Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          +LbkgycfYL2izic9boiA1jAvVki80YoICQ0yliv8cso=
Subject key identifier:   28:0B:51:A2:CC:DB:B9:0F:A7:72:66:FB:D1:D7:A9:AB:0C:35:E4:97
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       01A0D011B7C2E5CCAF50AD31C619B6728EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          1A74
Signing time:             Wed 23 Sep 2026 21:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:17 +0000
Files and hashes:         1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: Zf9Fl5ytg2voukwzPxcggC4TgE92vsxwH2DmIoflwvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:b7:c2:e5:cc:af:50:ad:31:c6:19:b6:72:8e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Sep 23 21:00:17 2026 GMT
            Not After : Sep 24 21:00:17 2026 GMT
        Subject: CN=280b51a2ccdbb90fa77266fbd1d7a9ab0c35e497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:67:e1:0d:61:7e:24:09:ec:4c:33:c3:77:
                    fa:f0:84:ad:35:2d:77:43:2d:8c:7c:92:10:28:c8:
                    a5:5a:b7:bb:57:47:7f:c8:f5:0d:25:9e:44:fb:bd:
                    77:19:32:e5:67:24:94:d9:71:47:c0:1a:63:e2:c0:
                    25:a3:e3:3b:05:58:97:5b:5f:f7:ae:6d:d7:e1:7e:
                    b0:b7:54:11:da:f5:3f:76:92:6e:56:58:5c:53:d9:
                    29:25:15:0b:51:bf:1d:9c:08:8b:ef:6a:06:fd:14:
                    05:eb:89:74:d0:ca:de:ae:e5:ce:58:c8:bd:50:da:
                    78:fa:d5:8d:dd:29:8c:24:ef:82:1b:04:1e:bb:cc:
                    19:c2:41:76:ca:52:47:b1:81:3c:94:52:cc:a2:4f:
                    68:ab:31:01:e9:27:a9:05:c7:6a:65:80:1e:63:36:
                    0c:f7:db:43:10:f2:7c:5f:b9:cf:6f:c3:83:0e:76:
                    f0:32:25:d8:c8:31:d5:26:f2:27:18:b6:21:19:5b:
                    91:44:a2:62:e8:fe:2c:90:fe:76:89:7f:be:36:2c:
                    ed:33:c3:90:7f:23:04:c0:db:0d:88:22:a4:62:5c:
                    22:11:d9:90:af:66:c2:10:e5:02:10:00:b6:87:9d:
                    1d:7c:61:f7:4e:6c:b2:78:77:5e:8b:45:4f:64:e0:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0B:51:A2:CC:DB:B9:0F:A7:72:66:FB:D1:D7:A9:AB:0C:35:E4:97
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:5e:5c:fb:28:bc:c9:15:f1:af:52:91:3c:41:d5:61:f2:
         dd:b0:79:c4:6f:0a:ef:da:20:97:43:89:ea:fc:80:f4:48:95:
         58:57:f2:41:de:f2:cb:6e:18:c3:a7:37:04:4c:4f:0f:4f:6f:
         3d:fb:56:94:a0:20:aa:78:46:e4:68:9d:fd:f2:8f:79:bd:f6:
         c0:06:d3:4b:b4:0e:69:64:93:57:84:25:00:db:0c:57:36:aa:
         c7:ff:b2:71:11:5e:9a:bf:8a:71:a8:31:e4:5f:45:2b:28:1d:
         7e:38:41:bd:47:12:1d:b9:cb:7c:73:ce:29:69:6a:d9:02:6a:
         c4:76:37:8c:00:74:5a:2a:d3:96:e9:c5:ec:da:ca:ed:e5:b0:
         c3:71:18:76:d1:17:b6:c6:d6:8f:c6:4c:1a:4c:cd:f8:a0:a8:
         1a:54:cc:f2:d5:0d:a9:af:14:4b:a8:06:9f:9c:28:a8:fa:50:
         48:17:d4:92:bd:8f:33:79:4e:03:21:a0:22:d9:d8:48:11:0e:
         9e:6d:1a:86:83:fa:ab:41:11:08:03:45:53:21:40:97:06:8d:
         60:96:2c:e9:1b:4d:a7:ce:6e:0e:4b:da:ff:fa:3f:61:87:b1:
         b2:99:7b:9e:fa:78:79:82:b4:a4:a3:03:7e:f6:a0:d5:83:2e:
         b7:84:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:25:12 2026 by rpki-client