Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          fQOk64nSkQKkz74eb40wv7cO4W2ew9P2+BFdmawtZoI=
Subject key identifier:   8F:A7:A8:04:AC:04:6A:04:28:01:BF:E9:F3:DA:EE:67:C2:EA:74:9B
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019DCCE1AB81D0D6A8F3BA1A4831E5D52E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          1532
Signing time:             Mon 27 Apr 2026 03:00:34 +0000
Manifest this update:     Mon 27 Apr 2026 03:00:34 +0000
Manifest next update:     Tue 28 Apr 2026 03:00:34 +0000
Files and hashes:         1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=)
                          2: 4xd2VHjKpoK8dv28BbXgOPkMSuE.roa (hash: aqArlLMarpqRWiIpxychPoFPzJ3xOeFHs6erD79AC54=)
                          3: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (hash: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=)
                          4: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (hash: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=)
                          5: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=)
                          6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: +YoBoJ1AzUpZ8BvdFDhSXeDGpayJ+a3RrjZmR4Ss2R8=)
                          7: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=)
                          8: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=)
                          9: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=)
                          10: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (hash: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=)
                          11: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=)
                          12: ak_oIFZ0irbZMnReXAMcFtjQKqI.roa (hash: x/hwjZvN5gTG9CQTOsiCYCBQLkFra2oGt8woSUkU3vg=)
                          13: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=)
                          14: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=)
                          15: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=)
                          16: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=)
                          17: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=)
                          18: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=)
                          19: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=)
                          20: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=)
                          21: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:e1:ab:81:d0:d6:a8:f3:ba:1a:48:31:e5:d5:2e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Apr 27 03:00:34 2026 GMT
            Not After : Apr 28 03:00:34 2026 GMT
        Subject: CN=8fa7a804ac046a042801bfe9f3daee67c2ea749b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:f1:dd:01:75:6b:58:68:4b:81:6b:39:32:
                    c3:1c:7b:5b:06:3f:77:fb:0b:52:53:fd:76:87:53:
                    d7:74:2d:9f:35:4e:5c:84:19:c1:90:be:e0:5b:99:
                    c0:a5:29:14:dd:2f:58:28:43:50:2e:0f:3a:c8:ff:
                    6e:87:26:53:2c:c4:c1:2d:20:fd:05:92:8d:c4:b9:
                    a0:05:16:74:61:05:74:08:d0:44:07:99:22:8f:24:
                    47:e4:3d:a5:9f:92:53:1e:28:08:da:4c:c3:59:34:
                    9b:d0:04:93:04:25:01:d1:8a:cf:36:3f:3c:32:dc:
                    1d:c6:ce:28:25:5b:fc:ae:a3:ba:c3:2b:a7:1a:d2:
                    b5:3d:84:ab:6b:94:78:34:8b:4b:80:68:24:92:be:
                    07:a8:45:fe:03:f0:0e:63:a2:f1:b4:23:48:6a:e5:
                    9c:2c:2e:66:b1:29:bf:30:c7:44:fe:92:0b:75:5a:
                    4d:0f:ba:74:78:fa:88:67:ea:f9:2f:25:f5:ac:60:
                    97:43:05:13:18:f8:81:85:94:91:46:1d:08:d2:98:
                    e9:9e:79:dd:48:36:47:e8:69:cc:85:39:04:c5:38:
                    05:65:b9:08:f7:c1:24:02:44:22:ee:37:f8:d2:dd:
                    61:18:f5:3a:d3:8e:b9:c8:8d:23:77:7b:33:b0:19:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:A8:04:AC:04:6A:04:28:01:BF:E9:F3:DA:EE:67:C2:EA:74:9B
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:11:e7:b6:c9:2c:13:e7:0b:76:c3:2a:de:da:e0:7d:c0:e3:
         07:7c:dc:00:89:b8:77:1d:f9:a1:59:49:94:81:73:f8:e0:e4:
         4f:9d:df:5b:eb:1d:05:06:80:39:b3:1f:11:aa:55:ab:fb:6e:
         65:a1:75:a7:d3:28:03:73:0b:99:16:0d:9e:4a:05:4e:96:14:
         c7:46:76:09:9d:05:4f:f6:89:10:80:11:e3:68:07:83:46:36:
         2b:e3:ee:7d:b4:94:f9:33:eb:42:62:39:0c:4b:91:cf:c7:fc:
         e5:b0:88:64:a7:d9:53:d8:3a:8c:cf:93:c9:10:4c:02:58:a0:
         8d:d0:45:93:21:2a:11:94:9c:9c:28:84:96:d9:e1:42:5d:e2:
         77:fc:46:6f:47:99:51:35:d7:81:4b:47:0b:b2:94:36:5c:ee:
         06:b9:c6:36:09:39:b1:a2:78:50:e7:45:59:96:56:87:38:92:
         56:fa:51:23:8a:39:00:a3:99:9b:a6:f7:39:79:3e:d6:b5:2f:
         20:5e:36:93:94:fc:a8:e8:b7:19:a3:ef:98:cd:9c:66:b5:3f:
         4f:be:4b:e6:09:32:59:00:12:08:20:6f:df:b6:e9:8a:4d:67:
         41:72:9e:09:e1:a3:57:d3:be:1d:ca:65:79:00:53:cd:cb:ac:
         22:a2:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:16:32 2026 by rpki-client