Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          nuQPH+bNVmEilSBhjm5fOEHDQT0Rq7Kg4WGc0FIfdL8=
Subject key identifier:   55:F0:77:57:E9:54:8D:2A:F1:88:59:4E:B9:B4:60:55:DE:02:F6:08
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019DA71D826698F5F4A563440F8E77B1F531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1A76
Signing time:             Sun 19 Apr 2026 19:00:22 +0000
Manifest this update:     Sun 19 Apr 2026 19:00:22 +0000
Manifest next update:     Mon 20 Apr 2026 19:00:22 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          13: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          16: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          17: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 6MjnSwuUC4RPbIbJLg8w2QNmeFzmuMyju3+DPkENvqE=)
                          18: NLkOwJ0HmcUpvjaaCfuKbwv3TYw.roa (hash: B2Uulfo1QIolDCD4U+lno53ILX+prTT/G34KahI6yFA=)
                          19: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          20: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          21: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          22: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          23: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          24: ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa (hash: 5GEuqlOEiYrp8xgMocuyP71e5nGVm9Lf42n7G60SwXw=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fb039wzgKrWTpo9UBKmMxEmU6lg.roa (hash: 1FyVtgYEfwkfvwt1Pma9rwhF0rhGjwyuVIeNxqwWhN0=)
                          29: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          30: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          31: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          32: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          33: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          34: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          35: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          36: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          37: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          38: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          39: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          40: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:1d:82:66:98:f5:f4:a5:63:44:0f:8e:77:b1:f5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Apr 19 19:00:22 2026 GMT
            Not After : Apr 20 19:00:22 2026 GMT
        Subject: CN=55f07757e9548d2af188594eb9b46055de02f608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:6f:a3:89:52:70:e8:77:5f:3b:49:5b:32:
                    81:54:95:6c:c6:55:05:ac:ce:a5:27:f9:5e:59:54:
                    69:ca:ab:b6:12:31:d6:cf:71:3f:78:95:76:88:44:
                    f6:9f:ec:39:c1:50:8f:30:c8:51:9c:70:0f:42:90:
                    08:bd:19:8e:1a:8e:ca:07:fe:73:69:06:8b:f3:71:
                    9b:98:1d:27:e9:98:9b:4b:e1:c8:22:88:99:98:c0:
                    4c:3d:14:4a:cc:43:80:4a:dc:01:19:1f:39:14:ee:
                    88:37:91:58:70:97:00:a9:d4:1f:fc:fd:e5:3f:41:
                    d4:c4:e0:44:f2:10:5c:2c:7e:1f:1e:3e:cc:21:05:
                    3c:1e:3e:82:65:cd:3f:03:cb:6a:f8:23:80:21:74:
                    f6:01:f7:b1:bf:d6:ea:13:37:6f:14:fa:8d:b9:7f:
                    85:2e:8e:f0:62:52:c1:72:43:41:ac:7b:28:74:c7:
                    56:61:46:9e:c4:a2:0b:b3:96:86:96:38:6d:d3:16:
                    a6:59:6f:91:a1:44:8d:c3:fa:7d:fd:c9:c1:83:cd:
                    9d:c6:d6:06:2d:86:30:6d:8e:b8:0d:6c:55:ef:1a:
                    59:bf:b4:e4:5c:3a:c1:7b:f7:40:6a:0a:58:cb:b5:
                    f9:96:ae:4f:85:bd:02:62:a9:ed:ec:4e:69:bf:49:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:77:57:E9:54:8D:2A:F1:88:59:4E:B9:B4:60:55:DE:02:F6:08
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6f:ee:b3:b9:81:5f:66:2f:e9:d1:c3:0b:a2:16:b5:d7:45:
         e0:c7:bf:96:af:2e:20:23:28:6b:23:6f:37:a7:94:f2:39:2d:
         3f:43:c1:8d:e0:5c:90:d8:9b:66:19:c1:30:6d:00:0e:74:6c:
         26:62:3f:12:db:93:48:85:12:b6:9e:2d:48:ee:b9:ee:3a:de:
         88:29:7a:16:fc:5d:9b:b7:87:4c:26:87:d4:ac:49:6e:6b:af:
         ae:fe:df:af:a4:22:3d:27:21:99:d1:4f:65:97:56:32:77:95:
         8e:ea:d7:4c:53:91:10:ea:5b:a8:b9:fb:86:52:7e:4b:4c:33:
         27:03:5d:96:b6:e7:0d:d6:95:d1:95:c9:f3:e7:3d:0e:69:f6:
         a6:74:ac:f7:46:17:b7:c9:f1:7d:fc:c3:9f:9c:a3:c3:d0:c9:
         0b:df:c4:4d:a0:12:28:e4:2a:ac:36:c0:10:ef:84:fe:5d:e7:
         24:3a:d6:85:a5:ee:37:95:b9:6f:85:99:e8:21:ce:fc:d3:08:
         78:8d:01:3b:bb:94:c8:9d:25:30:0e:c8:1a:d1:31:05:b3:c3:
         c2:00:e7:be:f5:58:2e:18:15:f4:8c:b5:71:4d:7b:ed:fa:b1:
         47:67:df:ac:71:0b:78:ca:b6:9d:3d:ab:27:e4:3b:d1:36:b7:
         d3:d5:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----