Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          OhgqBSDsIyezgDadnWnkwPWqbZD4n33UY/bQeKxnGzc=
Subject key identifier:   A2:8D:E5:82:D1:B6:89:AC:14:DF:B0:91:4A:15:31:C5:90:57:D1:6B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019ED5E2762B91524236CA084C835F67E9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1669
Signing time:             Wed 17 Jun 2026 14:00:48 +0000
Manifest this update:     Wed 17 Jun 2026 14:00:48 +0000
Manifest next update:     Thu 18 Jun 2026 14:00:48 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: mPwhD+VimF0VdZG/nVYglr6rOUed48xoH3uduVaMQAQ=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:e2:76:2b:91:52:42:36:ca:08:4c:83:5f:67:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jun 17 14:00:48 2026 GMT
            Not After : Jun 18 14:00:48 2026 GMT
        Subject: CN=a28de582d1b689ac14dfb0914a1531c59057d16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:67:a9:8b:e8:a8:cc:11:96:73:20:70:28:
                    7f:f4:db:0e:e4:cd:55:a2:12:53:40:01:ba:2a:5f:
                    e7:10:f0:cc:ac:2a:6c:0a:b6:9e:1f:52:96:6a:08:
                    20:48:c8:91:ce:c9:15:2e:49:fd:20:bc:f5:31:4c:
                    41:e4:3f:4c:bc:0f:73:31:28:03:87:d4:ad:9c:65:
                    c9:b4:24:d0:71:ca:42:3a:e4:44:dd:70:2f:8c:28:
                    ca:38:ac:75:56:2e:ad:44:2f:7a:4c:82:99:06:33:
                    ee:84:b2:c6:d2:50:4a:c5:84:76:fb:ff:32:1c:83:
                    10:1f:26:88:66:c0:3f:09:2c:f8:0a:44:0a:18:a5:
                    e1:73:5b:1b:7c:81:17:a7:3a:9e:08:30:87:2d:e3:
                    ad:28:26:16:35:9d:8f:2e:c4:28:60:06:00:65:87:
                    dc:ff:fe:5e:2b:0a:bd:e1:09:52:02:e6:c6:4b:20:
                    62:7e:4e:3f:9c:9c:69:80:0f:bb:53:cb:a2:ec:10:
                    28:6e:d6:15:a9:94:61:38:ea:a1:6a:d5:e9:43:e6:
                    05:4c:8d:04:7a:14:52:4d:54:d3:db:9f:cc:8e:7d:
                    a7:c1:37:ec:81:36:f0:10:7d:da:d1:ce:ff:a8:84:
                    85:1c:15:3d:97:e5:70:64:b1:01:0e:c9:bc:58:50:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8D:E5:82:D1:B6:89:AC:14:DF:B0:91:4A:15:31:C5:90:57:D1:6B
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:db:b6:c3:33:c7:0f:b3:76:90:03:8a:d6:47:c7:6f:12:d0:
         1c:7f:07:f7:4e:84:39:0d:58:f4:19:b4:80:bd:df:a1:d1:3e:
         11:78:96:0b:c5:ab:ee:05:12:c6:23:45:fd:9c:ee:0d:b4:24:
         e8:3d:5c:4f:ee:8a:7d:0a:ed:81:2a:2d:57:f5:2e:69:dd:d1:
         af:fd:92:f4:84:2f:17:6f:e4:7e:c5:6c:3c:52:27:aa:68:0d:
         98:51:20:23:1a:46:67:f3:89:8a:2a:08:5b:fa:71:d9:c8:c3:
         f1:ba:c5:ae:89:cc:3b:8f:d3:3c:29:79:57:31:e6:00:a8:c3:
         0d:f1:10:f8:03:f8:c8:88:bb:91:0d:2b:90:82:4b:bf:91:82:
         22:44:9e:28:3b:47:b7:c3:36:01:8d:ef:0e:b7:78:1a:df:0d:
         d3:10:68:5b:23:81:e9:24:7b:7b:d6:70:27:b0:59:02:6e:7c:
         79:06:92:aa:07:2f:66:86:84:82:7b:1c:bd:93:e4:8f:48:d5:
         15:5b:5c:0d:6f:1a:ba:44:ec:9d:2d:46:03:b7:66:e9:79:7b:
         cf:20:f7:cf:26:a7:bb:d5:1e:c8:03:b4:56:c3:2c:05:a1:04:
         7d:82:8d:09:56:f1:19:46:02:65:52:0e:1f:be:b8:41:8e:59:
         79:32:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 20:05:56 2026 by rpki-client