Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File:                     njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier:          ip3BCNJbeeAhfSDx2fTMIq6JTDFk7cM65On1wiDz/IM=
Subject key identifier:   A6:60:90:9B:D0:C8:2B:90:2E:D8:95:5E:E5:A6:FC:3B:29:B4:1E:15
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer:       /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial:       01A0D1C9A262E757AE402CC2C1C7EB1B83CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number:          168C
Signing time:             Thu 24 Sep 2026 05:00:47 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:47 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:47 +0000
Files and hashes:         1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
                          2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: idLLvW+KBH1vDwNqg+5Dy8tfeJu/OTftq7xqiZG//Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:a2:62:e7:57:ae:40:2c:c2:c1:c7:eb:1b:83:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
        Validity
            Not Before: Sep 24 05:00:47 2026 GMT
            Not After : Sep 25 05:00:47 2026 GMT
        Subject: CN=a660909bd0c82b902ed8955ee5a6fc3b29b41e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:20:b1:00:f0:51:a8:0d:e8:e7:b4:c7:70:
                    36:7b:e5:e2:f2:4d:38:cd:dd:5f:ef:0d:5a:d1:b5:
                    e6:3f:b8:3b:af:60:25:f8:d1:73:a7:1e:a7:2c:dd:
                    42:05:5b:67:df:55:0f:63:4c:8f:10:95:8e:a4:46:
                    71:c9:fc:de:c4:bd:b0:5f:d7:94:51:b9:1f:7c:b6:
                    2f:09:a2:3b:1d:74:51:0e:bf:ce:1e:70:c1:ca:81:
                    3b:e6:a4:5b:03:8f:19:10:7d:95:b7:4a:45:d1:85:
                    e7:a1:64:db:ad:99:81:79:43:70:e7:90:e9:df:60:
                    34:e3:8e:c5:98:10:60:04:dc:4a:5a:47:8f:74:07:
                    56:0f:ac:a3:6f:7c:a0:7b:2b:89:77:35:3a:38:ff:
                    b8:b6:6e:b0:40:53:97:8d:54:c7:fc:87:97:a1:3d:
                    16:a1:66:79:7a:63:3d:a8:b7:c3:ea:ce:da:60:b9:
                    88:da:55:58:42:b1:82:78:86:c3:df:45:5c:34:6f:
                    b5:21:6d:fa:6e:89:bd:17:0e:5a:d5:57:2f:f9:c1:
                    ba:10:22:c5:44:56:2d:09:1f:e7:79:5b:e4:4f:ed:
                    38:78:8c:7f:dd:1d:88:11:0d:de:44:4c:d1:fc:48:
                    99:15:d9:88:72:85:12:bb:44:02:28:e3:a9:4c:51:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:90:9B:D0:C8:2B:90:2E:D8:95:5E:E5:A6:FC:3B:29:B4:1E:15
            X509v3 Authority Key Identifier:
                keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:27:e5:59:fc:5e:e1:9c:4a:13:2d:74:e1:a4:f7:a7:ea:2c:
         5a:59:06:49:b1:c2:95:d3:11:e9:69:a3:99:d3:6f:b7:01:79:
         d5:a4:ea:85:dd:9b:9b:b9:aa:9c:b2:ab:d6:8e:53:f3:9c:2b:
         5d:a5:d5:12:8f:f9:a3:d3:45:3f:d7:e2:ec:49:92:87:1f:e8:
         45:fc:33:a4:26:08:b5:65:70:f1:6a:da:a2:03:75:76:3e:7c:
         7e:ad:41:4c:f2:05:a8:22:4d:3a:82:8f:12:bc:15:81:f5:7e:
         59:c6:a9:a7:f0:db:07:7b:37:0e:68:61:b9:59:26:48:7f:19:
         40:99:3b:bc:19:b7:a1:2b:aa:63:36:4c:bc:44:79:b1:15:9f:
         92:13:45:5a:d6:14:c7:de:51:cb:95:36:77:bb:21:55:38:30:
         25:32:51:e9:b8:e8:5a:cb:05:88:b9:92:a5:8f:b6:3d:37:e9:
         33:55:4c:94:98:2c:be:e4:33:83:36:3c:66:80:7c:09:3b:13:
         be:36:99:dd:94:d3:a8:c2:3d:5d:c9:89:52:ff:29:94:79:ff:
         37:ad:f8:4b:a0:87:e4:e3:94:e0:d3:33:ec:ac:ee:79:b6:04:
         4c:cb:76:e8:74:75:e3:74:4e:3d:7d:ad:34:8c:2e:7c:98:f8:
         1c:c3:eb:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyaJi51euQCzCwcfrG4PMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj
ZWJjNjIwHhcNMjYwOTI0MDUwMDQ3WhcNMjYwOTI1MDUwMDQ3WjAzMTEwLwYDVQQD
EyhhNjYwOTA5YmQwYzgyYjkwMmVkODk1NWVlNWE2ZmMzYjI5YjQxZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSogsQDwUagN6Oe0x3A2e+Xi8k04
zd1f7w1a0bXmP7g7r2Al+NFzpx6nLN1CBVtn31UPY0yPEJWOpEZxyfzexL2wX9eU
UbkffLYvCaI7HXRRDr/OHnDByoE75qRbA48ZEH2Vt0pF0YXnoWTbrZmBeUNw55Dp
32A0447FmBBgBNxKWkePdAdWD6yjb3ygeyuJdzU6OP+4tm6wQFOXjVTH/IeXoT0W
oWZ5emM9qLfD6s7aYLmI2lVYQrGCeIbD30VcNG+1IW36bom9Fw5a1Vcv+cG6ECLF
RFYtCR/neVvkT+04eIx/3R2IEQ3eREzR/EiZFdmIcoUSu0QCKOOpTFGJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZgkJvQyCuQLtiVXuWm/DsptB4VMB8GA1UdIwQY
MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct
NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz
LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCflWfxe
4ZxKEy104aT3p+osWlkGSbHCldMR6WmjmdNvtwF51aTqhd2bm7mqnLKr1o5T85wr
XaXVEo/5o9NFP9fi7EmShx/oRfwzpCYItWVw8WraogN1dj58fq1BTPIFqCJNOoKP
ErwVgfV+Wcapp/DbB3s3DmhhuVkmSH8ZQJk7vBm3oSuqYzZMvER5sRWfkhNFWtYU
x95Ry5U2d7shVTgwJTJR6bjoWssFiLmSpY+2PTfpM1VMlJgsvuQzgzY8ZoB8CTsT
vjaZ3ZTTqMI9XcmJUv8plHn/N634S6CH5OOU4NMz7KzuebYETMt26HR143ROPX2t
NIwufJj4HMPrBg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:52 2026 by rpki-client