Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          5oKSAjhI8xrMh9chQuHmdGs04tzmLEIoJB2jMAYbDZg=
Subject key identifier:   10:00:36:AB:91:77:FF:0A:3D:1A:B7:0A:69:26:DB:5B:3D:A7:F2:E3
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019D27A8C2AF8E71825EA87A677F649A008D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1A34
Signing time:             Thu 26 Mar 2026 01:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:04 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          13: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          16: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          17: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 9i2Yvl6UXxSKYIxQwPSTEm9VnxDVQi7BeZ8WPVsTrg8=)
                          18: NLkOwJ0HmcUpvjaaCfuKbwv3TYw.roa (hash: B2Uulfo1QIolDCD4U+lno53ILX+prTT/G34KahI6yFA=)
                          19: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          20: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          21: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          22: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          23: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          24: ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa (hash: 5GEuqlOEiYrp8xgMocuyP71e5nGVm9Lf42n7G60SwXw=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fb039wzgKrWTpo9UBKmMxEmU6lg.roa (hash: 1FyVtgYEfwkfvwt1Pma9rwhF0rhGjwyuVIeNxqwWhN0=)
                          29: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          30: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          31: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          32: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          33: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          34: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          35: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          36: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          37: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          38: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          39: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          40: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:c2:af:8e:71:82:5e:a8:7a:67:7f:64:9a:00:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar 26 01:01:04 2026 GMT
            Not After : Mar 27 01:01:04 2026 GMT
        Subject: CN=100036ab9177ff0a3d1ab70a6926db5b3da7f2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:b7:3e:0b:9b:ad:1a:55:ec:ff:e5:54:eb:
                    3b:4d:d1:ea:5a:9d:a6:c6:0c:33:ae:e1:84:ce:35:
                    c0:d9:e8:6e:c3:59:71:9e:e7:04:f0:64:ff:b8:41:
                    57:61:33:d7:68:2b:b8:8b:82:6e:b1:af:e0:f7:66:
                    71:dd:cb:e8:68:e7:c6:40:5d:a7:39:ee:92:39:fa:
                    2b:c8:d2:04:d7:1c:32:58:f3:68:57:12:89:9e:62:
                    ad:d2:cb:3c:cf:02:8d:46:8e:a0:a7:1b:14:a2:df:
                    04:cb:74:7a:dd:16:00:48:99:f9:2d:82:19:ff:df:
                    c6:08:13:70:78:31:56:7a:4a:04:b0:71:68:1e:95:
                    a5:33:ad:10:3e:83:db:72:f9:03:56:e3:d2:cd:d0:
                    d3:a3:8d:3b:51:4f:34:43:54:2c:7b:a0:52:28:a2:
                    a0:8e:3f:47:d4:f0:9c:cd:35:66:a9:0f:24:9e:c2:
                    7e:31:76:ab:61:2b:93:f3:14:2e:eb:59:06:9d:2d:
                    31:2c:82:79:89:a9:a5:1d:b4:90:f9:65:c7:23:7f:
                    6d:79:d8:5b:34:38:06:9c:a7:68:f3:90:91:da:62:
                    f7:ce:4e:e4:e4:f6:66:2b:92:c0:c7:31:f3:ea:c9:
                    1f:f9:03:3c:74:be:b4:0e:23:cf:11:b5:ed:bc:62:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:36:AB:91:77:FF:0A:3D:1A:B7:0A:69:26:DB:5B:3D:A7:F2:E3
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:82:c6:75:f5:6b:3e:bb:78:a2:6b:0d:18:86:a9:ae:f4:
         32:47:1f:7d:11:fa:b4:cf:9d:a1:8e:e1:64:35:a8:51:50:aa:
         6f:f1:2d:bc:9d:07:e6:e7:da:7c:65:ac:74:77:f8:03:37:e7:
         95:5f:0e:40:13:95:69:a5:b1:50:8c:3b:52:1e:cb:23:6d:8c:
         3e:29:f4:29:fa:4d:19:bb:95:18:0b:9c:ae:dc:79:eb:d9:77:
         f1:61:7e:8c:0b:69:bb:9c:70:9a:30:70:e5:87:db:36:37:3c:
         87:65:44:1c:31:51:ab:23:69:cb:9f:51:c3:eb:28:6d:a4:2c:
         3f:22:7b:d6:a2:e7:d2:1c:cc:6e:26:f1:7d:4b:b7:78:ff:c8:
         22:38:09:4a:20:3c:42:bb:04:dd:cd:26:30:a0:ed:be:cf:70:
         a3:57:fd:4b:e2:54:93:ae:21:a2:11:53:e1:a5:25:8f:0c:4b:
         36:a5:44:a1:b3:03:37:8f:bb:bd:52:3a:8f:26:44:9d:fd:75:
         c4:1d:d6:8a:63:4e:b1:c4:06:e5:5f:17:48:74:db:65:53:63:
         3e:99:f0:29:fe:5b:67:05:71:61:7a:aa:b7:ae:f2:7d:16:d4:
         cd:8e:a7:af:5a:6b:7d:d2:cc:b6:40:f1:1f:36:57:76:ca:41:
         05:fe:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----