Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          9z+KJISw2gSgiHwcgnWjFema5Q69sEuTr6hwuLWWojk=
Subject key identifier:   98:12:BC:7B:5E:D6:94:BF:93:75:4F:FE:64:A6:7E:C5:CB:EB:A0:ED
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       01988A6A602A42429A46B582CFCA2B7E3C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          1628
Signing time:             Fri 08 Aug 2025 16:01:23 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:23 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:23 +0000
Files and hashes:         1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: nJpJ0WwbD9RC66dptwI9ohQplq5r4THVFdzpsJOEtj0=)
                          3: v4-Es1Kwp5EvyY2ian59bv_yZR4.roa (hash: dInoXwT69P80+5Zt0K7jQxUhAfqmo2mQHLpFYWRuEQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:60:2a:42:42:9a:46:b5:82:cf:ca:2b:7e:3c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Aug  8 16:01:23 2025 GMT
            Not After : Aug  9 16:01:23 2025 GMT
        Subject: CN=9812bc7b5ed694bf93754ffe64a67ec5cbeba0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:4a:b4:22:ec:be:63:8e:32:ed:39:d4:62:
                    53:6b:a8:1b:7a:2c:3a:0c:94:36:32:de:c9:1b:f2:
                    ef:69:73:e5:bb:bc:96:1e:8e:aa:29:49:e0:25:4c:
                    b3:30:20:52:45:b6:97:6d:60:c0:37:ca:7c:0e:a2:
                    9a:c4:ae:42:1c:93:48:12:99:7e:1e:d5:d7:7e:b3:
                    c5:aa:f2:f0:35:b6:87:1c:0a:17:2a:96:c7:ba:70:
                    b0:20:24:6c:59:1e:71:81:e7:9f:c3:49:33:2c:c5:
                    d5:6a:4a:51:c5:95:40:bd:8f:32:24:7d:b2:f9:0d:
                    8b:f3:d8:50:36:a8:ac:58:cd:0a:fe:39:64:e6:bd:
                    93:68:77:1a:5d:24:20:06:04:cb:cb:0a:b4:a4:eb:
                    18:77:00:7e:3e:d7:8a:b9:c3:ff:32:15:a8:cc:1b:
                    af:4d:3f:ae:2b:5e:4d:ca:d1:b6:9d:ac:51:ce:cf:
                    2b:ef:f9:0a:74:9b:6c:3e:ed:0c:cb:25:66:a9:54:
                    95:a8:52:9a:09:74:6d:87:73:6f:5c:cf:7b:39:6a:
                    f0:6a:42:11:36:50:36:b5:0f:f9:66:35:84:6b:c1:
                    f1:e6:c9:2a:ee:bb:36:85:9f:41:4d:14:9d:da:0b:
                    b6:cc:19:34:6a:11:c2:f8:8c:05:19:e9:d1:12:30:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:BC:7B:5E:D6:94:BF:93:75:4F:FE:64:A6:7E:C5:CB:EB:A0:ED
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:77:e6:dd:1a:e5:fe:ee:7a:35:98:e1:4a:cd:b1:d7:30:
         c3:f1:e5:38:c9:d8:04:e1:02:8c:f3:9e:9d:94:17:4c:91:c9:
         a0:79:84:cc:48:76:45:e9:d4:f4:6e:2f:e3:57:b4:e0:91:77:
         25:a5:90:88:87:02:27:fc:4a:53:b4:c9:39:36:6b:c1:80:70:
         ac:9b:7f:f8:b5:b3:41:0f:02:a5:e8:32:b1:b6:74:be:70:c6:
         26:5c:cf:e9:ca:4d:0c:a0:08:2c:6d:97:aa:86:c9:ba:fa:37:
         20:4c:02:02:fc:ac:c9:57:86:31:4c:2e:97:ce:6c:4a:ff:83:
         0d:06:dc:97:97:c0:1e:70:a6:d7:14:bb:c4:ba:45:9c:23:aa:
         da:fc:39:f0:6c:3d:8b:b3:89:a6:59:b8:f6:de:89:bf:6d:fc:
         5c:36:be:80:18:bf:bf:3e:7b:9d:cf:10:f7:fd:e9:3a:8a:bb:
         c8:68:0a:a9:55:94:84:22:32:40:b3:19:5f:19:b4:a6:c8:ff:
         65:6d:ed:c5:fd:11:8f:cd:81:27:f0:83:f8:67:93:31:96:60:
         ac:e2:64:1f:21:2d:c1:a3:ba:47:72:1b:eb:a7:92:af:98:1b:
         bb:e2:57:e7:27:ce:8c:f6:de:5f:88:1c:a5:cb:8c:8e:bb:a6:
         36:5f:f3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKamAqQkKaRrWCz8orfjwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjUwODA4MTYwMTIzWhcNMjUwODA5MTYwMTIzWjAzMTEwLwYDVQQD
Eyg5ODEyYmM3YjVlZDY5NGJmOTM3NTRmZmU2NGE2N2VjNWNiZWJhMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GFKtCLsvmOOMu051GJTa6gbeiw6
DJQ2Mt7JG/LvaXPlu7yWHo6qKUngJUyzMCBSRbaXbWDAN8p8DqKaxK5CHJNIEpl+
HtXXfrPFqvLwNbaHHAoXKpbHunCwICRsWR5xgeefw0kzLMXVakpRxZVAvY8yJH2y
+Q2L89hQNqisWM0K/jlk5r2TaHcaXSQgBgTLywq0pOsYdwB+PteKucP/MhWozBuv
TT+uK15NytG2naxRzs8r7/kKdJtsPu0MyyVmqVSVqFKaCXRth3NvXM97OWrwakIR
NlA2tQ/5ZjWEa8Hx5skq7rs2hZ9BTRSd2gu2zBk0ahHC+IwFGenREjDbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgSvHte1pS/k3VP/mSmfsXL66DtMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS535t0a
5f7uejWY4UrNsdcww/HlOMnYBOECjPOenZQXTJHJoHmEzEh2RenU9G4v41e04JF3
JaWQiIcCJ/xKU7TJOTZrwYBwrJt/+LWzQQ8CpegysbZ0vnDGJlzP6cpNDKAILG2X
qobJuvo3IEwCAvysyVeGMUwul85sSv+DDQbcl5fAHnCm1xS7xLpFnCOq2vw58Gw9
i7OJplm49t6Jv238XDa+gBi/vz57nc8Q9/3pOoq7yGgKqVWUhCIyQLMZXxm0psj/
ZW3txf0Rj82BJ/CD+GeTMZZgrOJkHyEtwaO6R3Ib66eSr5gbu+JX5yfOjPbeX4gc
pcuMjrumNl/zyw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:21 2025 by rpki-client