6:35:86:f2:6b:91:1d:51:eb:6e:02:51:20:5c:
                    1e:2b:a3:c5:4f:15:a3:8e:4f:64:93:21:55:be:aa:
                    d8:82:ac:fa:d1:48:1b:c6:ff:b3:98:ac:a7:47:40:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:13:9F:08:7B:75:F6:20:86:BB:02:7E:4B:1C:DC:70:F2:4A:8B
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:69:5d:6c:3f:35:ec:33:ce:4c:66:8d:13:4c:f4:6e:2e:
         d0:03:d8:df:5c:bf:dd:e3:99:aa:53:a9:3d:6a:be:2e:5c:11:
         23:e2:1f:cb:01:b2:f7:59:bd:e8:94:89:79:01:ad:5d:2f:87:
         8b:61:75:69:26:08:56:ef:a4:81:07:fa:bb:56:3e:be:c9:ca:
         96:2e:7a:0b:35:2c:c9:96:f7:5f:cf:6a:96:07:30:e5:3f:b2:
         4e:60:c9:7d:69:a1:6a:25:a2:22:3d:3a:4f:20:e9:77:01:51:
         5d:94:a0:67:ac:b4:ca:70:61:40:bf:44:d3:18:9e:e9:8f:6f:
         31:4c:dc:11:ac:6a:36:c5:18:71:ca:ba:ff:fe:c0:ef:1e:1a:
         4a:a3:69:8b:0a:4c:b2:d4:b0:b4:be:de:d2:5d:85:dc:d8:84:
         20:ac:b6:a7:86:e4:7f:cd:5a:00:af:d0:78:36:66:96:79:5e:
         6c:a8:ff:d1:11:27:ee:74:02:5b:e8:25:9c:b5:04:b7:bb:09:
         9b:b0:58:a1:be:89:07:3e:06:21:97:6f:0d:73:d7:64:2a:0c:
         d1:ef:4c:df:2b:56:8c:13:f6:d3:ed:eb:e6:ae:05:59:f6:3b:
         de:be:96:7e:02:e1:ef:d1:2f:39:4f:36:1b:24:3b:d5:8c:6c:
         09:34:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:28:26 2025 by rpki-client