Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          eQqA+BQEkUvhkDiaWTMUCDwzmSb0+0Gsf6seV34U8sw=
Subject key identifier:   C1:A7:4A:09:F0:6D:27:5C:88:9F:A7:16:91:4B:51:FB:6F:25:09:31
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01A0AF06C249DFE9643A60B9065EB97124C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          176B
Signing time:             Thu 17 Sep 2026 11:00:50 +0000
Manifest this update:     Thu 17 Sep 2026 11:00:50 +0000
Manifest next update:     Fri 18 Sep 2026 11:00:50 +0000
Files and hashes:         1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
                          2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: e2si4ZZe8mcbawrLxT5VweL6SV5U/s8IuOZjqY3iK2U=)
                          11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          13: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
                          14: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          15: aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa (hash: nQApn0hLdraUfEmIQ3A7TNFwA+SqKqDap59Iwwu352M=)
                          16: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          17: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          18: ftgKUHXfC_ybkV3W6vgrX_jvogc.roa (hash: zgf2AQEO8Tp9h9s+DZYjUEBcWTjezfQjN7yVh9AcHOQ=)
                          19: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          20: lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa (hash: T92tND3IEW1reiuj3gmoUrXVMN89kxo9MEcrKTaBfds=)
                          21: rpSA8Oxb-LH6KcBBuMQC2Old9Oo.roa (hash: 9dyOr1Zbl2EZIg7ii9rjnYQRLykSLoYuJ4czrF0Ofyc=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:06:c2:49:df:e9:64:3a:60:b9:06:5e:b9:71:24:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Sep 17 11:00:50 2026 GMT
            Not After : Sep 18 11:00:50 2026 GMT
        Subject: CN=c1a74a09f06d275c889fa716914b51fb6f250931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:89:8a:21:4d:41:e2:93:ef:16:9c:7c:a8:
                    58:49:d4:2f:ff:8a:d6:56:06:60:de:45:5b:13:c2:
                    9b:fb:24:72:66:98:fb:e2:30:c2:72:24:20:19:3e:
                    a0:a3:16:93:5e:c2:eb:83:4e:a7:93:f1:8b:02:08:
                    a1:11:11:33:0f:ed:55:b8:08:f9:09:7c:9f:f6:66:
                    4d:d2:32:6c:b3:bb:ac:90:39:97:a3:1a:fb:6e:29:
                    ea:70:9f:bd:b6:16:cb:1e:2d:20:de:06:bf:71:ea:
                    9d:31:ad:27:77:0b:33:8d:00:7c:c7:0d:17:75:3c:
                    a5:a7:ba:5d:52:87:85:1f:17:bb:fc:a4:3e:2e:1a:
                    75:0f:3f:d9:53:dc:12:81:2e:78:78:8e:80:aa:49:
                    9f:ea:c0:cf:e7:c7:f4:fe:b1:40:8d:ce:47:e7:13:
                    2b:b3:00:73:7e:a2:77:26:dc:65:f0:35:c6:b3:65:
                    7b:05:30:dd:15:15:d6:01:40:88:62:2d:8c:ea:2b:
                    fd:ae:40:cb:2d:26:96:6a:c0:d2:44:b1:29:87:bd:
                    b9:ec:1b:02:d9:44:94:d6:ad:81:0c:6c:d0:a8:48:
                    7d:f2:ea:fc:0f:41:71:8c:66:90:61:53:8a:07:6a:
                    42:43:fd:6e:11:16:ec:99:8a:f9:b1:29:07:d6:04:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:4A:09:F0:6D:27:5C:88:9F:A7:16:91:4B:51:FB:6F:25:09:31
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a2:10:43:2f:56:b9:db:57:50:19:4d:5f:d1:47:1d:cd:56:
         3d:a0:e5:11:ed:9a:d6:9b:83:eb:85:60:d1:14:f3:75:84:8c:
         37:7c:7c:0c:52:fe:ec:83:a8:15:4e:03:f2:9e:95:70:68:db:
         19:54:0c:dc:ed:ec:0a:ac:46:7b:22:eb:ad:a1:fd:b3:6c:d1:
         aa:49:06:81:4e:17:c4:d2:a6:de:c8:98:f2:e5:8b:90:09:1e:
         15:73:6a:80:83:00:ed:12:51:be:91:c7:79:0f:b0:1d:27:b3:
         ed:52:bc:70:e9:6c:23:9d:7c:2e:e5:6a:48:76:da:68:b5:92:
         21:c3:bf:39:67:88:11:58:d5:b6:7e:96:1f:93:cc:bf:15:38:
         0c:f0:b6:07:c8:5b:79:eb:11:f4:35:a3:72:51:f2:08:24:ce:
         0a:6f:a6:47:6a:c7:9f:74:cf:bf:f8:65:80:37:1f:39:84:91:
         e9:0f:76:06:54:59:bc:ea:00:e7:c4:1d:17:b4:79:e9:55:83:
         c8:e8:d9:1a:99:8c:a8:13:53:5c:14:8e:3e:a0:f8:b2:af:3f:
         26:f7:ad:f8:57:ff:f1:d9:cf:b5:4f:a7:24:51:3d:1d:0c:d5:
         27:42:0f:e4:0d:b1:ff:58:5c:ea:84:7a:64:31:e9:d4:1d:2f:
         fb:ca:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:11:38 2026 by rpki-client