Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File:                     NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier:          4GE6WO6AGjKXe7IEJwGv3p63kKMJ+BTW1a2nEIBItag=
Subject key identifier:   8C:AD:9B:89:6B:51:4F:00:87:DA:EA:66:5D:06:E9:B5:8C:96:D4:21
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       019F8FB50818F0AF7D011CAABF1505430412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 16:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:33 +0000
Files and hashes:         1: 4sa3784Bi9DMLhD2DNXva3FSXiA.asa (hash: HiMiDe0dC8OTllwNeML3o8XyExGFwmZ6ylQX9zkk8zY=)
                          2: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (hash: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ=)
                          3: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: GJHEKLaemevHGtqSLpKHob2eFwnmfGshF7Mqcfhdoas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:08:18:f0:af:7d:01:1c:aa:bf:15:05:43:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: Jul 23 16:00:33 2026 GMT
            Not After : Jul 24 16:00:33 2026 GMT
        Subject: CN=8cad9b896b514f0087daea665d06e9b58c96d421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:e7:17:fd:ba:11:d4:d7:5b:c8:e5:14:5d:
                    55:3b:80:e6:65:c0:e0:11:2a:eb:be:2d:b5:ce:16:
                    d3:b3:8f:83:93:eb:51:b4:b8:3f:ca:4f:27:53:c9:
                    0f:7a:3c:12:3e:d4:1e:80:1f:58:85:fa:ef:2e:32:
                    93:5f:77:b4:cb:44:9f:21:d7:a0:dc:f3:2a:7f:49:
                    b2:d3:20:b9:f4:8d:a8:5e:f5:3f:2d:df:23:83:9a:
                    fc:0f:c7:04:0a:06:12:97:0c:99:ad:d0:cf:a1:7d:
                    57:68:0b:4b:3e:40:d6:29:a6:90:af:7e:97:b0:ab:
                    77:0d:5f:02:14:e0:ab:34:e6:af:d5:6b:a7:f5:1d:
                    bf:03:05:fd:a0:c6:dd:16:87:39:62:80:3a:dd:ed:
                    88:37:2c:7d:96:e0:88:0e:58:4e:37:f1:98:bc:e1:
                    a2:fe:b2:b2:6d:c4:92:d5:a6:3e:c9:3b:33:30:ca:
                    59:e3:86:69:af:06:9c:71:14:e8:d8:8a:d9:57:7c:
                    41:5d:5c:9f:45:5e:5e:70:23:dd:c4:a3:8e:0d:60:
                    92:a5:c8:c4:79:b2:37:37:54:62:6d:7a:cd:23:3c:
                    1b:9c:90:91:64:fa:e8:44:af:17:f4:17:b4:14:a1:
                    1d:59:7c:48:cf:d4:ce:2f:af:e2:7a:9f:08:ed:3d:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:9B:89:6B:51:4F:00:87:DA:EA:66:5D:06:E9:B5:8C:96:D4:21
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:9a:96:17:6a:51:53:81:15:9a:ed:49:29:22:9d:46:79:
         bd:5e:b9:8c:6c:ea:e5:86:fd:c5:bc:80:7b:28:3f:7a:6d:67:
         0d:29:04:97:d9:22:fa:88:c8:c7:c7:7a:ab:50:08:5e:2b:52:
         0c:42:a0:54:fa:17:a7:5c:e9:9f:6f:cf:c8:8a:2d:e0:09:f2:
         de:78:76:dc:c6:61:88:c6:3c:ac:21:31:a7:e3:72:07:65:d7:
         b3:ed:c0:4f:14:31:b3:0c:f4:84:22:8e:67:5a:e1:28:38:08:
         f6:3f:c0:5d:3a:63:15:05:ee:5e:06:7c:09:dc:10:87:12:b6:
         4c:44:db:40:d6:95:b5:4d:b0:ca:4b:8a:a7:bd:50:0a:76:a1:
         19:5d:19:47:b9:f1:0d:0d:5a:ba:20:8a:36:96:09:fc:88:7b:
         d2:e6:12:c4:88:72:99:cb:5e:98:4f:0b:96:09:7a:d4:17:e1:
         ac:24:5f:3a:fe:e2:97:66:d0:52:86:06:06:dd:84:67:44:b5:
         2e:a4:8a:a5:43:83:84:e7:70:b0:d3:53:4d:f5:4d:b0:bb:ff:
         90:61:c0:e2:08:cf:23:9c:86:ae:89:73:67:f1:24:d8:92:94:
         40:3b:59:34:ba:5e:56:cf:97:7f:e5:74:1c:c4:19:26:80:11:
         85:20:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:30 2026 by rpki-client