Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File:                     njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier:          MusXLbrrNsc5vg93Wl+bmY5Eaz7sCF9i+qLXwZPt8vM=
Subject key identifier:   DD:04:1D:10:B6:69:23:C3:47:76:66:00:07:59:B8:8C:BE:DA:CB:09
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer:       /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial:       019F28ED01F44581F2686C826CA7E91FE185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number:          15B0
Signing time:             Fri 03 Jul 2026 17:00:48 +0000
Manifest this update:     Fri 03 Jul 2026 17:00:48 +0000
Manifest next update:     Sat 04 Jul 2026 17:00:48 +0000
Files and hashes:         1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
                          2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: 9GuPn2tFlzWXeE+z3mKhRNqdSNMyGXikzRQSc2s8OzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:ed:01:f4:45:81:f2:68:6c:82:6c:a7:e9:1f:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
        Validity
            Not Before: Jul  3 17:00:48 2026 GMT
            Not After : Jul  4 17:00:48 2026 GMT
        Subject: CN=dd041d10b66923c3477666000759b88cbedacb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:4b:18:26:5e:a1:30:f9:dd:09:33:ab:66:
                    cf:57:db:42:ca:b9:e8:be:19:ae:29:c2:0b:8d:e0:
                    d0:7c:fc:6a:bc:bc:08:45:17:c4:4f:84:22:79:9e:
                    3a:c2:06:70:33:6e:56:5a:ef:07:0e:32:7f:75:e4:
                    2e:ec:48:9d:d3:92:4c:ce:48:df:32:87:3b:1f:76:
                    a5:7b:da:2f:49:39:fa:37:67:08:7f:0e:e6:20:5f:
                    a7:55:17:cf:86:01:12:cb:34:6f:58:f0:2c:25:88:
                    a8:fe:ed:cf:69:fb:37:96:df:9f:f0:26:c4:17:83:
                    fa:b6:39:74:04:14:a9:29:ee:65:47:c9:5b:c5:d2:
                    34:3e:f4:0e:61:66:ab:65:4b:e1:35:d6:4b:45:cd:
                    fe:72:32:fa:9d:62:2f:74:ba:b9:1e:1b:2e:96:05:
                    f5:d0:5e:30:27:dc:eb:42:77:dd:68:5f:b5:e4:4f:
                    28:8f:6e:18:b9:ca:2e:ce:a3:30:b2:b2:81:4b:a9:
                    34:06:78:8c:8e:73:c5:49:0b:cb:64:f2:71:52:56:
                    3f:5d:76:e9:c7:02:d1:f6:f6:58:d4:e7:b6:fd:69:
                    4b:51:c1:03:f3:17:b9:19:7a:c6:7f:fe:e5:83:2b:
                    82:50:17:9e:57:16:2c:f2:f8:4e:cd:97:ad:e4:bb:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:1D:10:B6:69:23:C3:47:76:66:00:07:59:B8:8C:BE:DA:CB:09
            X509v3 Authority Key Identifier:
                keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:54:c0:23:76:56:84:94:3a:b6:af:6c:f8:52:ca:ef:1e:
         d9:4a:ac:77:fa:fa:1e:e7:94:12:f8:72:27:e4:ca:a2:e9:c5:
         6a:38:0f:98:9d:43:e4:4e:86:b5:38:0a:ce:7f:ed:c9:35:3b:
         f6:77:e2:37:d4:85:ad:02:4d:da:99:63:80:f2:bc:61:8f:2d:
         1f:0a:10:d2:65:7f:56:4a:98:3b:3e:4c:2c:3c:e9:98:6c:c9:
         74:d9:57:c3:ad:2d:1a:40:32:68:86:83:57:d3:66:3c:9b:ef:
         f2:16:0a:68:c3:e4:48:bb:f1:31:f4:df:be:10:f2:97:15:56:
         8c:12:7b:8a:f6:e1:6e:3b:ff:83:e9:58:71:df:ee:63:36:a8:
         94:62:9b:fb:ea:ee:79:4d:02:97:e2:6f:76:22:72:3c:89:c6:
         59:4e:fe:c4:ec:13:6b:ba:bf:1c:cc:c5:3f:2c:ef:38:d6:34:
         e8:c9:4b:69:db:64:23:ea:a6:0f:1e:fc:d1:68:8d:ed:a4:13:
         9c:d1:48:3a:6f:c6:f4:90:b5:f4:17:4c:fc:ff:72:09:bf:3c:
         6f:1d:5b:ab:d2:12:d6:4b:ab:73:92:7d:a2:57:e3:8f:f8:03:
         83:70:56:a5:47:ff:80:dd:ae:ed:20:db:67:bc:68:dc:9b:a3:
         9e:9a:bc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8o7QH0RYHyaGyCbKfpH+GFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj
ZWJjNjIwHhcNMjYwNzAzMTcwMDQ4WhcNMjYwNzA0MTcwMDQ4WjAzMTEwLwYDVQQD
EyhkZDA0MWQxMGI2NjkyM2MzNDc3NjY2MDAwNzU5Yjg4Y2JlZGFjYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGRLGCZeoTD53Qkzq2bPV9tCyrno
vhmuKcILjeDQfPxqvLwIRRfET4QieZ46wgZwM25WWu8HDjJ/deQu7Eid05JMzkjf
Moc7H3ale9ovSTn6N2cIfw7mIF+nVRfPhgESyzRvWPAsJYio/u3Pafs3lt+f8CbE
F4P6tjl0BBSpKe5lR8lbxdI0PvQOYWarZUvhNdZLRc3+cjL6nWIvdLq5HhsulgX1
0F4wJ9zrQnfdaF+15E8oj24YucouzqMwsrKBS6k0BniMjnPFSQvLZPJxUlY/XXbp
xwLR9vZY1Oe2/WlLUcED8xe5GXrGf/7lgyuCUBeeVxYs8vhOzZet5LsVhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0EHRC2aSPDR3ZmAAdZuIy+2ssJMB8GA1UdIwQY
MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct
NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz
LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrxUwCN2
VoSUOravbPhSyu8e2Uqsd/r6HueUEvhyJ+TKounFajgPmJ1D5E6GtTgKzn/tyTU7
9nfiN9SFrQJN2pljgPK8YY8tHwoQ0mV/VkqYOz5MLDzpmGzJdNlXw60tGkAyaIaD
V9NmPJvv8hYKaMPkSLvxMfTfvhDylxVWjBJ7ivbhbjv/g+lYcd/uYzaolGKb++ru
eU0Cl+JvdiJyPInGWU7+xOwTa7q/HMzFPyzvONY06MlLadtkI+qmDx780WiN7aQT
nNFIOm/G9JC19BdM/P9yCb88bx1bq9IS1kurc5J9olfjj/gDg3BWpUf/gN2u7SDb
Z7xo3Jujnpq8aw==
-----END CERTIFICATE-----
Generated at Sat Jul 4 01:39:38 2026 by rpki-client