Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          D79PWi0fLLUS9/opEhpO5017gEsxfhUunHi3b+i7rtc=
Subject key identifier:   3B:13:FA:8E:5E:E3:20:D1:F3:98:5B:03:E7:58:37:4C:AE:27:DB:14
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01A1509A62B9D293B82FFA8C86CE7BBF15EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          17C6
Signing time:             Sun 18 Oct 2026 20:00:57 +0000
Manifest this update:     Sun 18 Oct 2026 20:00:57 +0000
Manifest next update:     Mon 19 Oct 2026 20:00:57 +0000
Files and hashes:         1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
                          2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          5: Cp3cFYISF2eMp33AoDLK1irsqNA.roa (hash: h4j1o2WAzzXmAmlIcNX9EatHIsGJAIDrSXwMTmM8eqI=)
                          6: EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa (hash: mjKUq3coahQ3IfA1rnEImIZLxnr8LwSHjRCQitgeHJA=)
                          7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          8: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (hash: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: oxJ/vSFeBxXWShq76CfyfwjBQsMEmZrgAWx+ekQaGsA=)
                          13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          14: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
                          15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          16: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          17: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          21: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:9a:62:b9:d2:93:b8:2f:fa:8c:86:ce:7b:bf:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Oct 18 20:00:57 2026 GMT
            Not After : Oct 19 20:00:57 2026 GMT
        Subject: CN=3b13fa8e5ee320d1f3985b03e758374cae27db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:79:71:c6:15:2d:01:df:15:15:00:df:9d:
                    3c:21:5a:1b:64:1c:6e:3c:20:5c:77:ec:77:52:97:
                    fc:c9:81:4f:8e:13:c1:07:a1:a8:13:62:92:77:16:
                    29:c4:69:23:a3:ad:9d:33:70:d6:76:00:7a:17:02:
                    94:5f:ed:44:52:d8:a1:d4:c2:78:55:90:8f:f4:6d:
                    9d:ee:e5:0c:f7:6a:36:9f:06:13:61:31:33:fa:41:
                    99:73:d0:77:0b:0e:94:d5:79:43:31:54:a3:8a:c4:
                    bb:7f:71:26:a8:43:36:4e:bc:fb:64:21:d8:be:2a:
                    6d:6c:c1:f6:7d:e3:07:0e:a8:36:e3:70:d7:d6:9c:
                    67:36:4c:87:f1:6f:aa:ba:d6:42:b4:92:a3:3e:93:
                    c8:11:6f:08:3c:9a:98:72:e8:bf:11:2e:e0:59:95:
                    d5:5e:90:94:ff:b0:f3:28:d3:6d:5e:09:c7:91:d5:
                    f5:6c:c5:f4:3d:a7:7e:3a:5a:bb:07:3c:fb:ea:e1:
                    d4:32:12:da:24:a4:85:8e:fe:f0:b0:40:9d:9a:fd:
                    e1:f7:fb:59:ff:97:12:2d:84:09:f5:75:a1:4b:fb:
                    df:4b:7c:27:14:33:27:7d:33:64:4b:8e:db:1a:69:
                    8f:5d:95:c2:40:b5:ee:19:b1:b3:d2:a1:2d:c3:bc:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:FA:8E:5E:E3:20:D1:F3:98:5B:03:E7:58:37:4C:AE:27:DB:14
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:e9:e0:52:cf:ae:ad:bc:d0:90:80:16:d3:c6:39:0e:7d:f5:
         e5:63:70:aa:ab:e6:60:8b:b9:5d:5b:eb:50:f2:ab:81:10:f8:
         54:34:d5:bf:e4:4b:6a:58:ae:d0:af:d4:8f:ce:58:d8:56:3d:
         1f:2f:1c:54:f5:85:f5:36:e6:53:82:e9:2f:1e:0f:18:f8:7e:
         2e:37:a8:e3:dd:9b:bd:4a:94:b1:21:86:2a:aa:9b:97:43:f0:
         bf:11:3c:97:99:5a:fb:e4:42:18:7b:61:7a:c8:06:95:4f:f8:
         84:d6:5b:49:10:60:12:1d:22:7d:82:d7:f1:16:d4:85:0b:83:
         30:9e:a2:ff:9f:6c:67:11:51:5a:22:c9:06:61:22:d7:85:a8:
         57:a0:2d:43:c3:04:f0:c8:5f:6c:8a:fb:31:d3:66:1d:b8:7e:
         14:f4:0e:ac:49:5d:23:a3:dd:60:29:d9:1b:d6:33:c2:0b:1b:
         68:a1:0c:40:84:95:c7:a6:90:7c:3c:8d:a4:74:42:de:7d:12:
         74:a5:02:89:cc:6e:8a:aa:d7:f5:c4:95:e3:2a:f7:74:20:00:
         97:80:a2:59:24:3e:5d:d0:22:b7:07:64:50:d4:6d:7b:b3:ef:
         b2:f3:25:cc:82:d2:18:6d:dc:e8:dd:7b:5b:d6:e7:57:00:b3:
         e3:ee:e2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFQmmK50pO4L/qMhs57vxXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMDE4MjAwMDU3WhcNMjYxMDE5MjAwMDU3WjAzMTEwLwYDVQQD
EygzYjEzZmE4ZTVlZTMyMGQxZjM5ODViMDNlNzU4Mzc0Y2FlMjdkYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKF5ccYVLQHfFRUA3508IVobZBxu
PCBcd+x3Upf8yYFPjhPBB6GoE2KSdxYpxGkjo62dM3DWdgB6FwKUX+1EUtih1MJ4
VZCP9G2d7uUM92o2nwYTYTEz+kGZc9B3Cw6U1XlDMVSjisS7f3EmqEM2Trz7ZCHY
viptbMH2feMHDqg243DX1pxnNkyH8W+qutZCtJKjPpPIEW8IPJqYcui/ES7gWZXV
XpCU/7DzKNNtXgnHkdX1bMX0Pad+Olq7Bzz76uHUMhLaJKSFjv7wsECdmv3h9/tZ
/5cSLYQJ9XWhS/vfS3wnFDMnfTNkS47bGmmPXZXCQLXuGbGz0qEtw7xpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsT+o5e4yDR85hbA+dYN0yuJ9sUMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+ngUs+u
rbzQkIAW08Y5Dn315WNwqqvmYIu5XVvrUPKrgRD4VDTVv+RLaliu0K/Uj85Y2FY9
Hy8cVPWF9TbmU4LpLx4PGPh+Ljeo492bvUqUsSGGKqqbl0PwvxE8l5la++RCGHth
esgGlU/4hNZbSRBgEh0ifYLX8RbUhQuDMJ6i/59sZxFRWiLJBmEi14WoV6AtQ8ME
8MhfbIr7MdNmHbh+FPQOrEldI6PdYCnZG9YzwgsbaKEMQISVx6aQfDyNpHRC3n0S
dKUCicxuiqrX9cSV4yr3dCAAl4CiWSQ+XdAitwdkUNRte7PvsvMlzILSGG3c6N17
W9bnVwCz4+7iZg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:36:59 2026 by rpki-client