Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          y6DVcXlXL4jdWNXXFvROlbSh3OCP0n3G2ntxPxVpSnY=
Subject key identifier:   F6:09:47:56:41:75:DB:3D:D6:A2:26:6F:6D:2E:18:8F:ED:4B:8C:07
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019E924AF00627E210E92B393BC83422290C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1646
Signing time:             Thu 04 Jun 2026 11:00:45 +0000
Manifest this update:     Thu 04 Jun 2026 11:00:45 +0000
Manifest next update:     Fri 05 Jun 2026 11:00:45 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: UQCdCUgvS9r/tiUQ7TiRxYbXw2n3v4/+q1+nB1g8wks=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:4a:f0:06:27:e2:10:e9:2b:39:3b:c8:34:22:29:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jun  4 11:00:45 2026 GMT
            Not After : Jun  5 11:00:45 2026 GMT
        Subject: CN=f60947564175db3dd6a2266f6d2e188fed4b8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:00:17:cb:c8:c8:37:4f:59:13:86:92:98:
                    07:6a:ac:32:62:91:6a:da:4d:da:4f:3d:15:d5:53:
                    2d:19:48:b3:fc:77:df:ac:ee:68:a1:78:d2:ad:fa:
                    b8:44:5d:9a:42:87:c1:71:5b:79:20:e5:1a:c9:59:
                    15:57:b1:d8:48:44:e4:78:ff:0c:96:08:3f:d1:1c:
                    52:11:53:0a:32:49:37:09:fe:5b:c7:3e:d6:bd:7b:
                    37:c9:64:bf:c0:04:1a:75:8a:a9:72:36:ce:08:ec:
                    42:ee:68:48:9b:6c:f0:58:1c:03:2a:0c:54:dd:72:
                    11:6e:2c:2d:46:da:3d:c2:1d:a9:3d:41:f2:7d:17:
                    2f:b7:b8:d9:ba:b4:75:2e:03:3b:96:8d:9b:5c:a2:
                    0c:6f:75:ba:fe:fe:83:82:fd:d7:09:22:39:2a:28:
                    64:d2:be:5e:b9:a3:2b:1d:cc:1f:16:a6:26:50:a8:
                    ee:f5:f4:d5:fd:59:fb:0b:6c:b9:ca:29:8a:83:d2:
                    ae:d5:52:f2:c4:80:ea:60:18:97:ce:c6:27:d0:1a:
                    97:f6:62:24:a8:f6:10:b0:e6:0c:38:0f:33:b0:f2:
                    ed:53:49:d7:29:a7:e7:e5:6b:93:92:47:f2:fd:2a:
                    46:f9:29:34:9a:43:54:ed:64:23:c2:79:5f:63:d1:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:47:56:41:75:DB:3D:D6:A2:26:6F:6D:2E:18:8F:ED:4B:8C:07
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:22:50:a0:61:45:c2:1f:8f:70:e6:d2:17:b0:b9:aa:59:
         ed:7d:67:39:0c:c4:e1:2e:03:fd:d2:38:21:54:10:50:cd:46:
         83:a3:a6:a2:fd:20:00:fe:13:6a:86:13:35:3e:40:8c:e2:7c:
         87:16:e5:f9:ed:5b:c8:94:a0:ca:74:d3:1b:06:ad:6e:d4:08:
         76:12:f3:48:32:2e:45:c0:fe:50:51:39:25:2a:66:4c:ec:41:
         3a:dc:ae:88:8d:54:08:57:37:75:e3:f1:d1:3f:06:82:f7:29:
         24:17:23:16:8d:be:1f:3f:41:94:cb:6a:68:48:c2:57:b8:d2:
         6d:c2:85:07:90:35:08:e1:36:d8:f8:eb:f9:52:88:96:09:c9:
         95:b5:2e:5c:c5:60:47:d0:b6:e2:ea:d6:38:60:de:e0:b6:26:
         b8:1c:bf:54:ec:52:61:91:c3:99:f9:ec:4d:06:00:7e:41:64:
         db:5c:cf:14:d9:2e:23:25:f8:a7:c9:da:db:6c:ec:6d:24:cf:
         5e:c7:a7:3f:80:84:71:27:85:96:38:af:3f:84:71:c8:b8:3f:
         47:9f:4b:f5:53:9a:5f:49:41:97:b7:59:5e:8b:d8:af:a5:a9:
         59:3d:fb:e9:f1:36:3b:81:75:c8:e5:f3:7c:e0:35:95:16:a9:
         05:72:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:54:41 2026 by rpki-client