Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          s35mbOVF42PhC5nKPL/DZ2cg6C8/ojG6bHPLSv8T2fo=
Subject key identifier:   0A:0E:FC:2A:4A:56:D2:46:5C:05:76:64:8B:EC:82:2C:FB:99:2A:4A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019F8B34566A792339E3FBDCA33E99127F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          16C7
Signing time:             Wed 22 Jul 2026 19:01:30 +0000
Manifest this update:     Wed 22 Jul 2026 19:01:30 +0000
Manifest next update:     Thu 23 Jul 2026 19:01:30 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: u+628jJpPRwbrIfbYjsNVienLQNPrrtjORk1RdCXppo=)
                          12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8b:34:56:6a:79:23:39:e3:fb:dc:a3:3e:99:12:7f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jul 22 19:01:30 2026 GMT
            Not After : Jul 23 19:01:30 2026 GMT
        Subject: CN=0a0efc2a4a56d2465c0576648bec822cfb992a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:de:be:bb:ac:2a:ec:12:e9:da:ca:a8:4d:
                    3e:fc:23:2e:02:55:7b:26:ec:a3:5f:cf:4b:30:2f:
                    1f:fb:2c:c2:30:56:9a:71:be:a9:c9:70:3d:c8:1f:
                    60:14:d5:af:06:d7:20:0e:27:83:d8:db:6f:d6:83:
                    a1:5b:b0:0a:e5:6a:7c:03:7f:7f:06:ee:7f:e0:bd:
                    e6:a7:3e:e6:99:8b:7f:04:89:06:6f:a9:8f:9b:42:
                    84:df:6c:d1:c3:de:33:98:19:cd:94:6e:e7:34:d9:
                    66:cb:c8:69:b5:40:60:ee:eb:0d:76:b2:97:a4:8e:
                    b8:c2:cd:40:72:77:97:ba:3f:ac:f8:61:58:d7:df:
                    0d:01:68:01:ba:c4:49:6e:84:1c:b4:b9:2a:64:72:
                    ff:1e:1b:8a:72:0c:40:2d:fd:7c:94:99:3a:86:89:
                    be:00:14:2f:54:11:d7:a6:5f:e5:ae:67:13:c7:f4:
                    f2:23:5f:4c:90:14:2e:20:fc:c4:f0:0e:5a:c8:00:
                    14:e7:02:4f:41:57:9f:f7:9b:2a:09:54:51:ad:92:
                    91:51:0d:4e:1e:de:f8:4c:ad:05:c3:52:1b:b1:0e:
                    8c:6c:75:d6:93:24:f6:b4:8d:d1:f7:de:17:70:bc:
                    a2:4d:80:81:df:b8:39:8b:5e:0c:8f:af:9f:01:05:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0E:FC:2A:4A:56:D2:46:5C:05:76:64:8B:EC:82:2C:FB:99:2A:4A
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:05:65:6a:fa:2d:c5:21:aa:89:16:b2:62:ad:1a:0f:39:5a:
         ed:c6:8f:34:b0:06:02:e2:9d:e9:a1:3d:0d:55:0f:77:99:20:
         c1:95:92:70:62:71:89:8a:97:ef:d1:f1:6c:b2:25:85:d9:13:
         0a:47:2d:84:08:a9:d0:43:8d:ad:f8:39:6d:5e:10:a7:92:f5:
         d3:90:19:3f:aa:39:09:df:b7:d6:4d:a9:47:00:0c:41:be:15:
         7c:10:54:b0:b7:af:59:24:fa:c2:51:70:b4:a7:37:fc:96:9b:
         6b:12:80:36:05:bf:24:df:95:02:59:80:a1:c5:fd:dd:7d:7f:
         91:5c:34:b2:d4:20:ae:af:c9:ed:83:1f:32:a0:58:c4:3b:24:
         ad:1f:5e:bc:5c:22:24:6c:f8:3e:10:01:7c:11:05:5e:29:dd:
         16:3e:f0:73:e5:72:34:c2:96:10:42:cd:16:d7:df:ac:31:58:
         cc:54:f6:9e:31:2c:35:d4:02:a8:5b:03:7a:e0:29:93:17:09:
         bf:1a:07:e4:53:50:a2:95:fe:55:96:d0:81:98:aa:a4:06:37:
         d4:be:90:ec:6a:98:da:3e:9d:46:1a:65:d8:5a:58:57:64:79:
         04:b1:19:cf:34:d6:4f:49:f1:5f:85:f3:62:5a:e8:83:dd:a4:
         af:dd:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 04:19:21 2026 by rpki-client