Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          Qo3PElLMr7e0liqwnCGP8XI+rR6TZAliRU96IMgj4JI=
Subject key identifier:   8C:92:34:3C:CA:A0:3C:DB:93:9E:B4:00:3D:19:F5:B2:AD:AA:A6:75
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019DCF3E1245675019ECA0A59C1CFA1A1F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          15E1
Signing time:             Mon 27 Apr 2026 14:00:44 +0000
Manifest this update:     Mon 27 Apr 2026 14:00:44 +0000
Manifest next update:     Tue 28 Apr 2026 14:00:44 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: gaGjiw3u9CczW5wn32HEFQ31yBzTcxlYznG6OmvJE10=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:3e:12:45:67:50:19:ec:a0:a5:9c:1c:fa:1a:1f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Apr 27 14:00:44 2026 GMT
            Not After : Apr 28 14:00:44 2026 GMT
        Subject: CN=8c92343ccaa03cdb939eb4003d19f5b2adaaa675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:a7:13:9d:17:8c:e7:aa:91:74:d5:7b:5e:
                    69:e3:05:11:6d:93:b7:d3:57:d9:4a:b5:73:00:c7:
                    69:3e:50:72:6a:51:52:6f:5f:aa:59:c6:96:91:a1:
                    3f:aa:78:ca:01:ce:f3:f5:51:8e:59:6d:4a:7e:45:
                    b1:9f:57:c7:b6:c0:de:0e:43:20:f3:ce:b1:b5:95:
                    7b:a6:30:d0:87:01:4e:cc:a7:49:95:a4:43:d7:64:
                    e3:74:5b:8b:b9:ff:c8:9f:4b:9d:e1:c3:19:c2:47:
                    8c:10:b4:9e:4b:a7:0b:1c:f0:21:7f:ac:64:e8:07:
                    45:60:59:2a:a8:28:7e:68:30:47:c8:9c:87:8d:74:
                    97:5d:6f:de:9e:bd:6b:d1:ae:53:c2:c7:97:b3:8f:
                    d5:7d:62:b9:53:18:1a:eb:10:e1:7e:12:a3:90:d5:
                    79:fc:75:1f:9c:a6:00:4b:4f:c6:4a:cc:a7:31:3d:
                    90:61:6a:c6:a4:f1:ba:7e:44:fc:37:10:e6:b0:24:
                    51:52:8d:6e:6a:3c:1c:48:89:e8:d1:0e:bd:b7:4d:
                    ed:f5:30:6b:e9:f9:81:a4:4b:91:76:b8:0c:33:cf:
                    04:e7:12:e3:50:41:69:2c:bf:af:93:6c:2d:d0:4d:
                    4b:97:52:c3:47:78:16:fa:b9:17:52:e6:f4:b2:53:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:92:34:3C:CA:A0:3C:DB:93:9E:B4:00:3D:19:F5:B2:AD:AA:A6:75
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:33:97:2b:5a:e8:68:fb:be:75:d4:0d:9b:13:db:bd:37:eb:
         4d:93:c7:38:d9:22:9a:9b:82:1d:27:b2:82:f3:10:50:1b:f5:
         8b:10:a9:c4:50:0b:62:34:96:4d:7c:df:37:b8:86:16:7a:c6:
         77:fd:57:6b:ad:15:2c:a4:98:4b:f2:b2:17:90:bf:23:8c:df:
         dc:05:71:26:5f:dd:69:08:34:c1:5c:50:48:13:37:ef:ec:66:
         9a:a8:ce:65:ab:c9:ab:85:27:fc:76:f5:aa:31:fb:99:c5:1f:
         a5:8e:6b:f7:c1:b9:10:58:40:bf:5f:6f:8b:52:9c:59:f6:36:
         06:d8:ca:98:df:a5:c6:d5:8a:e1:b7:f6:3c:e2:71:69:7f:6f:
         9f:27:07:36:c6:ce:c6:76:f4:04:f5:a0:04:9d:60:5b:cd:51:
         c6:b2:f0:e3:75:60:4b:53:7d:94:21:66:d0:7b:2f:b4:9e:ca:
         a6:77:50:8f:c9:78:df:8c:0c:ea:cb:ac:e1:35:76:7e:db:20:
         fc:7c:61:6f:bd:6a:9b:0a:22:b9:ca:3c:1b:7b:02:11:67:5c:
         d4:0b:f7:36:ce:b9:6f:ca:92:e1:aa:43:1f:f0:80:b7:99:3a:
         d6:42:35:aa:43:41:c7:c0:aa:46:4e:be:ce:bf:36:68:01:e0:
         f4:9b:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:12 2026 by rpki-client