Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          nH8lSFG+r81HmhaGULExSeAYFOBuJsaIgW5IXGAZnDI=
Subject key identifier:   0C:32:14:10:8F:84:D1:C5:B5:C0:59:5E:D9:07:0B:D1:BB:35:2A:99
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019CBEBB178C1C5D43EDC98FB2FC7D07FA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          19F4
Signing time:             Thu 05 Mar 2026 16:00:58 +0000
Manifest this update:     Thu 05 Mar 2026 16:00:58 +0000
Manifest next update:     Fri 06 Mar 2026 16:00:58 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: ES1lahPFgcwTztwXyOfhZ5VVmvc.roa (hash: Ew+ImBSHPbFzPIU+4Pej0vRiFBv0R3uwB1KeV4mUWqo=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          15: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          16: HBxIhJQTEPlpkLB0ZPYkHZSJiik.roa (hash: eG6f7ib9tGK1jAHCC+qT2jC4Ebjo/wZvqFlp98jpIUQ=)
                          17: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          18: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          19: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: aGmTRpO/5JzGAqY0fc694xuOJOIEJKjwHazG3kaGXNk=)
                          20: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          21: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          24: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          32: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          33: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          34: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          35: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          36: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          37: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          38: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          39: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
                          40: ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa (hash: 8ZQ1qiEiuvsIkgBswJAnf3eGUcB29l0qukHGlnRR4w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:bb:17:8c:1c:5d:43:ed:c9:8f:b2:fc:7d:07:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar  5 16:00:58 2026 GMT
            Not After : Mar  6 16:00:58 2026 GMT
        Subject: CN=0c3214108f84d1c5b5c0595ed9070bd1bb352a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:65:16:94:62:bd:76:e0:2d:4b:6f:a8:03:
                    3f:f6:82:9a:55:65:42:17:2b:5f:03:3c:80:e4:db:
                    a4:3b:c0:6b:b5:b3:0a:84:4c:9f:61:08:fd:99:2e:
                    ba:7c:d9:d0:1c:27:99:c8:41:f8:41:d0:7f:4a:d1:
                    ee:31:b4:e7:cd:42:fc:66:ec:c7:9b:8d:41:c1:7f:
                    25:2a:7b:65:d9:53:dc:65:e3:b5:21:4a:28:6d:61:
                    f8:20:46:93:57:b9:b7:d1:27:29:13:c1:b1:16:95:
                    29:f0:ec:d8:29:d6:8b:e8:0a:e1:65:ee:c5:72:82:
                    d4:ff:18:f0:08:6c:7e:34:85:ea:1a:23:b2:b3:b4:
                    77:3c:f9:d4:ed:ef:fe:77:51:56:af:47:9a:51:28:
                    76:f5:8a:3b:05:19:0e:6a:9e:20:61:7c:79:0c:67:
                    d6:6c:93:16:83:16:83:4a:6b:ca:80:83:0f:aa:fa:
                    df:49:6b:54:db:1c:76:a3:43:b0:ab:42:06:b7:fe:
                    4e:c5:9c:19:71:cb:33:e4:e7:3d:9e:0d:e1:fa:ba:
                    b5:d0:73:83:65:9e:1d:cb:f0:61:0b:3b:16:b7:79:
                    f8:96:2a:3d:2a:a8:2a:53:18:e8:f3:fd:ba:3f:71:
                    17:36:e6:1b:60:ba:cc:de:12:9b:f4:bf:84:ac:ea:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:14:10:8F:84:D1:C5:B5:C0:59:5E:D9:07:0B:D1:BB:35:2A:99
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:96:d2:2e:de:89:99:56:49:e4:8e:d8:63:08:49:65:24:fe:
         97:97:5b:1a:4f:e4:a0:50:7b:47:0b:97:25:3d:be:a1:11:76:
         21:bc:f6:4c:42:33:2a:db:4a:67:c9:34:1e:94:f7:04:6b:81:
         c2:90:26:78:b9:4c:5f:da:5b:7c:9a:92:66:31:be:b0:12:8b:
         10:17:b1:e8:1a:8d:70:5b:82:d5:59:d0:3d:80:61:d3:ee:c7:
         9c:fa:83:6c:39:eb:13:37:d3:f4:a5:87:e3:fb:e1:1b:e8:6b:
         e1:5b:2b:5e:04:95:77:4b:5b:53:23:26:4b:e5:6b:76:a2:3b:
         2b:8c:10:d2:02:f0:1c:c7:85:a8:68:f5:41:73:fe:27:1a:f1:
         65:fc:c6:d4:4d:e3:ee:c5:c8:74:8f:86:90:56:86:c2:ce:5e:
         92:5c:d8:f1:b2:6b:41:78:3d:4c:8f:2a:03:5b:28:9d:e2:94:
         dc:f9:0f:26:95:b6:d1:0b:88:ff:b7:21:eb:41:86:41:d3:83:
         bd:53:f4:36:d8:f4:c2:9d:6d:53:d8:b4:1d:1d:bd:78:ba:80:
         1e:7f:7a:c0:72:a7:9f:fa:75:e0:6c:ce:2c:34:a3:87:d2:95:
         35:61:6d:d6:b9:89:7b:a5:ae:dc:6c:fb:6e:65:a4:a0:23:68:
         45:91:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----