Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          P6h/4XfHPWBeafA1tz9uEc78n6viH8CJuZRo4HGNEhc=
Subject key identifier:   71:AE:0E:6B:95:87:D2:4D:8A:F5:00:9D:6D:A8:93:32:6B:05:B3:40
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019EBD357914AE135C1D6C0719A454F057BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1B1F
Signing time:             Fri 12 Jun 2026 19:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:58 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa (hash: rGfXJgVQMLoKbsBUGjLWIfQF2f+AZfLjVb+yEM0glNk=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: EbDq1H3GYNlV-pWH7oxYVIFCOeQ.roa (hash: tnICdwbvLAigV1OID0LYGnSR8KT0LAqAy7yMNrmoo5k=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          16: J8kQv0XGjpc4v1Zd8q7lDlYb6Ho.roa (hash: 95rJhHlF52GT5mkU447e3TdNj0Ome8WEB0hywqK5iRo=)
                          17: MFFCqYnJQyyhT3rYu11TUxNbdyQ.roa (hash: sc32coiTLmY4jtEd42H9cncWtAMxB91xZHlWDiVqK0s=)
                          18: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 5RJ/IS4SxdpmLpw96KXuGDcHa002qi1BCBlwXgr08Yo=)
                          19: P-2u_kZ5Xsu50HBio1pkIePJa7k.roa (hash: gs3h93EAUbN1m/YbQyq1DvD4dvcskDmE1PICSsE/UpA=)
                          20: PbbUwTZ4TlwQgqFP0U4eIyvuXzI.roa (hash: VzMDNNEpb1oDGnTuFk8FRRst0Ceho9H6ITGIHecG9dg=)
                          21: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          24: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          25: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          26: elofHZNxGzzmXFN_LtIEeHW7zFA.roa (hash: VSVilA+8Nz4FBVNnLzygMzCC80tDqQMuP9pA3OT9k8o=)
                          27: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          28: ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa (hash: 58TIWeMMecbaICVvx4wQl3rXTCRvPRX928qQ/4hXHnA=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l5RDKpATTQ84v4ze9nOyrm-D2JQ.roa (hash: piUrQ5KlinsVw8wD3PyCL+U42E4J1cOA4jhvyBneEJE=)
                          32: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          33: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          34: pKWVvpSOH4TxdNha6GPiYZtQRwY.roa (hash: kSz+LZnvOAyVDNMq5so/uVx8NhNwkT1NQCp2vwsbeY4=)
                          35: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          36: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          37: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          38: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          39: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          40: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:79:14:ae:13:5c:1d:6c:07:19:a4:54:f0:57:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun 12 19:00:58 2026 GMT
            Not After : Jun 13 19:00:58 2026 GMT
        Subject: CN=71ae0e6b9587d24d8af5009d6da893326b05b340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:30:75:8c:35:ad:99:9a:35:a2:7e:66:ae:
                    a5:74:0c:2e:87:7f:8c:c6:27:fa:4e:b4:11:2d:8d:
                    11:b6:17:6c:00:a1:1a:b8:d6:6d:09:68:b5:4f:4c:
                    c2:c6:8a:7f:43:a6:d6:27:88:9b:9f:d8:01:2a:bf:
                    91:a1:af:0e:cb:49:5e:87:c6:97:da:06:f0:0b:a2:
                    90:f9:29:56:ec:1a:b3:09:2c:02:a5:fa:e2:08:fe:
                    f4:01:96:b0:72:5e:a4:6a:57:82:0a:0d:42:91:91:
                    3d:66:04:54:a6:19:3f:47:be:a3:ea:30:de:16:76:
                    dd:8f:53:74:88:95:de:72:b7:bc:59:22:1b:8e:49:
                    e8:7a:54:8d:70:f2:46:b3:ee:a2:2d:d9:76:75:27:
                    3c:06:ef:6c:dc:0d:f7:c7:a6:ed:62:a5:14:89:a9:
                    f3:b9:02:41:5a:31:21:59:44:8b:b5:ef:40:08:6e:
                    be:07:b1:28:a2:df:1d:c3:e4:76:d8:68:97:8d:20:
                    0a:0b:a0:2e:2c:59:f3:ad:f2:cd:bd:bc:12:68:89:
                    ed:78:2f:66:3c:e1:b7:c3:30:20:84:9f:06:50:28:
                    ff:66:44:45:7e:35:ca:34:ff:c6:28:89:a7:f9:9e:
                    b8:2c:ee:a9:30:0c:60:b5:82:28:b0:e3:e2:5e:4c:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:0E:6B:95:87:D2:4D:8A:F5:00:9D:6D:A8:93:32:6B:05:B3:40
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:01:1a:08:61:c3:79:95:89:0f:f6:99:11:9d:80:0f:37:
         60:9b:bd:84:d1:7d:99:ed:aa:99:fe:ba:07:5a:e5:a3:2c:57:
         b0:67:d0:6e:d2:de:8c:68:c1:ad:99:58:b4:5c:ac:eb:de:be:
         b0:94:f6:94:34:eb:70:d4:5c:a1:0d:d9:c3:a5:b3:37:3d:51:
         b4:91:8e:67:d6:b4:42:42:b3:6f:19:bb:09:99:9f:65:11:73:
         48:1d:40:53:76:b1:cd:63:ab:73:19:7e:8b:43:8f:0b:ad:ed:
         a3:d7:e8:b6:74:68:b8:8a:2e:9b:07:b9:5b:80:f2:9b:ff:98:
         f2:c7:c8:fc:a3:7e:52:92:79:61:9e:fe:45:59:1f:37:e1:6e:
         ea:c3:db:70:ef:c0:55:94:66:b7:15:29:bc:6d:a6:0b:ef:b3:
         85:5c:66:2b:ab:67:7d:26:16:d5:90:da:e2:fa:09:60:ab:67:
         9b:2c:9e:91:45:73:4b:38:43:83:85:eb:e7:e5:28:eb:a5:04:
         c7:cb:6a:7a:11:76:c1:4b:e4:d9:b3:ef:b7:d5:db:f1:0e:bc:
         81:3d:e3:03:dc:df:01:3d:14:66:5c:43:f8:52:78:2e:9e:0d:
         52:43:83:29:40:94:32:94:93:f3:2a:ac:7a:60:07:28:60:ba:
         1b:ad:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----