Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          n7YA1sdl+cmYGBZoHwCZfLuq7RulaKuNgDJhz1HOTG4=
Subject key identifier:   51:43:35:20:7F:6F:EB:5E:72:29:07:8B:AD:38:37:DF:AB:30:96:4F
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019E1C7DED697D211CA8BE0AFB218BB01C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1609
Signing time:             Tue 12 May 2026 14:01:15 +0000
Manifest this update:     Tue 12 May 2026 14:01:15 +0000
Manifest next update:     Wed 13 May 2026 14:01:15 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: CWIXTdWqvvHcaPRKAkwww9A1vObb4pBtTm2e2RHYRYo=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:ed:69:7d:21:1c:a8:be:0a:fb:21:8b:b0:1c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 12 14:01:15 2026 GMT
            Not After : May 13 14:01:15 2026 GMT
        Subject: CN=514335207f6feb5e7229078bad3837dfab30964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:46:19:c7:42:74:4a:88:b6:d5:2a:81:ea:
                    fc:1b:a4:c8:5b:76:b9:c6:64:0d:3a:b5:b0:c9:ae:
                    15:c9:f5:9a:c4:3e:54:0f:a8:5a:8c:4f:ce:76:bb:
                    bd:ec:38:57:0b:cd:85:1c:9e:fd:5c:85:e5:aa:36:
                    cb:4f:d3:fb:38:46:09:ec:96:a1:79:14:ad:05:21:
                    0d:fd:a1:d2:95:5d:5f:38:5c:ff:0a:60:97:8e:77:
                    c5:8d:07:4c:27:a7:8c:f9:d6:30:08:13:b0:4d:91:
                    f6:04:66:f9:1a:9d:b5:00:15:43:47:35:31:91:f7:
                    3c:84:14:e3:62:61:2c:75:54:8c:fa:78:7b:c0:8f:
                    08:54:6c:f0:73:10:eb:cb:84:00:16:82:ac:94:72:
                    8a:39:3d:40:20:cd:cb:89:97:6f:be:d4:31:ad:50:
                    e3:5d:d8:32:54:68:99:1a:00:cd:96:f7:6c:7e:9a:
                    69:e1:42:5e:c8:6f:63:17:c2:b1:71:a3:eb:6c:ac:
                    0f:09:28:8d:3f:ed:78:9b:89:b1:bf:31:50:8e:8a:
                    a0:d9:9f:81:b0:53:eb:39:0e:ec:15:e3:b5:95:7c:
                    5b:8d:ef:3e:fd:9a:0b:7e:93:bf:55:76:8e:67:68:
                    5e:78:1b:7b:b1:c4:fe:16:4b:b5:09:94:3b:87:7d:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:35:20:7F:6F:EB:5E:72:29:07:8B:AD:38:37:DF:AB:30:96:4F
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:be:24:63:63:ce:ed:70:fa:63:3f:22:68:a3:b0:af:84:ee:
         fe:e8:83:a5:f8:39:b5:89:7d:4d:81:87:d5:6f:72:84:79:25:
         07:2d:a8:20:36:14:78:21:b8:f8:c7:3f:2c:d7:98:05:3b:35:
         43:30:cf:98:29:b9:59:fd:4a:fc:18:99:0c:84:8c:be:a7:c9:
         c4:46:ab:19:fb:80:7e:4e:22:23:76:72:31:91:d9:b5:5e:bf:
         84:eb:59:41:58:68:23:e1:ed:f3:c0:47:ce:74:a5:6f:75:ab:
         36:a3:9b:f9:9c:f1:fc:9b:57:4b:97:92:97:f9:59:ad:af:94:
         67:e7:d9:2d:c9:08:0a:fc:bd:c3:1d:32:90:df:a3:4e:52:4b:
         1c:62:e7:83:3b:a8:52:8f:b4:5a:ed:ea:5d:bd:4d:83:ef:ee:
         ea:70:e4:b9:6b:91:69:45:a7:d3:1d:d9:06:65:a8:de:48:ff:
         76:ec:e1:e1:56:98:d4:0b:f7:db:4a:31:af:2f:8e:f1:d8:a8:
         c8:cb:12:7b:b3:cf:3b:cb:4b:bd:c9:19:26:41:06:56:df:dd:
         4e:93:11:dc:5f:88:1d:7e:58:16:0b:5e:e8:b4:2e:69:ba:de:
         9b:16:ea:7f:4c:e9:4b:32:6b:87:9c:da:93:b0:67:5b:8f:6a:
         ff:2c:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:17 2026 by rpki-client