Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          opjnQcLMvS9H7dcDM5DNFDFf2IOHfdTeRLSOZHg0x2Q=
Subject key identifier:   5F:AF:22:58:9E:28:50:FB:A0:37:D6:68:64:90:FC:0C:2B:1F:A2:CC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019FD53BAD2C5FA4588E33B0CE40AA7B982A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          16EF
Signing time:             Thu 06 Aug 2026 04:01:25 +0000
Manifest this update:     Thu 06 Aug 2026 04:01:25 +0000
Manifest next update:     Fri 07 Aug 2026 04:01:25 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: l1x7L1NB6RFgvaWDTG7cUdex80LKcsxDag2zYPmw7Hg=)
                          11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          14: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          15: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          16: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          17: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          18: mMta-JcylDmaaqs55jbZypo3Wkc.roa (hash: uEabUtGRHWP3we/WwC7S3pmtse7pVlGs5opB8BfWj4w=)
                          19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          21: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=)
                          22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d5:3b:ad:2c:5f:a4:58:8e:33:b0:ce:40:aa:7b:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Aug  6 04:01:25 2026 GMT
            Not After : Aug  7 04:01:25 2026 GMT
        Subject: CN=5faf22589e2850fba037d6686490fc0c2b1fa2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:4f:aa:b9:7c:c8:c1:b9:25:2f:e7:3a:f9:
                    0c:77:4c:cd:04:af:69:c9:68:17:5e:0b:f9:9f:07:
                    15:df:47:b4:27:5d:01:4a:90:4c:5b:95:38:52:da:
                    e3:d6:ef:86:64:cd:de:f0:5f:b0:e9:fd:9d:a8:d9:
                    2b:71:a5:d0:c9:d2:2d:78:2a:da:a9:0b:0e:ac:c8:
                    35:4c:5b:ce:40:75:25:dd:62:da:b8:17:47:c6:7e:
                    54:6e:b6:79:ab:06:38:a1:32:3a:40:0b:3a:5f:a6:
                    a8:4b:e7:ea:f1:f1:15:6d:09:ae:90:85:b2:59:50:
                    20:d0:ec:dc:a4:1b:f7:80:cc:72:77:28:b0:ea:f9:
                    17:e8:10:34:cf:f7:ca:40:72:6a:ce:63:f4:27:84:
                    8a:92:80:5f:2d:62:c0:57:4a:77:9d:39:1f:02:56:
                    57:5d:d4:b0:e7:47:47:fd:b9:48:22:db:3c:e1:70:
                    d5:82:20:18:2b:fd:9d:bd:be:4a:f2:50:ee:54:7c:
                    6b:f3:7d:16:67:9a:32:60:9d:9c:95:dc:10:0e:e8:
                    3a:37:15:6d:33:30:26:32:7b:8e:91:e6:a6:db:c4:
                    5e:30:4e:bf:7c:70:76:c1:d3:16:65:25:10:79:5f:
                    92:71:3f:77:ea:56:bd:f2:c4:af:b6:b5:12:64:78:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:22:58:9E:28:50:FB:A0:37:D6:68:64:90:FC:0C:2B:1F:A2:CC
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:fc:6f:d5:cf:c1:98:7c:10:ba:e0:c4:62:fc:5b:26:a3:
         79:0d:b0:4f:f8:ed:c8:d1:2c:c1:7b:09:2c:46:96:13:6d:16:
         b9:1f:ad:1d:da:0d:ab:ff:2a:34:9e:5d:da:70:7e:6d:09:89:
         0d:18:91:0b:4a:59:df:99:e7:a6:6f:51:14:22:d3:0d:87:a8:
         4f:79:41:15:27:98:6e:2b:4e:51:d7:37:7d:1e:80:5b:85:a2:
         80:00:19:20:af:10:ef:b0:c3:b4:7d:ed:d7:a1:33:a9:3b:ef:
         b1:f6:ec:53:f4:6c:7e:af:d2:7b:2a:b0:ee:62:4d:6d:eb:70:
         cd:f4:17:2f:d8:ad:b1:f6:22:48:20:e4:bd:3a:a6:39:0f:32:
         4e:74:cd:b0:c6:7a:46:e5:98:6a:95:8d:4d:46:bb:cc:f0:15:
         86:24:62:3a:a5:1c:dc:52:5c:b8:22:09:18:58:dc:08:e5:af:
         19:a6:c3:d9:83:21:b9:22:66:62:60:35:46:d5:b2:01:86:17:
         9d:b1:81:c7:79:ce:a0:2a:bd:72:a9:fb:18:2f:d8:0f:ae:a8:
         34:f0:bc:27:ae:0f:d4:c0:ce:66:55:1c:66:8f:1a:e4:2b:57:
         c7:51:37:18:07:61:00:97:f6:e9:b8:34:3a:39:ce:80:0d:30:
         fd:5e:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 07:19:28 2026 by rpki-client