Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          Z053nUfnWQa2IFBjLQconY5KjkhmO1HZsVnyUo4QgYg=
Subject key identifier:   52:55:55:D7:5D:80:D5:40:45:7D:53:4A:D1:68:D4:EB:AE:94:44:62
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019DA4539B6D174319CE21377009929FB852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          151D
Signing time:             Sun 19 Apr 2026 06:00:35 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:35 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:35 +0000
Files and hashes:         1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=)
                          2: 4xd2VHjKpoK8dv28BbXgOPkMSuE.roa (hash: aqArlLMarpqRWiIpxychPoFPzJ3xOeFHs6erD79AC54=)
                          3: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (hash: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=)
                          4: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (hash: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=)
                          5: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=)
                          6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: vu6rlhembqtKrjo6GoHoGE/v1LilVUaCuKavBR6raQU=)
                          7: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=)
                          8: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=)
                          9: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=)
                          10: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (hash: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=)
                          11: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=)
                          12: ak_oIFZ0irbZMnReXAMcFtjQKqI.roa (hash: x/hwjZvN5gTG9CQTOsiCYCBQLkFra2oGt8woSUkU3vg=)
                          13: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=)
                          14: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=)
                          15: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=)
                          16: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=)
                          17: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=)
                          18: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=)
                          19: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=)
                          20: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=)
                          21: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:9b:6d:17:43:19:ce:21:37:70:09:92:9f:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Apr 19 06:00:35 2026 GMT
            Not After : Apr 20 06:00:35 2026 GMT
        Subject: CN=525555d75d80d540457d534ad168d4ebae944462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:d5:ed:34:c5:c8:5f:cd:65:a1:60:43:fe:
                    cd:59:27:dd:fa:7c:f9:f8:4e:c8:5e:04:97:20:11:
                    c8:be:d8:f4:9f:4b:e0:d6:ab:a8:b5:34:cb:6b:f1:
                    41:bc:f1:d7:d5:3f:65:f1:e4:e7:fe:0f:07:b1:7e:
                    91:90:8a:d0:2e:23:5d:b8:51:5b:b1:57:e6:60:21:
                    dd:37:23:e0:78:ee:f0:e2:b4:82:00:72:da:89:12:
                    f8:26:29:81:e9:ce:ee:38:75:04:39:ac:06:13:60:
                    5f:16:13:b7:09:0c:e1:b9:97:b6:78:61:76:44:8e:
                    87:f6:a0:3b:6d:0c:4e:7b:29:67:cb:af:87:de:55:
                    bf:f6:ee:1f:09:18:79:67:f6:d3:9e:3f:09:88:84:
                    6c:dc:7f:60:ee:15:f1:f3:3a:7b:14:e4:d8:af:0e:
                    e8:6d:60:58:3c:21:8d:80:6a:e0:67:1f:30:5c:ae:
                    c5:f8:24:6b:6a:39:44:e6:61:61:cb:65:2b:34:2b:
                    f9:99:17:80:49:df:1a:58:5d:1f:e7:9b:e6:c4:e2:
                    6d:a1:58:c2:99:ce:c0:f4:da:07:56:9d:49:0f:56:
                    2d:8a:70:31:6e:09:01:30:94:df:07:65:4a:d1:9f:
                    97:ea:e5:59:70:1e:2a:f3:bd:5c:f9:47:95:ab:c7:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:55:D7:5D:80:D5:40:45:7D:53:4A:D1:68:D4:EB:AE:94:44:62
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:55:9b:59:b6:b9:cc:78:4b:4f:70:09:90:29:91:51:01:e3:
         7e:3c:73:af:56:3b:1a:64:75:ea:97:27:d0:05:17:14:a4:36:
         be:b7:0e:fe:d6:30:bc:9c:b5:6f:b7:27:84:3f:4b:5b:3f:03:
         f4:05:bb:e3:d5:ff:3f:ea:7b:3f:04:95:b2:17:d5:88:12:bf:
         69:6f:63:0b:26:b5:e5:12:ff:a7:35:c1:ff:ee:4f:7b:d3:81:
         09:45:86:8a:db:ae:7f:88:53:b6:28:aa:ed:b9:d6:99:0d:86:
         8e:84:9d:1f:6f:67:e9:e8:46:b2:f9:c9:ea:27:c1:4e:05:db:
         87:5f:83:66:0b:4a:54:96:b3:2f:2a:8b:e7:72:9d:45:05:09:
         bb:82:2a:85:0f:d2:b8:1b:3e:4e:14:d2:e3:ee:c5:16:ad:c6:
         e8:3c:00:7d:3d:5b:0a:f1:da:6b:57:fa:88:b6:45:20:1d:2b:
         75:5f:cb:5d:f9:2b:29:10:03:b8:4c:9a:a4:62:73:5e:08:38:
         cf:cf:74:1a:92:8f:e3:5d:50:8c:67:1b:bf:7e:5f:74:5e:8c:
         28:70:a7:c0:17:41:92:8b:ca:7f:89:76:0d:88:ea:63:ea:36:
         52:2a:ae:ee:fc:ab:5b:86:25:94:20:4d:82:84:85:2f:d1:b7:
         dc:20:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:21 2026 by rpki-client