Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          E2laCOGXBXT4YlYejXkHo9S4Nb+VvF/Pa71bk3mjbro=
Subject key identifier:   3E:F8:EB:34:7F:F8:72:65:9F:E9:C4:84:6B:46:8F:DD:F8:75:71:6A
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       0198D4A81A86454DFCC9D802FCC8D0B071E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          129A
Signing time:             Sat 23 Aug 2025 02:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:43 +0000
Files and hashes:         1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=)
                          2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=)
                          3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=)
                          4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=)
                          5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=)
                          6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=)
                          7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: OMP0yqyf1P0lJXSjPycVgYyOXbzDfPNynofgZa73NLU=)
                          8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=)
                          9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=)
                          10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=)
                          11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=)
                          12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=)
                          13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=)
                          14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=)
                          15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=)
                          16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=)
                          17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:1a:86:45:4d:fc:c9:d8:02:fc:c8:d0:b0:71:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Aug 23 02:00:43 2025 GMT
            Not After : Aug 24 02:00:43 2025 GMT
        Subject: CN=3ef8eb347ff872659fe9c4846b468fddf875716a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:bc:d2:de:20:36:4c:d3:ec:d7:ba:17:33:
                    e9:98:7e:18:04:68:c7:e3:97:41:7a:b5:84:11:a0:
                    1d:29:3c:70:d3:52:fe:3f:bd:11:e2:34:91:ce:0a:
                    42:7a:2f:5a:b9:b0:84:d0:8a:c2:8e:93:4f:e5:92:
                    1f:2d:12:b7:c1:a4:41:cd:e3:ab:79:5f:2f:94:21:
                    79:cd:f6:fc:5c:b0:13:c3:4d:eb:e8:65:6d:df:75:
                    4d:4c:50:57:93:93:7a:09:b9:a1:c2:74:8f:90:ca:
                    89:65:d0:96:00:b8:71:0d:b5:60:e5:59:9d:08:1f:
                    90:93:d1:ce:3e:eb:a4:9f:54:05:c0:4b:51:6c:29:
                    6e:e8:8e:ad:fe:73:68:48:0b:fd:80:8e:0c:03:0d:
                    19:76:eb:b1:23:db:a1:82:f1:e2:ce:f0:c2:67:74:
                    7b:ba:3c:92:a4:a1:64:71:24:63:38:0c:6d:bd:fb:
                    79:8d:aa:29:cc:81:4c:ee:44:10:87:be:e4:0d:49:
                    c3:89:18:fc:9c:58:60:ff:cb:16:88:e9:7d:7b:37:
                    94:2e:90:f2:fb:6a:ef:ad:da:d7:a7:e2:8b:b9:38:
                    37:22:36:43:3e:ac:18:b7:fc:b7:00:c5:72:00:f2:
                    dd:83:db:1a:ef:f8:2b:c9:71:37:69:38:a9:33:ab:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:EB:34:7F:F8:72:65:9F:E9:C4:84:6B:46:8F:DD:F8:75:71:6A
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:40:7c:5d:47:0b:ea:e3:5c:31:b5:5e:0c:dc:69:b5:5c:
         da:de:f0:a6:06:79:3e:0c:df:fe:3e:98:1e:ea:34:5f:78:54:
         6a:cc:2b:8a:74:12:7a:29:2f:0a:c7:b5:53:51:70:0e:f0:0c:
         d4:f9:3a:34:a0:61:d8:10:6d:60:0e:08:39:fb:5d:f9:59:63:
         c7:90:93:a9:6c:25:b5:a1:8d:b9:b0:79:31:b8:5b:81:69:91:
         7f:9c:26:67:8b:82:a4:f7:10:e0:fa:a0:ce:f8:7d:15:8f:3d:
         6b:e6:5f:2b:51:96:c0:4b:9b:13:bd:45:9f:f2:03:58:f3:03:
         85:1a:0a:a8:b9:bf:6f:9f:76:70:a7:a6:cc:63:de:3f:cd:18:
         ed:39:a5:75:df:49:2c:44:99:aa:15:db:a9:fe:d5:d5:fa:02:
         a9:79:c4:8b:cb:f6:da:19:3e:47:57:f7:d3:4b:24:e4:a5:31:
         8a:c2:28:24:ac:d2:59:c3:9e:d2:88:86:08:b8:0a:09:0e:e3:
         bc:29:4a:b3:4c:01:35:90:db:bc:07:d2:41:e2:18:98:95:34:
         ef:3d:1d:c3:12:5d:ef:71:87:41:a3:4b:39:0b:f3:1e:5f:cc:
         f1:4a:4a:65:af:68:50:6d:41:23:de:43:c1:ee:df:0d:2c:94:
         24:c5:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:59 2025 by rpki-client