Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          C58jV2qYftjaHVI3OjEv23J24xLJ0OdGDOSKgtUpbwE=
Subject key identifier:   04:EB:0D:14:1D:17:D4:04:E0:80:BF:E0:21:18:80:80:78:84:D0:48
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019D32631D275C8BD84FE7D1A4E3AB00B761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          14E2
Signing time:             Sat 28 Mar 2026 03:00:49 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:49 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:49 +0000
Files and hashes:         1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=)
                          2: 4xd2VHjKpoK8dv28BbXgOPkMSuE.roa (hash: aqArlLMarpqRWiIpxychPoFPzJ3xOeFHs6erD79AC54=)
                          3: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (hash: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=)
                          4: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (hash: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=)
                          5: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=)
                          6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: iWRHpxIBSCYtV5PYvhCtIS0x87NKOpBztefeGSrWc9w=)
                          7: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=)
                          8: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=)
                          9: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=)
                          10: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (hash: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=)
                          11: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=)
                          12: ak_oIFZ0irbZMnReXAMcFtjQKqI.roa (hash: x/hwjZvN5gTG9CQTOsiCYCBQLkFra2oGt8woSUkU3vg=)
                          13: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=)
                          14: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=)
                          15: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=)
                          16: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=)
                          17: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=)
                          18: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=)
                          19: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=)
                          20: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=)
                          21: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:1d:27:5c:8b:d8:4f:e7:d1:a4:e3:ab:00:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Mar 28 03:00:49 2026 GMT
            Not After : Mar 29 03:00:49 2026 GMT
        Subject: CN=04eb0d141d17d404e080bfe0211880807884d048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:2c:65:d2:d8:f9:ce:b4:f6:d8:d6:c2:d7:
                    5b:7c:b7:92:a3:c3:97:82:e1:13:35:ce:3d:45:ed:
                    08:75:66:63:98:35:20:c7:5f:54:a6:65:83:f6:6a:
                    07:75:9a:7c:d1:c3:b5:17:20:4a:fc:f9:27:e0:5a:
                    97:b3:b5:60:5f:17:06:82:96:a5:ce:a0:e5:e7:25:
                    81:c4:1d:64:f4:68:57:e5:16:d6:d0:7d:70:2d:dd:
                    58:21:04:ae:80:b7:bd:c1:18:6b:32:8c:10:b2:42:
                    49:c8:6f:0c:31:f2:56:f1:83:34:d4:24:79:3a:a0:
                    f0:56:a0:49:62:87:63:cb:ad:90:15:44:ea:e0:e6:
                    e6:16:32:4d:f8:47:51:ee:f7:ca:04:b4:7e:b0:81:
                    c6:29:cf:7b:b1:dc:22:6a:99:00:2d:18:35:d2:a2:
                    96:d7:88:52:3f:25:92:38:db:2f:d3:6e:f9:1f:8d:
                    f6:3c:86:2e:3e:14:01:5e:95:53:e1:5c:f6:ca:b2:
                    e9:98:7a:eb:ef:b6:43:23:cb:27:47:a9:58:66:3c:
                    f8:fd:a4:db:d2:9b:c2:c7:4b:bc:20:a5:b8:f8:a8:
                    e6:41:51:ed:54:1f:ad:7a:66:bd:14:28:7c:49:e6:
                    d0:f1:df:f3:83:50:64:48:55:7e:4f:df:92:c4:f5:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:0D:14:1D:17:D4:04:E0:80:BF:E0:21:18:80:80:78:84:D0:48
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:a3:63:78:50:8e:d8:5d:fd:43:b8:73:4e:55:9f:5f:73:
         6e:50:36:10:a7:44:ec:a9:3f:69:ea:c9:b6:17:6c:e8:0f:e3:
         a3:b3:49:43:75:9c:2a:e9:ba:6f:07:cd:fa:f2:d6:1e:24:9c:
         e0:6f:47:3b:8d:83:2a:db:cc:0a:7d:88:3f:63:a7:fc:34:6a:
         18:c2:7f:8c:57:95:2d:ce:2f:2e:15:d3:82:b5:cd:88:7c:25:
         cb:f1:ea:49:4f:f7:47:3b:72:ca:fd:df:15:9e:6a:b7:f8:e5:
         68:70:3a:81:f7:d1:a5:f6:ea:b5:0a:55:c4:cb:c3:cc:0a:a2:
         79:82:af:96:a3:8f:83:b0:3b:7b:5f:76:3c:04:fb:b5:5c:58:
         ec:6f:e5:10:b5:db:25:f4:32:f3:59:67:46:3a:84:7d:29:c1:
         8c:c9:84:b6:62:f4:de:a6:20:55:5a:72:04:00:53:26:3d:10:
         ca:47:42:e2:5a:a1:90:ec:03:0a:a8:57:51:58:9e:ad:8b:02:
         5e:ca:e1:bc:49:12:03:b0:21:d1:73:52:df:92:d8:ac:6e:ed:
         42:4b:e0:c3:2f:98:cd:0f:3f:bf:f3:50:dd:32:0d:58:ec:6f:
         54:e2:05:72:93:23:3e:52:63:d5:8f:96:f8:51:93:ee:ae:e2:
         63:eb:7d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYx0nXIvYT+fRpOOrALdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjYwMzI4MDMwMDQ5WhcNMjYwMzI5MDMwMDQ5WjAzMTEwLwYDVQQD
EygwNGViMGQxNDFkMTdkNDA0ZTA4MGJmZTAyMTE4ODA4MDc4ODRkMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFUsZdLY+c609tjWwtdbfLeSo8OX
guETNc49Re0IdWZjmDUgx19UpmWD9moHdZp80cO1FyBK/Pkn4FqXs7VgXxcGgpal
zqDl5yWBxB1k9GhX5RbW0H1wLd1YIQSugLe9wRhrMowQskJJyG8MMfJW8YM01CR5
OqDwVqBJYodjy62QFUTq4ObmFjJN+EdR7vfKBLR+sIHGKc97sdwiapkALRg10qKW
14hSPyWSONsv0275H432PIYuPhQBXpVT4Vz2yrLpmHrr77ZDI8snR6lYZjz4/aTb
0pvCx0u8IKW4+KjmQVHtVB+tema9FCh8SebQ8d/zg1BkSFV+T9+SxPXa6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATrDRQdF9QE4IC/4CEYgIB4hNBIMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwejY3hQ
jthd/UO4c05Vn19zblA2EKdE7Kk/aerJthds6A/jo7NJQ3WcKum6bwfN+vLWHiSc
4G9HO42DKtvMCn2IP2On/DRqGMJ/jFeVLc4vLhXTgrXNiHwly/HqSU/3Rztyyv3f
FZ5qt/jlaHA6gffRpfbqtQpVxMvDzAqieYKvlqOPg7A7e192PAT7tVxY7G/lELXb
JfQy81lnRjqEfSnBjMmEtmL03qYgVVpyBABTJj0QykdC4lqhkOwDCqhXUVierYsC
XsrhvEkSA7Ah0XNS35LYrG7tQkvgwy+YzQ8/v/NQ3TINWOxvVOIFcpMjPlJj1Y+W
+FGT7q7iY+t9AQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:49 2026 by rpki-client