Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          O86YRdXrpUmbrVjnT9w5u00suHmZiWuQ3co4G+g8Idw=
Subject key identifier:   C8:A9:ED:5A:7C:3B:C3:09:25:84:2F:BF:BB:88:FD:A8:CA:E4:01:88
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01A0D3B8A6508942266809CC14B2FB484A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1780
Signing time:             Thu 24 Sep 2026 14:01:28 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:28 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:28 +0000
Files and hashes:         1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
                          2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9fAfolcDbPpkSV1otKIcXendNYA.roa (hash: PBjuHR+AHfo+N5mp1Bxfn4fzOi0CekebUR2R+DEvyuQ=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FQuyyAUwOpoJZfrmRGKK6-ndw40.roa (hash: B/8YuVQUar5Yxjk6MmDzMnSQzJL5WPBrnBmHUNZTs4I=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: BT+EYwexPiXm0L8Nsm5QwBdMblqGxgz6nzTOVl1GFf4=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          19: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          20: lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa (hash: T92tND3IEW1reiuj3gmoUrXVMN89kxo9MEcrKTaBfds=)
                          21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          22: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          23: wSS4BJ2U76e4Dyurfaq4avuSQoc.roa (hash: znF5EZMOm9zY/HcSGKCnQAjVgNjtIbUIosdWWRONibw=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:a6:50:89:42:26:68:09:cc:14:b2:fb:48:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Sep 24 14:01:28 2026 GMT
            Not After : Sep 25 14:01:28 2026 GMT
        Subject: CN=c8a9ed5a7c3bc30925842fbfbb88fda8cae40188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:fc:65:bb:62:f5:41:70:8e:06:66:8e:84:
                    76:7d:73:17:96:78:7a:f4:db:90:f0:88:38:31:0a:
                    d0:72:91:7d:24:ba:31:6c:79:2b:fb:ec:35:d0:c6:
                    c4:51:7f:74:72:3d:c9:a0:d5:77:e8:90:5f:15:cf:
                    06:df:e1:82:86:16:31:0a:4d:8c:ae:0b:6d:f3:99:
                    c2:cd:14:64:98:4f:99:68:58:fe:c1:db:b4:7d:a7:
                    af:5b:bf:6e:3b:bf:11:f9:4b:81:b1:bf:01:40:2b:
                    b9:be:a8:56:d3:e4:ac:26:8a:57:1f:68:d0:c2:51:
                    91:93:a0:20:12:3a:40:6f:d1:ac:8e:fb:1f:f4:99:
                    a2:50:32:5d:cc:4a:48:67:0d:c2:dd:a4:11:c1:84:
                    32:97:d1:04:27:42:7f:e9:1d:10:96:d9:a7:38:16:
                    3c:2f:df:bf:fa:37:17:6f:f8:97:a9:17:61:10:e5:
                    d4:b8:30:a2:b5:de:7a:a8:85:66:02:e5:12:62:ad:
                    95:34:53:87:8d:a1:a4:e7:4e:d6:43:61:e7:fe:5e:
                    23:41:b3:da:2a:b8:db:81:41:7b:6f:ba:3a:7a:cd:
                    39:29:ef:ac:2f:29:e9:4b:fe:78:20:a1:87:58:bd:
                    c2:75:b3:5a:26:bf:02:ad:5c:4e:e5:94:ce:09:4c:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:ED:5A:7C:3B:C3:09:25:84:2F:BF:BB:88:FD:A8:CA:E4:01:88
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:5b:0b:cd:5e:e5:78:24:fc:99:e7:ed:eb:3c:29:06:8a:
         b9:79:e4:d6:43:0e:ed:36:ce:fd:67:0e:f5:7f:10:47:c9:8e:
         7d:79:28:b9:6b:30:10:c2:c3:f1:52:ca:6b:8b:59:b5:45:c4:
         0f:a3:70:09:b7:8d:d3:90:25:95:7e:e1:3d:53:cd:45:65:24:
         b8:1b:5b:36:62:46:09:c5:19:d3:d6:8e:a5:77:4e:a3:6b:d6:
         6c:79:2b:54:d6:d5:25:fb:63:d8:b7:fb:b1:f4:91:ae:1d:53:
         c0:66:c1:52:dc:38:56:5a:a8:b3:a8:44:69:a3:9a:79:ec:be:
         b5:41:77:47:14:f3:e5:f1:0b:55:bb:b4:b4:86:0c:e9:3d:55:
         8e:a9:ca:6f:ca:1f:c1:58:41:c7:57:90:4e:4a:63:97:3f:c4:
         41:9e:6f:fc:88:e5:6d:7b:90:90:cf:72:ea:64:41:f0:76:6b:
         38:16:69:6e:45:78:14:8d:e9:56:50:16:cb:54:a8:90:6c:3d:
         f7:70:e1:9e:f3:3c:44:4c:a8:96:01:9a:40:4f:6b:86:a7:8c:
         0c:78:41:22:d1:f1:ca:ea:3d:fd:92:06:79:e4:f0:34:06:e2:
         72:f9:fb:4b:5b:57:d7:c6:df:95:cc:99:3f:86:ce:d3:0a:b7:
         d8:aa:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:11 2026 by rpki-client