Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          hcSiu50ARt9cT9iBZP9Bduau/8CHnLd+S2r0GbXuzRI=
Subject key identifier:   F3:FB:60:11:11:F6:D8:98:38:97:64:03:66:90:9D:22:31:30:6C:F8
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019A4F9916D773F8F2FC9E75A84643D102EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          135F
Signing time:             Tue 04 Nov 2025 16:00:24 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:24 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:24 +0000
Files and hashes:         1: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=)
                          2: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=)
                          3: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=)
                          4: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=)
                          5: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=)
                          6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: F/5onkmUmKNXhlP9g3qedJHyxpaQz1tQo3EM90C6mO4=)
                          7: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=)
                          8: iVFWKpRKrZrvXfyBPCiicWzEtLc.roa (hash: ySfsYFD8sJUIiFlWUtE2uw6TxmR7ZrKTk3Ot39sI2WQ=)
                          9: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=)
                          10: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=)
                          11: nqKarluaIBxurSOLKoj0fda_I6o.roa (hash: 0igWebpYrmPU5dIZIocnzzs4+9GsDMulHYWmTIL37ig=)
                          12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=)
                          13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=)
                          14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=)
                          15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=)
                          16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=)
                          17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:16:d7:73:f8:f2:fc:9e:75:a8:46:43:d1:02:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Nov  4 16:00:24 2025 GMT
            Not After : Nov  5 16:00:24 2025 GMT
        Subject: CN=f3fb601111f6d8983897640366909d2231306cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:ef:03:c0:f9:d6:a1:44:f7:2e:b8:d2:db:
                    49:14:f7:f0:3c:b0:5f:1a:de:b7:62:af:aa:cc:97:
                    4d:1c:b3:cf:52:ff:34:d8:89:0d:2c:a8:7d:82:43:
                    71:bc:6c:a0:cb:30:24:f9:d7:f4:92:a0:a0:5d:a5:
                    98:5a:e2:40:73:e2:79:72:ef:17:71:0d:af:df:ee:
                    bc:94:31:f7:c0:47:82:cd:0f:3b:52:93:47:b8:c5:
                    64:f6:66:b2:3f:d9:31:58:d6:8e:c8:5a:73:9b:36:
                    51:a3:c9:09:aa:fe:16:aa:1d:0d:06:08:60:a7:e6:
                    61:d2:f8:38:19:0d:f3:d3:88:5f:7e:a4:5b:4a:36:
                    3b:ca:d9:9d:18:63:b5:a8:48:79:56:f1:a5:1f:a7:
                    4e:48:2e:e8:47:cb:97:8e:c6:eb:7c:db:30:83:d6:
                    94:c4:6e:72:2c:d6:32:f7:0f:c2:3a:d4:10:19:c5:
                    fa:0e:f4:bb:65:50:31:8d:b5:5e:87:eb:ef:22:1a:
                    e8:92:6a:dd:7b:02:3d:3f:cb:0e:54:6f:3a:19:f3:
                    5b:8a:e1:b1:92:c6:de:b4:89:f5:1e:6f:47:d2:97:
                    32:8c:93:fc:1b:47:d5:ac:46:49:cf:0f:ce:37:27:
                    b1:ce:e8:4d:4d:88:5c:33:22:5b:5f:a0:36:84:19:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FB:60:11:11:F6:D8:98:38:97:64:03:66:90:9D:22:31:30:6C:F8
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:56:cb:f1:95:9a:a2:ef:7e:4a:b3:4a:ff:cb:54:45:fd:ec:
         70:c3:dc:a0:f5:99:f0:28:bb:30:01:08:a1:9e:c2:3e:a3:23:
         da:ad:a4:b5:ad:12:19:26:bd:ac:e9:04:a2:47:f7:2b:23:e6:
         18:40:af:e7:2c:66:04:86:9d:7d:db:3e:59:61:47:ff:c0:9e:
         89:b7:19:3a:63:6c:6d:74:32:f6:be:6a:e6:05:f5:b1:f6:b6:
         84:63:ef:14:f8:df:ad:d8:d3:8b:56:4b:b1:86:e0:e8:bb:32:
         28:ee:8b:03:6d:86:99:e4:c0:09:db:a8:fe:de:e5:7c:39:67:
         53:44:33:b4:cc:f0:91:b7:f3:9a:05:93:6f:f1:09:00:83:76:
         19:6b:be:dd:2c:22:f9:78:ed:39:8e:0e:46:11:64:07:63:ae:
         6f:a4:4a:4e:c9:75:19:95:ec:df:cc:37:27:e4:0b:bb:52:16:
         fd:0f:78:7f:10:4f:7a:c9:f6:b4:7a:35:df:5a:ea:f8:8e:a0:
         93:bf:50:44:4b:cf:d2:14:fb:9b:d2:dd:79:40:62:bc:97:d1:
         9d:fe:d5:bb:99:ce:97:6e:7a:83:a3:22:c0:8b:9c:33:b7:c9:
         8e:6c:ae:5c:d0:af:64:49:07:f5:6a:e2:1b:32:c7:df:d9:3d:
         11:ee:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:40 2025 by rpki-client