Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          G4IdsHZSv2zBkgVsPOx16Gv67JhxgOTiON0INbedal0=
Subject key identifier:   8D:80:78:C9:4B:59:02:0A:1B:6F:3D:CF:9B:92:CA:92:CF:CB:8E:75
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01A18751A8C514693468FA0CAFFE165B608D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          17E6
Signing time:             Thu 29 Oct 2026 11:00:38 +0000
Manifest this update:     Thu 29 Oct 2026 11:00:38 +0000
Manifest next update:     Fri 30 Oct 2026 11:00:38 +0000
Files and hashes:         1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
                          2: 0VoVKdv0YilzQvn24_sCZeyVKr8.roa (hash: NUUJFCbfs9KNWhRCXMVBeOwBxJfOsZ72+OQ2JmV7RBE=)
                          3: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          4: 0ktKC-f4nDyI1i5cUIWyitRoyGM.roa (hash: pRXCJVbRDGRpG1mXoJ+u7IH5zOUK6pPz7zPKHQVprAA=)
                          5: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          8: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (hash: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: MTfYuDupOZ8EKCi-cknXFTLRkO0.roa (hash: RTLFO/MqJcOk7O9hGvJVoHZCD/NBbtH1miZAgX+NBmY=)
                          13: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: MsF8a7nMRW5IcMkS1LKHrrOiDy0D1PxkptM9UuhjRnQ=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa (hash: p+ru4cW+r6HSaCaeHZW8AaCBmqzOtYP77c4DAVcoILk=)
                          16: UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa (hash: 7iN0psfk1zyhVafop58DDcr20Feix7iaz6X07bxtzdE=)
                          17: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
                          18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          19: Ytt0jYNmkblrHESNXtlptNtOzDw.roa (hash: TMGwUiyiBkKlSglO5vEWcjFMC3nFicpzZMzW+qYVWSQ=)
                          20: Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa (hash: B9q3Gxf6cFCpQX15KKaR42uMVgZHY+iDJ+t7F3N4anA=)
                          21: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          22: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          23: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          24: jjZTf9S4GO_XBjspeycypitIdus.roa (hash: iiH1k95gg1mLK9IHZzz2iRVg9BcAeQPvTecCMlNndD8=)
                          25: ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa (hash: t3U5a9jeFTpwLqazJteiTXIy8kMtT9VQPKdjkLgNQ/w=)
                          26: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          27: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:51:a8:c5:14:69:34:68:fa:0c:af:fe:16:5b:60:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Oct 29 11:00:38 2026 GMT
            Not After : Oct 30 11:00:38 2026 GMT
        Subject: CN=8d8078c94b59020a1b6f3dcf9b92ca92cfcb8e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:e7:61:62:97:24:56:80:73:cc:33:d8:b0:
                    70:4c:aa:80:06:00:17:1f:e5:c4:90:bd:45:ea:f6:
                    57:91:7c:88:25:04:e8:02:28:a8:f0:d8:64:a9:4d:
                    95:cf:ed:d6:0a:eb:98:97:ac:42:38:9f:2a:97:2b:
                    ef:88:4a:fe:28:14:be:06:f6:2f:bd:ae:ce:44:af:
                    a9:14:db:d2:e7:ea:ac:d8:b8:74:f9:55:a8:79:29:
                    96:2e:27:13:23:90:90:1a:2b:70:6b:40:4a:63:3a:
                    33:a9:02:50:ae:6d:23:67:6c:3c:77:ca:1f:36:f8:
                    14:96:50:35:97:6e:df:d8:b3:c4:d6:b7:9b:2c:2b:
                    c3:9b:6b:0d:63:8c:16:87:ac:26:1c:1c:69:d1:cc:
                    36:33:90:5b:94:28:e9:c5:60:27:32:a2:47:b4:62:
                    6b:38:14:17:14:9e:6e:f0:65:5f:2d:82:25:39:bc:
                    96:2e:bd:4b:8d:9f:3d:7c:64:09:9f:1b:9c:34:b3:
                    74:ec:58:cf:d5:67:75:2c:6e:bb:7d:7b:22:33:33:
                    75:ab:e2:94:66:68:a0:bd:54:22:e7:b9:2e:16:bb:
                    f6:4f:dd:8a:a8:c2:83:93:4d:fe:34:cb:48:3e:39:
                    3b:9f:26:0e:81:18:f6:45:05:ff:ea:c2:ee:55:5d:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:78:C9:4B:59:02:0A:1B:6F:3D:CF:9B:92:CA:92:CF:CB:8E:75
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:14:94:75:9d:09:aa:67:5c:2d:a6:aa:7a:7a:59:56:5d:8d:
         23:27:3b:7a:26:97:be:4d:93:9e:df:b8:26:04:25:60:70:d4:
         5d:b6:4a:70:bd:ea:87:3b:ca:06:f9:8a:0c:56:76:f1:45:09:
         59:9f:48:18:df:a6:d5:6d:a3:78:b1:4c:b1:d8:bd:cc:ba:a0:
         6f:a2:ce:d7:33:f2:4f:5b:5d:2d:f2:c2:4f:45:82:41:2a:5f:
         3a:29:a2:04:1e:fd:e5:b6:0e:b3:0d:ab:c3:ab:77:39:a5:e6:
         0b:61:74:83:f3:87:40:6e:76:d4:91:a4:51:e9:0c:cf:0d:65:
         33:4b:73:a0:0e:52:3d:1e:fb:b4:06:b9:7e:5b:f2:08:fd:32:
         bd:5f:24:0b:29:50:78:5d:cf:e8:e7:94:7f:f5:34:04:bc:41:
         6d:68:87:ad:38:7b:dc:0f:e9:12:a7:ad:ae:35:9f:bb:1b:86:
         ef:97:da:37:47:71:3c:63:2f:f1:d1:ab:46:c9:40:ce:41:fd:
         95:22:da:b2:1a:32:be:e9:0f:5d:a1:68:34:f8:55:e2:da:cc:
         10:5f:2b:64:2f:9c:b5:3b:20:98:6f:95:be:d2:18:61:ff:05:
         27:40:1d:c2:a4:25:3c:eb:bd:9d:70:f0:67:a1:ba:cb:3a:04:
         f1:e2:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:49:39 2026 by rpki-client