Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          vo0rtg7pdG5PvIvxdNnWsrNhssMCUFLmgltIf92KWo4=
Subject key identifier:   4B:03:D6:DD:BF:A2:15:B6:49:60:11:DB:65:72:1E:E3:56:90:CE:30
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019E90CA4C1684A1ED204E04E0D8EE9A6324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1B08
Signing time:             Thu 04 Jun 2026 04:00:37 +0000
Manifest this update:     Thu 04 Jun 2026 04:00:37 +0000
Manifest next update:     Fri 05 Jun 2026 04:00:37 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa (hash: rGfXJgVQMLoKbsBUGjLWIfQF2f+AZfLjVb+yEM0glNk=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: EbDq1H3GYNlV-pWH7oxYVIFCOeQ.roa (hash: tnICdwbvLAigV1OID0LYGnSR8KT0LAqAy7yMNrmoo5k=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          16: J8kQv0XGjpc4v1Zd8q7lDlYb6Ho.roa (hash: 95rJhHlF52GT5mkU447e3TdNj0Ome8WEB0hywqK5iRo=)
                          17: MFFCqYnJQyyhT3rYu11TUxNbdyQ.roa (hash: sc32coiTLmY4jtEd42H9cncWtAMxB91xZHlWDiVqK0s=)
                          18: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: D7M215F42BFaD6h7Iw2m6B93v9/OnVr3Lltjr6AUTGI=)
                          19: P-2u_kZ5Xsu50HBio1pkIePJa7k.roa (hash: gs3h93EAUbN1m/YbQyq1DvD4dvcskDmE1PICSsE/UpA=)
                          20: PbbUwTZ4TlwQgqFP0U4eIyvuXzI.roa (hash: VzMDNNEpb1oDGnTuFk8FRRst0Ceho9H6ITGIHecG9dg=)
                          21: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          24: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          25: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          26: elofHZNxGzzmXFN_LtIEeHW7zFA.roa (hash: VSVilA+8Nz4FBVNnLzygMzCC80tDqQMuP9pA3OT9k8o=)
                          27: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          28: ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa (hash: 58TIWeMMecbaICVvx4wQl3rXTCRvPRX928qQ/4hXHnA=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l5RDKpATTQ84v4ze9nOyrm-D2JQ.roa (hash: piUrQ5KlinsVw8wD3PyCL+U42E4J1cOA4jhvyBneEJE=)
                          32: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          33: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          34: pKWVvpSOH4TxdNha6GPiYZtQRwY.roa (hash: kSz+LZnvOAyVDNMq5so/uVx8NhNwkT1NQCp2vwsbeY4=)
                          35: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          36: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          37: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          38: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          39: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          40: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:ca:4c:16:84:a1:ed:20:4e:04:e0:d8:ee:9a:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun  4 04:00:37 2026 GMT
            Not After : Jun  5 04:00:37 2026 GMT
        Subject: CN=4b03d6ddbfa215b6496011db65721ee35690ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:ee:4a:5e:fd:b9:5c:3d:9e:c3:6c:e6:24:
                    2d:79:45:67:7b:c4:d9:40:2f:d8:72:ca:cb:14:72:
                    8f:ed:33:39:18:bb:7f:9f:5d:67:2d:6b:7a:55:19:
                    ed:6c:54:ac:a0:6e:7f:94:38:6b:c4:38:fe:1a:84:
                    25:4d:2d:20:6a:57:b2:a4:07:40:ae:b2:97:de:fc:
                    11:5f:dc:82:0f:34:9e:e4:7e:e4:6d:25:60:42:27:
                    a1:8f:a2:79:e5:50:b7:84:25:09:2e:13:71:25:77:
                    85:10:11:f4:db:6f:1e:e9:cb:e8:38:e3:68:e3:4a:
                    de:eb:46:2e:00:82:82:5f:45:3a:cc:67:70:d8:b7:
                    70:23:9c:41:ca:c9:26:ed:52:86:f0:94:24:72:5f:
                    69:7c:7a:c2:b1:69:86:cc:44:bd:2f:14:50:23:9d:
                    f7:66:d0:3e:ad:ae:25:18:d2:f6:6a:6c:52:c5:07:
                    83:05:4e:7c:67:e2:08:13:89:6a:75:8e:93:3f:f4:
                    35:02:23:fc:71:dc:3b:9f:56:eb:07:77:9d:ac:63:
                    b8:69:63:23:3b:d3:ca:de:94:8e:43:84:9a:75:3c:
                    53:fc:b9:6d:19:58:59:8a:86:d9:5a:c7:3b:dd:b8:
                    40:fd:47:4f:4c:67:df:20:76:6b:d0:93:c6:b5:3f:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:D6:DD:BF:A2:15:B6:49:60:11:DB:65:72:1E:E3:56:90:CE:30
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:d7:53:56:93:02:e9:a1:4f:94:c4:20:5e:a4:86:d5:3d:
         31:8c:54:d2:ec:c3:78:b0:3d:40:5b:8d:2c:f8:de:05:fb:7c:
         c8:ab:b4:fd:76:b5:45:91:5b:45:86:89:9c:e3:64:ec:56:95:
         49:3b:6d:bb:c5:65:3e:c1:9d:ee:22:22:cf:f4:cc:23:fc:c0:
         24:50:8a:73:94:cf:e4:00:16:c6:d8:08:31:71:67:38:91:31:
         ee:27:07:0d:8f:1d:86:ae:fa:15:cb:1c:b0:bc:0c:9b:f5:8b:
         f0:90:5e:0c:ad:b2:dc:dd:3c:0c:af:2b:3d:3c:94:3d:ed:ce:
         29:e6:52:3f:35:b4:84:ff:bf:db:29:e6:d7:32:bf:01:c2:55:
         12:9c:ed:41:f6:34:c5:c9:dd:e3:52:c7:97:9a:b6:cd:4c:10:
         56:ff:76:4b:65:0d:93:54:23:1b:0a:83:e8:44:1e:c7:fb:bb:
         3e:f2:cd:da:f3:62:7e:ac:ca:20:c1:89:09:e0:03:cb:81:7c:
         bf:1b:86:07:b9:0c:06:4a:94:15:2f:51:4f:3d:88:82:64:1a:
         8a:2c:c0:f0:ab:d0:a3:fc:25:cd:dd:82:35:f7:5d:66:7c:04:
         3c:77:17:c3:6c:90:f0:cd:8e:2d:6e:f4:3a:2b:2f:ed:92:9f:
         2b:00:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----