Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          4YAqR3j/7GD5effHxYJObcZimnT+7pjBs+O3VEjhBs0=
Subject key identifier:   03:EB:65:F3:CC:48:07:12:D1:B5:92:D5:10:2B:66:75:E5:27:EA:93
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       01967F0F10980856E4AB48C7E321FD39BA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 01:00:15 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:15 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:15 +0000
Files and hashes:         1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: tFrt7quzMAtQXxRx+VocUTF834F4Qg3Dob6iYGxlnmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:10:98:08:56:e4:ab:48:c7:e3:21:fd:39:ba:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Apr 29 01:00:15 2025 GMT
            Not After : Apr 30 01:00:15 2025 GMT
        Subject: CN=03eb65f3cc480712d1b592d5102b6675e527ea93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:2c:d4:7d:f9:66:d1:cb:54:9f:f7:b4:e1:
                    f9:db:31:90:5c:7b:66:59:37:b8:80:65:53:1f:d4:
                    63:81:bd:ee:02:5d:21:7e:6a:a6:e2:93:0d:18:69:
                    eb:ef:6e:1f:6e:1f:3f:33:1e:5e:72:ba:44:5b:50:
                    27:1f:49:93:39:7a:89:5c:06:6c:66:0f:68:9f:b9:
                    6a:91:a6:13:d5:65:54:74:20:a0:37:bf:c6:3a:45:
                    2a:fb:46:bb:9a:8d:73:9f:ad:f8:b1:23:cd:46:ae:
                    35:70:90:8e:63:47:db:42:d1:82:ac:a7:3d:ba:bd:
                    fd:58:4b:1f:d8:3a:fb:31:44:6d:12:f5:a3:e5:96:
                    27:6f:30:a0:46:5c:16:e6:65:fa:d9:d3:45:9e:5c:
                    c8:6a:09:cf:cd:3f:09:90:5b:a7:d1:7c:30:d7:f0:
                    e5:54:67:34:9b:f7:96:11:2b:06:0a:52:2e:81:31:
                    ab:64:fe:76:50:61:65:a1:42:ed:86:cc:0e:47:72:
                    93:12:b7:42:2c:5d:37:58:f9:72:e1:fe:6b:99:f7:
                    58:ce:0f:b6:57:fc:0e:ea:3b:78:d5:2b:fe:26:2c:
                    5c:cf:ba:73:b2:16:d7:41:63:e2:90:ce:b1:61:eb:
                    b9:ff:4f:45:e8:a0:54:8c:14:cf:94:1f:1a:5b:49:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EB:65:F3:CC:48:07:12:D1:B5:92:D5:10:2B:66:75:E5:27:EA:93
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:31:06:df:61:65:9c:59:5c:79:06:e6:5f:00:02:80:57:dd:
         38:58:c1:4e:ab:fb:85:a2:07:09:44:40:7d:f2:e8:2c:88:e6:
         e5:2c:c9:99:59:3c:b9:97:d6:d2:42:98:72:8d:d1:b7:4c:34:
         ee:9a:6a:cf:6d:c9:76:ca:94:8b:5e:87:46:35:c2:d5:97:8a:
         a2:10:81:98:9e:98:cf:2b:97:02:cc:18:c5:45:1d:0b:83:af:
         2f:8a:c0:fc:0d:d4:fe:87:7e:ae:a7:84:86:8b:45:c5:9a:53:
         43:14:f2:e9:30:86:f0:61:3e:fe:08:33:f5:19:71:c6:cf:e6:
         c0:67:1b:88:85:23:d9:dd:7b:18:d5:f4:e2:32:5c:db:ff:a9:
         0e:b2:c0:d2:e6:f8:97:93:82:f5:1e:a1:e0:27:c0:37:61:b5:
         5b:40:bb:d3:c0:aa:6a:86:80:e0:be:b6:5b:e2:b6:40:bd:c1:
         2f:8a:88:74:3a:9d:91:93:aa:49:93:5b:1c:92:86:c4:45:ad:
         35:9e:c5:04:0e:80:3c:99:ed:52:b7:7c:2f:52:83:c5:54:d1:
         a0:ba:15:c7:b9:23:73:32:be:18:f8:bf:97:91:cc:9d:87:2b:
         01:ff:cc:f6:a8:9e:27:2f:55:05:1d:4f:dc:3c:e3:3a:32:3f:
         81:0e:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:24:34 2025 by rpki-client