Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          hY0cjPu6tcBGgA5xD1DAx7MSaqYgmJXcLzCQHafBiqc=
Subject key identifier:   2B:AC:E6:D6:B2:54:4C:1D:CB:0C:5C:D3:3E:2F:F4:05:B9:EC:E3:15
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019FB0898C4308E9E5BCB430DA0579D87487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          16DB
Signing time:             Thu 30 Jul 2026 01:00:31 +0000
Manifest this update:     Thu 30 Jul 2026 01:00:31 +0000
Manifest next update:     Fri 31 Jul 2026 01:00:31 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: nyUQzHtK02+fnXJ1p2ijtlFiEcRaGHvvLb0tMVtZmEA=)
                          11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          14: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          21: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          22: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 21:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b0:89:8c:43:08:e9:e5:bc:b4:30:da:05:79:d8:74:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jul 30 01:00:31 2026 GMT
            Not After : Jul 31 01:00:31 2026 GMT
        Subject: CN=2bace6d6b2544c1dcb0c5cd33e2ff405b9ece315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:5a:90:85:7e:a0:97:ec:9b:ef:b3:bf:ba:
                    af:ae:e6:6f:6e:e7:ba:1f:fc:14:5b:8a:e5:69:63:
                    2c:50:17:99:b2:1a:24:89:b8:87:1e:91:a1:9d:a6:
                    20:26:f8:1c:20:8b:57:e4:f5:33:a5:03:4a:51:cb:
                    63:3a:09:02:7d:d7:ca:fc:ac:e1:72:d2:9b:eb:7d:
                    a8:41:f4:43:da:94:e9:d3:73:ba:68:e4:0c:62:76:
                    83:2e:7f:93:4b:d5:7c:ac:08:dd:97:f7:10:91:8c:
                    db:91:95:2c:b7:63:82:37:96:f7:0b:6b:97:12:f6:
                    15:9a:a5:af:39:07:0a:72:fd:07:bb:e0:6a:dc:27:
                    7c:dc:18:0f:24:45:37:f5:5b:ca:27:d0:4d:6f:13:
                    cc:69:72:ae:39:a4:72:ae:e9:ef:8d:fa:c5:ca:4e:
                    80:de:ab:13:96:94:90:67:1e:ad:02:ed:98:0c:f9:
                    e9:f5:3c:f2:84:ce:a2:fc:d3:80:d7:14:56:a9:81:
                    cc:7f:1a:7c:5c:d9:cf:7d:1a:f4:e2:25:21:90:a0:
                    04:9a:35:94:38:70:fa:f2:b2:12:52:87:5a:b6:70:
                    4f:94:32:5e:6b:62:be:46:04:d2:9b:fc:00:36:46:
                    60:cb:98:a5:7c:82:02:1b:e8:0f:e3:09:57:ac:76:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:E6:D6:B2:54:4C:1D:CB:0C:5C:D3:3E:2F:F4:05:B9:EC:E3:15
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6e:58:0d:16:ac:23:e1:82:b8:b7:f0:49:1b:c3:fa:f0:a3:
         9a:a7:a9:a1:0e:ea:eb:c8:cb:20:a0:c0:3b:41:0e:37:88:85:
         7d:c4:ca:3f:83:62:b1:4c:2b:30:1b:cf:ed:8b:e7:c4:4f:50:
         ff:ba:98:18:c3:73:da:68:14:4a:64:de:90:21:5b:7b:e9:30:
         fa:e0:6d:e7:b1:80:34:26:08:69:59:a0:6d:95:dd:ff:20:18:
         c1:97:0a:87:a4:d6:fe:09:42:87:00:7c:2a:3b:27:32:1c:4d:
         5f:2e:2d:0b:71:18:db:5a:7b:40:02:7f:39:04:71:7b:aa:39:
         8c:bc:32:fc:20:cd:e2:d9:49:8c:5b:6b:64:6f:ab:70:24:b7:
         f1:7c:dc:a6:fb:d4:12:0c:fb:a1:12:7d:12:eb:49:d7:bb:59:
         92:87:20:66:c3:70:3e:03:92:df:03:2b:8b:a7:91:4d:dc:e0:
         35:2d:65:f4:bc:84:7a:70:d5:70:fe:84:b2:af:1d:04:6e:ef:
         e8:37:da:44:95:b3:f8:6c:b1:32:12:db:a0:d4:c9:46:a0:b6:
         b9:c3:0e:be:1c:bd:9f:b7:f4:8e:86:1e:c6:85:9c:f4:ce:1f:
         8e:01:fc:2c:45:2d:22:23:4e:12:96:4e:b2:5b:fc:54:43:1f:
         49:ed:99:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+wiYxDCOnlvLQw2gV52HSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwNzMwMDEwMDMxWhcNMjYwNzMxMDEwMDMxWjAzMTEwLwYDVQQD
EygyYmFjZTZkNmIyNTQ0YzFkY2IwYzVjZDMzZTJmZjQwNWI5ZWNlMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uxakIV+oJfsm++zv7qvruZvbue6
H/wUW4rlaWMsUBeZshokibiHHpGhnaYgJvgcIItX5PUzpQNKUctjOgkCfdfK/Kzh
ctKb632oQfRD2pTp03O6aOQMYnaDLn+TS9V8rAjdl/cQkYzbkZUst2OCN5b3C2uX
EvYVmqWvOQcKcv0Hu+Bq3Cd83BgPJEU39VvKJ9BNbxPMaXKuOaRyrunvjfrFyk6A
3qsTlpSQZx6tAu2YDPnp9TzyhM6i/NOA1xRWqYHMfxp8XNnPfRr04iUhkKAEmjWU
OHD68rISUodatnBPlDJea2K+RgTSm/wANkZgy5ilfIICG+gP4wlXrHZwDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCus5tayVEwdywxc0z4v9AW57OMVMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvG5YDRas
I+GCuLfwSRvD+vCjmqepoQ7q68jLIKDAO0EON4iFfcTKP4NisUwrMBvP7YvnxE9Q
/7qYGMNz2mgUSmTekCFbe+kw+uBt57GANCYIaVmgbZXd/yAYwZcKh6TW/glChwB8
KjsnMhxNXy4tC3EY21p7QAJ/OQRxe6o5jLwy/CDN4tlJjFtrZG+rcCS38XzcpvvU
Egz7oRJ9EutJ17tZkocgZsNwPgOS3wMri6eRTdzgNS1l9LyEenDVcP6Esq8dBG7v
6DfaRJWz+GyxMhLboNTJRqC2ucMOvhy9n7f0joYexoWc9M4fjgH8LEUtIiNOEpZO
slv8VEMfSe2Z6w==
-----END CERTIFICATE-----
Generated at Thu Jul 30 05:00:32 2026 by rpki-client