Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File:                     njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier:          VH3djINE4BNRW+4qDRQJsMkY/+hbXYLeIt2eVmQyCeo=
Subject key identifier:   2E:AF:42:4B:DB:DA:42:32:6E:BD:68:0A:19:F9:9F:08:DA:BF:83:24
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer:       /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial:       01A027D7A70D24EADB2CA5520E7604875D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number:          1634
Signing time:             Sat 22 Aug 2026 05:00:39 +0000
Manifest this update:     Sat 22 Aug 2026 05:00:39 +0000
Manifest next update:     Sun 23 Aug 2026 05:00:39 +0000
Files and hashes:         1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
                          2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: cddce5cl1bCRulYElseia/cknZbNmzi7jRz0oAtB2QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:d7:a7:0d:24:ea:db:2c:a5:52:0e:76:04:87:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
        Validity
            Not Before: Aug 22 05:00:39 2026 GMT
            Not After : Aug 23 05:00:39 2026 GMT
        Subject: CN=2eaf424bdbda42326ebd680a19f99f08dabf8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:b1:36:73:99:c6:02:fc:a5:2e:c1:df:97:
                    05:8d:d2:ba:f8:01:f8:03:5e:fc:46:65:ab:22:6b:
                    af:2c:f9:4d:27:d4:0f:d8:20:f1:db:50:3b:e3:ab:
                    a5:f0:f4:e9:31:29:43:e1:5a:45:21:11:41:49:5c:
                    d7:de:a0:75:d8:b4:ce:72:63:36:62:1c:64:a5:b9:
                    5a:74:14:54:26:5d:40:fc:b5:ac:43:96:ed:9c:5e:
                    f0:4b:ef:0f:0b:2a:be:a0:20:39:5a:85:49:8a:31:
                    5f:38:52:e6:f9:ed:b5:4d:54:b3:36:ea:2e:34:1a:
                    fc:b9:49:f2:7e:17:5f:67:56:ea:c2:50:2d:cc:0c:
                    5a:b1:f6:6a:5f:00:30:4a:d6:f2:1b:ba:7b:c3:8c:
                    9b:7c:fe:b9:41:f6:3a:09:e8:f7:b9:13:cb:30:44:
                    95:03:9d:cb:03:68:37:91:d4:be:72:24:3b:50:f9:
                    20:70:b4:82:ff:00:2b:f3:1d:1f:e0:61:72:54:a6:
                    f6:1f:30:3d:46:3d:a2:26:04:48:ed:b7:65:d8:44:
                    1f:00:bb:07:34:a4:03:35:e2:98:10:47:c9:19:a0:
                    bd:93:11:7c:fc:ae:42:1d:d6:1a:28:d8:14:cf:a8:
                    57:13:7f:45:5c:68:a0:b4:ca:3d:07:d4:b9:9d:3b:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AF:42:4B:DB:DA:42:32:6E:BD:68:0A:19:F9:9F:08:DA:BF:83:24
            X509v3 Authority Key Identifier:
                keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:78:b2:6e:8f:73:66:66:7a:64:02:b4:5a:a1:d1:6d:7d:
         7a:19:6b:97:02:c4:56:ad:a6:31:28:71:05:ca:f2:89:1a:86:
         31:e9:fd:ff:e4:32:83:9f:03:31:27:7d:24:26:e0:ba:31:50:
         92:2e:6f:b5:61:03:9a:ee:ac:ed:3e:e4:ef:ab:b7:53:5c:8e:
         e4:c4:1f:19:ee:0d:ad:ea:dd:c1:cd:ec:02:c1:a0:49:1b:0e:
         0b:35:a9:08:84:21:4a:25:30:9e:2c:d6:fd:58:08:f3:39:7a:
         59:49:90:d3:26:9a:37:45:96:b5:a4:03:12:9a:56:9d:fd:fe:
         d4:c8:72:21:c3:17:c5:51:ab:d0:57:18:bb:9d:e1:6b:d0:c8:
         c8:af:3b:bb:6e:5a:ef:2a:6f:63:ab:a8:2e:a3:25:eb:e8:e0:
         9a:33:2a:9f:a5:b5:d7:57:f7:02:78:ca:9f:5f:44:9e:e9:d9:
         a1:8e:72:6e:45:a0:32:7f:6b:f0:66:b7:07:98:45:7c:e8:08:
         bf:ba:69:1d:85:eb:4b:e9:43:69:69:cc:3d:50:90:9d:95:e9:
         52:62:4e:e6:a5:00:13:cb:b4:d1:e3:bc:52:9a:05:a7:bb:68:
         ea:11:6a:64:30:48:a5:74:d7:db:d6:59:6e:9b:08:9d:37:ea:
         70:26:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:29:26 2026 by rpki-client