Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File:                     NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier:          lbIiyPS5eMAQ5HRwrlmDBs8WykC/0bH6nWOKA3CfUVI=
Subject key identifier:   19:CE:0A:57:5D:61:0B:89:52:26:B2:09:A4:FC:85:03:13:1F:EE:BF
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer:       /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial:       019EFC4C405171310A9393E4B6C05E680D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number:          197B
Signing time:             Thu 25 Jun 2026 01:01:56 +0000
Manifest this update:     Thu 25 Jun 2026 01:01:56 +0000
Manifest next update:     Fri 26 Jun 2026 01:01:56 +0000
Files and hashes:         1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: EyrcaV7bT+2+/qhYdqRXYH5UxvQ8VyLWFpiOJL+vvQw=)
                          2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 19:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:4c:40:51:71:31:0a:93:93:e4:b6:c0:5e:68:0d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
        Validity
            Not Before: Jun 25 01:01:56 2026 GMT
            Not After : Jun 26 01:01:56 2026 GMT
        Subject: CN=19ce0a575d610b895226b209a4fc8503131feebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:06:37:63:91:7a:4f:2f:c1:7f:9f:aa:2c:
                    6c:88:eb:88:da:3b:c4:4d:5b:06:c7:3c:27:4d:3e:
                    bf:05:a9:f3:2f:fc:60:fa:5a:b4:b8:83:23:3d:82:
                    83:eb:80:e4:13:44:7a:fd:31:8c:4f:4c:be:76:e3:
                    c3:b5:2b:c3:e4:bb:cf:4c:7a:e0:53:56:e2:db:71:
                    18:b1:ee:6b:21:87:10:84:12:84:b5:e9:64:13:a2:
                    18:cd:c6:92:5f:a0:15:d2:d1:80:2b:c4:2b:b6:be:
                    3b:5c:fb:86:57:29:29:df:38:94:e5:93:0c:1b:cb:
                    c8:94:74:9d:c7:cd:1a:e0:3a:ec:ff:85:e5:72:cd:
                    dc:04:9c:e8:53:ee:cf:ac:4a:e8:a1:88:b9:6c:b7:
                    e2:3b:a6:9c:69:7a:bb:a6:46:42:a3:32:11:f8:5f:
                    a4:8f:a6:38:c2:00:f5:71:9d:05:6d:ed:9d:e8:a5:
                    f5:ce:09:5f:a6:9e:38:fd:b2:22:2d:5d:81:40:77:
                    c1:e2:b0:3c:de:e0:20:6f:a3:c9:26:3f:38:11:54:
                    7e:f3:06:24:46:99:f9:b8:8a:10:06:79:46:57:cc:
                    94:df:f2:9c:e7:af:29:e3:f6:90:25:d1:d0:25:fe:
                    69:51:17:a5:c3:b9:a6:0d:7d:ac:a2:f0:e4:f7:04:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:0A:57:5D:61:0B:89:52:26:B2:09:A4:FC:85:03:13:1F:EE:BF
            X509v3 Authority Key Identifier:
                keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:24:ba:1a:59:a5:53:c8:06:f2:6e:37:32:9d:99:d5:97:
         83:fd:f7:19:34:96:d4:fc:2c:50:81:2a:bb:0e:7a:65:7e:9e:
         95:22:83:68:8a:44:d4:f1:2d:27:2e:75:df:71:d2:cf:a7:c8:
         94:ac:0b:1d:7e:15:ca:e4:4a:90:5e:d1:d8:94:be:4e:f8:cf:
         06:5f:30:cf:bd:81:8c:ca:02:71:41:d5:34:73:c3:59:3b:38:
         c4:50:18:f7:18:da:84:f1:be:04:86:0a:8c:d5:66:30:14:e4:
         25:4f:70:98:fd:70:13:a6:39:70:8d:cf:b4:0f:9e:66:2a:1a:
         6c:71:28:f8:d7:50:43:13:4f:ac:89:f2:75:9f:77:b6:a7:07:
         8d:ea:d5:38:8b:e5:8c:a2:71:89:bd:cc:4e:69:ea:bf:d9:01:
         49:f4:65:9a:4b:13:cf:65:91:45:c9:8f:0a:c7:0d:73:ce:3f:
         77:e2:42:24:ee:7b:6f:91:47:28:81:85:90:ee:06:97:0a:bd:
         85:1e:fa:40:18:37:ab:a2:90:3c:1b:85:1d:de:be:95:62:7d:
         fb:16:38:e8:0a:37:9e:a2:47:12:12:54:9a:4c:58:fa:8d:c1:
         06:b2:a2:16:31:a1:c1:20:cc:7d:e4:ea:ba:ee:81:cd:f6:8b:
         37:b3:b2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78TEBRcTEKk5PktsBeaA2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjYwNjI1MDEwMTU2WhcNMjYwNjI2MDEwMTU2WjAzMTEwLwYDVQQD
EygxOWNlMGE1NzVkNjEwYjg5NTIyNmIyMDlhNGZjODUwMzEzMWZlZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneIGN2ORek8vwX+fqixsiOuI2jvE
TVsGxzwnTT6/BanzL/xg+lq0uIMjPYKD64DkE0R6/TGMT0y+duPDtSvD5LvPTHrg
U1bi23EYse5rIYcQhBKEtelkE6IYzcaSX6AV0tGAK8Qrtr47XPuGVykp3ziU5ZMM
G8vIlHSdx80a4Drs/4Xlcs3cBJzoU+7PrErooYi5bLfiO6acaXq7pkZCozIR+F+k
j6Y4wgD1cZ0Fbe2d6KX1zglfpp44/bIiLV2BQHfB4rA83uAgb6PJJj84EVR+8wYk
Rpn5uIoQBnlGV8yU3/Kc568p4/aQJdHQJf5pURelw7mmDX2sovDk9wScqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnOClddYQuJUiayCaT8hQMTH+6/MB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkIkuhpZ
pVPIBvJuNzKdmdWXg/33GTSW1PwsUIEquw56ZX6elSKDaIpE1PEtJy5133HSz6fI
lKwLHX4VyuRKkF7R2JS+TvjPBl8wz72BjMoCcUHVNHPDWTs4xFAY9xjahPG+BIYK
jNVmMBTkJU9wmP1wE6Y5cI3PtA+eZioabHEo+NdQQxNPrInydZ93tqcHjerVOIvl
jKJxib3MTmnqv9kBSfRlmksTz2WRRcmPCscNc84/d+JCJO57b5FHKIGFkO4Glwq9
hR76QBg3q6KQPBuFHd6+lWJ9+xY46Ao3nqJHEhJUmkxY+o3BBrKiFjGhwSDMfeTq
uu6BzfaLN7Oyow==
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:47:10 2026 by rpki-client