Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          x+BsbT4akwAYehvCTWoILUJ3+CzgE/VeUsbet3j7eTk=
Subject key identifier:   AA:AE:E0:38:0E:B9:DA:99:84:4D:0E:DC:4E:5C:32:8D:B3:30:04:67
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019C910704DFBFAC2C61728E5CAE6C318DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          153B
Signing time:             Tue 24 Feb 2026 19:01:22 +0000
Manifest this update:     Tue 24 Feb 2026 19:01:22 +0000
Manifest next update:     Wed 25 Feb 2026 19:01:22 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
                          6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
                          10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: Hf3IstnIY/l4OU7Hbl/3xCH10Rx4RdfEWSqOvALDqTc=)
                          15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=)
                          24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
                          25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Feb 2026 15:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:91:07:04:df:bf:ac:2c:61:72:8e:5c:ae:6c:31:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Feb 24 19:01:22 2026 GMT
            Not After : Feb 25 19:01:22 2026 GMT
        Subject: CN=aaaee0380eb9da99844d0edc4e5c328db3300467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:1c:33:4d:6d:35:77:ee:17:ba:d2:5d:ac:
                    36:63:b8:6d:7d:23:bd:d2:86:66:2d:7b:8e:c1:e2:
                    cb:fa:a4:42:66:9b:c6:0f:b6:c8:8c:8a:99:1c:d6:
                    26:fb:63:3e:12:2e:9a:98:12:30:00:57:2b:38:70:
                    50:c6:86:2a:31:44:67:7b:6b:95:e9:88:dc:45:8a:
                    af:de:c6:96:0e:96:29:e4:85:7f:da:99:3c:67:13:
                    9f:c1:ca:69:55:b6:ee:df:d0:b1:4e:78:11:22:e3:
                    cb:b9:97:18:e0:f5:7f:71:b7:40:dc:d6:b1:72:87:
                    46:04:a9:52:d0:0a:6d:cf:64:85:c4:00:b0:41:9a:
                    09:61:1f:2e:cc:9d:80:2a:a6:96:1a:d6:9b:e5:af:
                    4c:ad:33:ba:a2:dd:cd:ab:f4:f2:7e:6c:a5:53:0e:
                    e9:ab:f4:9b:ef:95:11:4c:86:56:a8:34:6e:7c:4f:
                    0a:c2:6a:4d:db:99:ce:8f:2a:70:7d:8b:8b:25:af:
                    a4:43:2c:9a:c3:d8:49:aa:b7:15:f6:fe:ab:95:03:
                    ad:54:3a:0a:2e:08:5d:12:90:3e:7b:62:b1:97:95:
                    18:9d:b3:4d:5a:38:c5:9d:92:6b:cf:9a:5a:90:2a:
                    52:af:99:b7:31:99:11:2f:0c:70:ea:bd:a0:c4:fc:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:E0:38:0E:B9:DA:99:84:4D:0E:DC:4E:5C:32:8D:B3:30:04:67
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:16:10:46:ed:66:a1:8f:65:a0:06:5d:49:60:3a:fc:f3:2b:
         cd:82:78:07:6e:bf:70:a7:08:11:ff:f6:19:b0:26:9f:bb:d7:
         f7:8c:36:27:20:20:68:d4:e3:05:38:a1:82:2b:ec:b0:a5:fc:
         bb:9b:e6:56:5d:31:34:45:9d:6f:af:24:e0:82:22:b1:5d:8a:
         f2:bf:e2:86:0c:67:0f:db:e8:50:eb:35:6e:ed:ed:89:73:91:
         3c:59:d6:07:90:3d:62:8f:99:77:a8:59:37:d0:ad:50:43:c8:
         79:5d:6a:5a:8c:bc:a1:75:44:60:cb:96:99:f9:de:a4:bd:5b:
         eb:df:60:ab:31:70:cd:03:23:36:28:4b:b6:30:20:00:14:a7:
         9a:ac:04:8f:c5:d9:fc:89:ec:62:36:f0:62:cb:89:be:42:38:
         fb:d7:ae:dd:e9:be:18:34:84:28:13:f1:d7:c4:02:f1:9d:69:
         dc:ea:fe:58:70:5b:4d:09:10:c9:f5:55:30:60:4c:d7:71:83:
         92:2f:ac:e9:6a:70:bb:12:0b:2b:d0:c2:c7:95:4d:8c:b4:d4:
         5a:9d:f4:06:cd:c1:6d:c7:6c:6c:db:2d:85:12:f8:84:3c:86:
         9e:c3:05:00:9b:6f:88:39:4a:f4:4d:20:e3:4a:df:18:40:fc:
         6d:01:96:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyRBwTfv6wsYXKOXK5sMY3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwMjI0MTkwMTIyWhcNMjYwMjI1MTkwMTIyWjAzMTEwLwYDVQQD
EyhhYWFlZTAzODBlYjlkYTk5ODQ0ZDBlZGM0ZTVjMzI4ZGIzMzAwNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ocM01tNXfuF7rSXaw2Y7htfSO9
0oZmLXuOweLL+qRCZpvGD7bIjIqZHNYm+2M+Ei6amBIwAFcrOHBQxoYqMURne2uV
6YjcRYqv3saWDpYp5IV/2pk8ZxOfwcppVbbu39CxTngRIuPLuZcY4PV/cbdA3Nax
codGBKlS0Aptz2SFxACwQZoJYR8uzJ2AKqaWGtab5a9MrTO6ot3Nq/TyfmylUw7p
q/Sb75URTIZWqDRufE8KwmpN25nOjypwfYuLJa+kQyyaw9hJqrcV9v6rlQOtVDoK
LghdEpA+e2Kxl5UYnbNNWjjFnZJrz5pakCpSr5m3MZkRLwxw6r2gxPwXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqu4DgOudqZhE0O3E5cMo2zMARnMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhYQRu1m
oY9loAZdSWA6/PMrzYJ4B26/cKcIEf/2GbAmn7vX94w2JyAgaNTjBTihgivssKX8
u5vmVl0xNEWdb68k4IIisV2K8r/ihgxnD9voUOs1bu3tiXORPFnWB5A9Yo+Zd6hZ
N9CtUEPIeV1qWoy8oXVEYMuWmfnepL1b699gqzFwzQMjNihLtjAgABSnmqwEj8XZ
/InsYjbwYsuJvkI4+9eu3em+GDSEKBPx18QC8Z1p3Or+WHBbTQkQyfVVMGBM13GD
ki+s6WpwuxILK9DCx5VNjLTUWp30Bs3BbcdsbNsthRL4hDyGnsMFAJtviDlK9E0g
40rfGED8bQGW2Q==
-----END CERTIFICATE-----
Generated at Wed Feb 25 00:54:44 2026 by rpki-client