Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          bCoEo2+JR/Cl4qQgX3dNypFaU+n10bOMR3ZjSe89AfM=
Subject key identifier:   37:EE:76:0E:4F:DF:AF:7A:5B:7B:90:E2:86:77:F6:5A:85:D1:7B:3C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019CAB6B15C651CF6029F3761CA11CE213E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          19EA
Signing time:             Sun 01 Mar 2026 22:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:47 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: ES1lahPFgcwTztwXyOfhZ5VVmvc.roa (hash: Ew+ImBSHPbFzPIU+4Pej0vRiFBv0R3uwB1KeV4mUWqo=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          15: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          16: HBxIhJQTEPlpkLB0ZPYkHZSJiik.roa (hash: eG6f7ib9tGK1jAHCC+qT2jC4Ebjo/wZvqFlp98jpIUQ=)
                          17: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          18: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          19: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: TzeVAdy7qDjrRVqr5Bb3z/1hh5sQVqC5DXk6ninNNS0=)
                          20: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          21: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          24: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          32: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          33: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          34: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          35: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          36: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          37: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          38: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          39: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
                          40: ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa (hash: 8ZQ1qiEiuvsIkgBswJAnf3eGUcB29l0qukHGlnRR4w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:15:c6:51:cf:60:29:f3:76:1c:a1:1c:e2:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar  1 22:00:47 2026 GMT
            Not After : Mar  2 22:00:47 2026 GMT
        Subject: CN=37ee760e4fdfaf7a5b7b90e28677f65a85d17b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:12:16:87:8f:fc:37:fb:3a:58:e1:4c:1a:
                    2e:e7:ae:71:16:5e:c5:09:42:5f:4c:05:05:d8:7b:
                    8a:34:30:3d:f4:3f:74:15:65:56:06:a1:c4:e1:6e:
                    63:ad:af:38:61:c6:16:cb:f2:7b:fe:9f:66:d4:1b:
                    63:06:e4:00:59:d3:0f:03:48:12:9d:42:72:90:4d:
                    8f:62:e4:83:da:06:cf:47:99:52:03:b5:29:15:33:
                    fe:06:97:2a:56:5a:e8:64:3c:13:2a:06:ae:07:51:
                    55:c9:a7:bf:fc:ad:b8:9e:ad:db:73:7c:c2:5d:8c:
                    98:26:d9:d0:91:03:41:99:cd:50:55:23:2e:9e:63:
                    6b:04:e7:86:c9:b1:c1:3f:d9:a9:8e:0a:1b:22:99:
                    55:c9:ae:de:1c:d6:f8:d3:96:f8:9b:ad:ce:99:4b:
                    ba:15:84:4c:47:c8:f8:79:48:6b:3c:7d:22:14:05:
                    40:7f:38:db:e4:ae:d3:48:cc:02:5e:92:03:7f:f4:
                    36:fb:be:e0:cc:23:4e:8e:42:24:e1:22:7a:e2:2b:
                    38:a0:f7:26:12:fe:f3:5f:39:69:1d:02:33:6b:c4:
                    fb:ef:be:41:17:37:9d:8f:8f:5f:7e:4d:1d:35:7d:
                    3d:73:5c:4e:8c:3b:74:04:19:d7:77:3f:8f:0f:46:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:76:0E:4F:DF:AF:7A:5B:7B:90:E2:86:77:F6:5A:85:D1:7B:3C
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:47:40:ee:33:fd:9c:cd:b0:03:6e:45:97:e2:1d:d3:9f:
         11:97:70:ab:86:c1:5e:dc:32:5b:1a:6e:01:81:54:24:8d:b8:
         60:c1:47:28:28:09:a4:80:7b:5e:35:97:3a:69:bf:5a:69:4c:
         42:55:91:42:ad:3b:30:a3:2b:22:28:c1:20:16:2e:c3:89:e0:
         6c:74:64:80:71:a1:1b:1c:06:fc:b5:e2:8a:be:91:40:11:4b:
         cd:9c:d2:43:30:7d:9a:61:2f:20:d2:d8:12:26:c4:d2:fa:36:
         a4:60:e3:67:78:05:e2:c7:bf:2b:76:cc:c8:ea:59:2a:64:44:
         19:52:96:0a:16:45:9c:34:10:fa:6e:b0:17:dc:35:93:44:ad:
         fd:9d:d2:76:e6:8e:c2:48:05:ca:02:47:0b:9f:98:a2:ec:2d:
         c3:2a:bc:d5:58:72:19:16:67:d6:e3:7f:cf:c7:50:e3:d7:84:
         2a:06:8a:d8:22:08:f5:f7:94:f6:48:fa:f0:e7:08:c7:b0:7b:
         ff:0b:fb:3f:75:11:06:44:95:30:c9:41:73:ed:f9:87:cf:d8:
         d3:b2:5d:60:32:16:0e:b1:8c:98:be:e0:99:af:ea:98:f2:c2:
         91:11:40:29:ac:ec:8b:82:05:52:62:0d:40:96:df:37:7e:f8:
         86:f5:99:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxXGUc9gKfN2HKEc4hPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjYwMzAxMjIwMDQ3WhcNMjYwMzAyMjIwMDQ3WjAzMTEwLwYDVQQD
EygzN2VlNzYwZTRmZGZhZjdhNWI3YjkwZTI4Njc3ZjY1YTg1ZDE3YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnYSFoeP/Df7OljhTBou565xFl7F
CUJfTAUF2HuKNDA99D90FWVWBqHE4W5jra84YcYWy/J7/p9m1BtjBuQAWdMPA0gS
nUJykE2PYuSD2gbPR5lSA7UpFTP+BpcqVlroZDwTKgauB1FVyae//K24nq3bc3zC
XYyYJtnQkQNBmc1QVSMunmNrBOeGybHBP9mpjgobIplVya7eHNb405b4m63OmUu6
FYRMR8j4eUhrPH0iFAVAfzjb5K7TSMwCXpIDf/Q2+77gzCNOjkIk4SJ64is4oPcm
Ev7zXzlpHQIza8T7775BFzedj49ffk0dNX09c1xOjDt0BBnXdz+PD0bc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfudg5P3696W3uQ4oZ39lqF0Xs8MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeRHQO4z
/ZzNsANuRZfiHdOfEZdwq4bBXtwyWxpuAYFUJI24YMFHKCgJpIB7XjWXOmm/WmlM
QlWRQq07MKMrIijBIBYuw4ngbHRkgHGhGxwG/LXiir6RQBFLzZzSQzB9mmEvINLY
EibE0vo2pGDjZ3gF4se/K3bMyOpZKmREGVKWChZFnDQQ+m6wF9w1k0St/Z3SduaO
wkgFygJHC5+Youwtwyq81VhyGRZn1uN/z8dQ49eEKgaK2CII9feU9kj68OcIx7B7
/wv7P3URBkSVMMlBc+35h8/Y07JdYDIWDrGMmL7gma/qmPLCkRFAKazsi4IFUmIN
QJbfN374hvWZ1A==
-----END CERTIFICATE-----