Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          KZg/nupdvU8orjqcpmA+2kp52RZHrzch4BGOL3dSbmQ=
Subject key identifier:   BB:E2:9C:B8:CD:9B:05:5B:92:BE:8E:EB:11:E5:78:70:00:A9:31:8C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019D9D08233C8EA06A32E705957FDD1F1A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          15C7
Signing time:             Fri 17 Apr 2026 20:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:49 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: /rV9xNBKVamjmRPgI4fFz/o+x9cwlu1XI+u9Wt56wRw=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:23:3c:8e:a0:6a:32:e7:05:95:7f:dd:1f:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Apr 17 20:00:49 2026 GMT
            Not After : Apr 18 20:00:49 2026 GMT
        Subject: CN=bbe29cb8cd9b055b92be8eeb11e5787000a9318c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:d1:73:2e:45:ab:83:aa:85:fa:36:16:d0:
                    60:82:6a:b4:c3:73:ed:ee:68:64:e3:ac:50:f7:c0:
                    99:61:d2:d6:93:1f:14:69:37:9c:5f:16:2f:b3:37:
                    8d:08:8e:c1:a7:ee:04:7d:e7:07:eb:21:65:4e:6a:
                    ee:71:91:f7:04:4a:2b:fe:f3:c2:2e:75:27:57:4d:
                    86:49:e9:ba:98:6f:4a:c1:01:97:67:f2:c6:b3:a5:
                    f7:c7:05:03:76:d9:12:2a:9b:93:37:d7:cb:c7:62:
                    a3:b3:af:53:04:15:2f:a3:53:53:ae:29:0b:0f:34:
                    fc:63:df:4d:2c:6b:16:2a:2b:d9:f7:51:2a:0c:07:
                    d9:7f:72:d8:ec:6d:2b:a3:1b:05:09:ca:39:91:45:
                    bf:f0:0d:d8:cf:9a:70:9d:8a:4b:fb:7e:4c:9b:45:
                    8a:e6:43:86:82:ed:45:0d:ec:af:5f:8e:ac:c1:5c:
                    c1:cc:80:9f:de:30:31:04:3d:8e:7f:6a:13:fb:63:
                    d3:ac:f9:e9:65:d1:02:16:2d:26:85:c6:da:64:09:
                    cf:02:e9:d8:9d:7b:e5:25:9c:4f:34:02:ea:9b:a0:
                    a5:96:6c:fe:1c:0b:a2:61:14:75:81:5d:4e:a3:77:
                    22:31:8b:f6:20:5a:64:95:d1:7f:2c:91:d8:48:1a:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E2:9C:B8:CD:9B:05:5B:92:BE:8E:EB:11:E5:78:70:00:A9:31:8C
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:16:50:05:37:61:60:16:87:cb:e1:04:fe:25:3e:90:da:
         e5:06:06:f4:df:88:bb:41:2a:35:26:f9:8f:c3:24:94:f9:6c:
         ae:69:60:94:d4:ef:c9:57:e6:83:c3:bc:48:be:a3:0e:07:93:
         d7:db:ec:a0:e2:fe:0d:d8:a5:37:71:9b:d0:d7:4c:b0:f0:57:
         c7:fa:38:95:67:a5:1c:5e:58:a5:a9:90:38:ed:8a:b4:d6:20:
         6d:dd:8a:ba:6c:74:88:cd:66:d0:3b:70:05:6a:a4:76:e0:a2:
         0a:95:56:1e:eb:95:1e:52:99:1a:15:a8:e0:58:43:4b:8c:22:
         84:55:63:81:dc:59:12:a4:4c:22:91:0c:15:12:6a:49:5c:1a:
         08:30:ec:35:52:d3:c2:7e:1f:3d:bc:ad:58:e7:8d:38:c0:0a:
         dc:d8:18:e2:e2:f0:e0:c6:f2:05:1a:d3:2b:c9:19:e9:00:44:
         b0:5c:5b:15:4f:71:a4:d7:ef:1c:0a:a9:62:2a:41:b3:a7:a7:
         9c:62:df:10:b4:a9:df:03:dd:f1:e8:01:7c:4e:cd:f9:e4:02:
         2f:ad:cd:3f:1a:e7:a4:0e:7a:21:a4:f0:11:d3:1d:c1:57:c6:
         07:4b:49:ae:da:08:9a:fa:f4:d4:8b:13:cc:7b:42:ef:6c:90:
         e5:ac:fd:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCCM8jqBqMucFlX/dHxqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwNDE3MjAwMDQ5WhcNMjYwNDE4MjAwMDQ5WjAzMTEwLwYDVQQD
EyhiYmUyOWNiOGNkOWIwNTViOTJiZThlZWIxMWU1Nzg3MDAwYTkzMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKvRcy5Fq4Oqhfo2FtBggmq0w3Pt
7mhk46xQ98CZYdLWkx8UaTecXxYvszeNCI7Bp+4EfecH6yFlTmrucZH3BEor/vPC
LnUnV02GSem6mG9KwQGXZ/LGs6X3xwUDdtkSKpuTN9fLx2Kjs69TBBUvo1NTrikL
DzT8Y99NLGsWKivZ91EqDAfZf3LY7G0roxsFCco5kUW/8A3Yz5pwnYpL+35Mm0WK
5kOGgu1FDeyvX46swVzBzICf3jAxBD2Of2oT+2PTrPnpZdECFi0mhcbaZAnPAunY
nXvlJZxPNALqm6Cllmz+HAuiYRR1gV1Oo3ciMYv2IFpkldF/LJHYSBocpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvinLjNmwVbkr6O6xHleHAAqTGMMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArR4WUAU3
YWAWh8vhBP4lPpDa5QYG9N+Iu0EqNSb5j8MklPlsrmlglNTvyVfmg8O8SL6jDgeT
19vsoOL+DdilN3Gb0NdMsPBXx/o4lWelHF5YpamQOO2KtNYgbd2Kumx0iM1m0Dtw
BWqkduCiCpVWHuuVHlKZGhWo4FhDS4wihFVjgdxZEqRMIpEMFRJqSVwaCDDsNVLT
wn4fPbytWOeNOMAK3NgY4uLw4MbyBRrTK8kZ6QBEsFxbFU9xpNfvHAqpYipBs6en
nGLfELSp3wPd8egBfE7N+eQCL63NPxrnpA56IaTwEdMdwVfGB0tJrtoImvr01IsT
zHtC72yQ5az9cw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:27:32 2026 by rpki-client