Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          H9XJsXniA7tYMyCG7/VBwARcOk8/jditGVAaXG9TnQc=
Subject key identifier:   5A:B1:67:70:7B:01:D7:3A:84:6A:D4:63:92:16:BC:C7:E1:04:18:81
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01A0CBFE95022491392B976923E5C4D9C2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          177C
Signing time:             Wed 23 Sep 2026 02:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:54 +0000
Files and hashes:         1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
                          2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9fAfolcDbPpkSV1otKIcXendNYA.roa (hash: PBjuHR+AHfo+N5mp1Bxfn4fzOi0CekebUR2R+DEvyuQ=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FQuyyAUwOpoJZfrmRGKK6-ndw40.roa (hash: B/8YuVQUar5Yxjk6MmDzMnSQzJL5WPBrnBmHUNZTs4I=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: JBt9IXNRh/akojrM/7PGAQejpVD38d1Vsh/6b1H9ch8=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          19: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          20: lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa (hash: T92tND3IEW1reiuj3gmoUrXVMN89kxo9MEcrKTaBfds=)
                          21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          22: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          23: wSS4BJ2U76e4Dyurfaq4avuSQoc.roa (hash: znF5EZMOm9zY/HcSGKCnQAjVgNjtIbUIosdWWRONibw=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:95:02:24:91:39:2b:97:69:23:e5:c4:d9:c2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Sep 23 02:00:54 2026 GMT
            Not After : Sep 24 02:00:54 2026 GMT
        Subject: CN=5ab167707b01d73a846ad4639216bcc7e1041881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:4f:87:18:da:45:ca:a7:2f:8b:51:be:3b:
                    f1:2b:59:50:9b:ee:af:98:45:70:76:8c:84:64:fd:
                    69:f9:da:bc:0a:c5:bf:72:3d:26:d2:d0:64:33:f2:
                    49:5f:7c:f9:65:9b:63:3d:7a:a3:82:c0:e0:27:cb:
                    ef:cc:c4:23:a1:20:88:e9:6d:bc:b0:c2:b2:44:45:
                    9d:99:c0:fb:11:04:bc:6d:f8:b9:f4:37:6e:69:c4:
                    9b:c6:92:74:98:3e:0a:b9:53:89:53:4d:a9:f2:08:
                    86:c3:73:6e:ec:22:cb:26:ec:9a:9c:8c:0a:04:9e:
                    1f:ba:12:7e:e2:36:80:33:ff:44:83:1a:c2:11:c1:
                    78:d1:d2:81:17:9f:1b:b8:22:7b:1c:22:6e:e0:cb:
                    63:84:77:bf:f3:5b:87:87:80:73:61:f0:2d:fe:3e:
                    2b:a2:94:d8:e1:8b:0f:35:26:9c:ef:c2:e5:33:f5:
                    46:8b:9f:b7:b0:0e:89:07:c8:71:87:9f:59:f1:9c:
                    52:58:5b:64:c1:22:57:36:fd:8b:70:82:7c:02:73:
                    70:f7:65:bc:3e:1b:e3:3b:cf:28:84:fa:c4:20:5b:
                    e1:3e:97:8a:8e:33:7a:c6:6d:c6:07:d4:de:8a:99:
                    77:3c:8f:8a:b1:7a:0d:b3:a5:d6:9c:a3:01:c8:b9:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:67:70:7B:01:D7:3A:84:6A:D4:63:92:16:BC:C7:E1:04:18:81
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:9c:f6:a6:cc:59:84:b2:32:2e:ae:42:05:de:b9:c0:18:
         5b:62:76:c8:1c:96:e9:97:31:73:dc:81:e7:0a:5c:d8:d0:95:
         bf:43:2b:e0:cf:9f:fb:d2:d2:70:ec:36:77:5b:98:f0:e7:fe:
         5b:1f:f8:b9:14:af:e5:80:0d:c8:43:4d:d2:db:90:39:7b:ab:
         74:13:23:99:a5:79:74:e6:98:64:16:bc:b7:56:b2:6b:29:e8:
         a5:02:36:4e:69:9f:13:b4:47:b4:a2:32:83:8e:21:cd:12:ce:
         50:33:06:ff:3e:db:6c:ce:0a:9d:fb:0b:d3:52:17:00:fa:3b:
         d5:90:b8:10:2e:fe:c6:1b:fe:47:82:36:e2:c9:24:7d:91:ff:
         9d:d3:41:f5:7e:c1:3b:c2:ad:83:64:71:4e:e2:eb:08:81:f4:
         00:e3:11:f8:7b:78:0b:9c:29:f9:ab:20:8e:21:cf:6a:cd:b6:
         a9:ca:54:03:a1:68:10:0b:89:76:51:1d:05:96:f2:b9:20:83:
         df:53:b6:b5:3f:8c:fd:2b:e5:a3:9c:39:88:cb:e2:d4:d4:a5:
         1b:98:52:a5:e9:a7:3f:78:20:55:32:8f:98:26:ca:64:80:5c:
         ae:eb:53:3d:c6:ef:77:9a:19:66:c3:61:85:e9:a7:33:10:70:
         bf:ef:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:31 2026 by rpki-client