Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          ytaMG2nmOy6YRLlK33DIMsvIEih707vVn2Nm+tUKUy4=
Subject key identifier:   B0:5B:94:A3:DC:64:B6:74:96:C7:E4:2D:1F:0F:00:B8:6E:66:FA:CD
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019E1CB45EEB94A224E7FAA5914036AA3596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1AC6
Signing time:             Tue 12 May 2026 15:00:43 +0000
Manifest this update:     Tue 12 May 2026 15:00:43 +0000
Manifest next update:     Wed 13 May 2026 15:00:43 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa (hash: rGfXJgVQMLoKbsBUGjLWIfQF2f+AZfLjVb+yEM0glNk=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: EbDq1H3GYNlV-pWH7oxYVIFCOeQ.roa (hash: tnICdwbvLAigV1OID0LYGnSR8KT0LAqAy7yMNrmoo5k=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          16: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          17: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 81JaaqOEa3F/7hkLtHl12pWmNXplIOIQ4vRoXVMULpA=)
                          18: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          19: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          20: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          21: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          22: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          23: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          24: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          25: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          26: ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa (hash: 58TIWeMMecbaICVvx4wQl3rXTCRvPRX928qQ/4hXHnA=)
                          27: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          28: hMvyB1pcZJJ4ne7PUjEH2uYYfAo.roa (hash: yno1f6h3WcnlkHz3v3tuYAFTInjTxZGAPvAW6BrEI6I=)
                          29: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          30: l5RDKpATTQ84v4ze9nOyrm-D2JQ.roa (hash: piUrQ5KlinsVw8wD3PyCL+U42E4J1cOA4jhvyBneEJE=)
                          31: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          32: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          33: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          34: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          35: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          36: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          37: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          38: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          39: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:5e:eb:94:a2:24:e7:fa:a5:91:40:36:aa:35:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: May 12 15:00:43 2026 GMT
            Not After : May 13 15:00:43 2026 GMT
        Subject: CN=b05b94a3dc64b67496c7e42d1f0f00b86e66facd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:d9:28:fe:12:f7:53:aa:d0:3f:5c:7f:40:
                    9f:2b:d9:3c:e1:f6:91:1b:ae:ef:7a:36:63:6e:70:
                    91:77:14:b9:a3:ea:ab:73:8c:80:fa:91:f9:a2:9c:
                    ba:1b:e8:9b:6e:04:d0:5c:58:95:48:0b:8c:03:05:
                    c4:dc:52:c5:73:c2:87:e9:78:15:bc:52:28:53:3e:
                    05:94:0f:e5:bc:8a:aa:47:79:ae:bf:ee:b9:5e:50:
                    47:0f:47:f3:43:9f:10:44:a9:ae:6a:a0:ba:1a:5a:
                    2c:0f:16:49:ed:1f:41:56:cd:82:eb:cf:1e:b5:6a:
                    28:93:8d:5b:c3:54:b8:42:85:62:66:d4:85:ee:31:
                    21:c0:d1:fc:00:69:97:8f:d6:b3:ec:45:21:7f:4b:
                    49:1b:d9:2c:f6:f5:b9:80:72:a6:dd:58:89:87:ba:
                    53:af:e0:e0:42:9a:e3:48:e1:c1:6a:97:36:16:ac:
                    48:5b:ca:73:de:1e:a3:5a:9d:95:ac:8e:43:66:3d:
                    d2:09:16:d5:01:0e:7f:da:9f:23:23:78:1d:90:64:
                    5f:5d:49:09:3a:be:72:26:9a:05:67:3c:5d:f8:33:
                    9b:e1:b9:90:25:81:64:5d:f7:c3:7f:54:d6:0f:ab:
                    08:03:55:52:00:e7:93:52:c9:3b:1f:58:fd:77:1c:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:94:A3:DC:64:B6:74:96:C7:E4:2D:1F:0F:00:B8:6E:66:FA:CD
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:35:6e:81:17:a6:68:b4:e3:90:11:47:7d:d5:5c:c1:a2:
         ce:08:ab:20:ef:32:0f:0c:91:11:d2:bc:55:f6:6b:b2:3f:cb:
         cc:21:f8:15:6f:2e:09:52:c0:15:d3:c4:b5:08:78:cc:5d:e4:
         ed:c6:70:10:3c:9b:17:2c:49:73:75:33:4b:a9:46:11:23:c3:
         b5:fc:ad:2c:c8:d6:2d:cf:c6:bb:2e:a8:91:57:94:de:16:97:
         89:da:b9:1f:c8:5f:45:dc:40:2a:8d:eb:47:b1:2b:97:36:bf:
         17:18:b7:2c:72:79:5f:1d:b8:71:56:41:f0:3b:12:17:78:70:
         c7:fb:c2:8f:5d:0b:1d:06:61:20:2a:ce:cf:e3:58:d2:17:d2:
         e1:14:b5:16:fd:4e:2f:6a:6a:22:4b:4b:34:25:a9:fd:ea:2c:
         c9:4f:f0:8c:9c:6b:5d:85:cd:3a:79:c9:e3:3d:e5:20:70:59:
         cd:df:13:97:ae:a1:d2:6d:86:4b:26:ff:49:45:29:b8:a4:ff:
         58:7c:bd:97:e1:fb:89:3c:3f:95:b7:61:14:86:ba:8f:9d:a6:
         29:3e:4b:8c:1a:c7:7b:52:2f:1a:9a:a0:2f:05:f2:fc:a6:9c:
         da:2d:36:f1:c8:5f:98:72:f7:6b:5b:92:87:50:3b:bc:1a:4e:
         00:a8:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:51 2026 by rpki-client