Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          kAeHBLqZIzrtS//13jGxLFlBPvzW4+Wdg+o89Aqe0mE=
Subject key identifier:   F4:A4:20:47:CC:D3:38:9E:DB:DD:6A:7C:5C:99:73:8E:92:DF:38:9F
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019E036328F7AB8DF0E3C6F70FBC51C1E884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          15FC
Signing time:             Thu 07 May 2026 17:01:30 +0000
Manifest this update:     Thu 07 May 2026 17:01:30 +0000
Manifest next update:     Fri 08 May 2026 17:01:30 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: JeejTEIjc1+33ncbuW3BMUcL53zQvmZC0cu+yCru1VE=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 14:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:03:63:28:f7:ab:8d:f0:e3:c6:f7:0f:bc:51:c1:e8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May  7 17:01:30 2026 GMT
            Not After : May  8 17:01:30 2026 GMT
        Subject: CN=f4a42047ccd3389edbdd6a7c5c99738e92df389f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:19:b7:ff:a2:54:fd:29:06:35:a1:6b:f0:
                    8f:2d:39:cc:fb:cc:8d:95:28:3c:93:1d:d7:2f:29:
                    75:b8:a1:a2:c6:ea:d7:ba:d8:c5:ed:12:40:35:11:
                    78:1e:59:ef:d7:0f:36:78:12:39:5d:73:bc:eb:d5:
                    84:5c:be:9b:50:bd:5b:9b:da:28:3d:31:c8:78:5b:
                    a5:cd:c2:22:af:15:18:ec:66:e3:ff:53:5d:0b:a0:
                    fa:64:04:ca:d8:e4:63:c8:f5:8b:ad:72:a2:c3:86:
                    fe:34:9a:aa:9f:6e:5b:69:9b:ef:36:9c:a3:a6:8e:
                    eb:b9:8b:e4:2b:90:05:95:a1:50:51:a1:04:8b:3e:
                    9e:c1:75:ab:de:b4:93:1e:44:00:19:7c:12:5c:44:
                    96:6c:ef:bc:43:65:75:cd:a5:4e:25:d8:f9:82:2b:
                    5b:86:9f:4b:92:26:40:7c:bb:33:c5:cf:c9:0d:1f:
                    86:01:b0:bd:46:bd:74:3a:21:2c:7a:ae:b7:4a:dc:
                    91:a6:1d:83:db:6f:5e:29:4c:9e:1d:ac:b2:2c:c3:
                    6d:9f:5f:a4:46:d8:53:88:34:fa:9f:d4:a1:ee:19:
                    6f:a2:d7:d0:47:f6:23:3e:6d:2f:15:85:71:fc:82:
                    30:e0:14:a4:99:02:d7:df:c8:54:a8:6e:27:83:06:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:20:47:CC:D3:38:9E:DB:DD:6A:7C:5C:99:73:8E:92:DF:38:9F
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:a4:3a:a8:7b:34:52:46:80:6d:92:10:d2:8d:86:63:fc:
         68:a2:76:f0:9f:3f:56:6a:1d:a8:bf:fb:79:f4:63:ab:35:d3:
         55:f3:55:f6:7c:32:4f:77:1d:46:c5:9d:a1:b4:4c:35:26:34:
         8b:8a:33:92:87:8c:69:a5:77:ef:17:48:24:95:ae:75:b4:e5:
         b4:a4:63:9e:66:7e:1c:76:e5:e1:22:1e:67:3f:04:2e:9a:0a:
         97:12:dd:b9:08:ee:b0:e9:b5:91:2b:13:0d:66:d3:f4:ab:9e:
         9c:ce:1f:5a:6a:cb:2a:a3:99:27:4e:21:56:31:50:82:83:73:
         24:5a:4a:29:a3:e1:fe:4a:de:53:83:88:0f:96:46:49:97:97:
         90:3e:4d:4c:e0:12:70:dd:05:60:fd:98:6d:0c:9c:c5:af:0c:
         93:f5:d9:9b:c4:2e:e7:49:0f:a0:00:f3:db:19:78:53:2b:55:
         3f:5a:3c:93:1b:52:79:05:66:14:46:ca:fd:28:1c:fc:44:c9:
         19:81:77:0b:50:dd:db:69:70:a0:b5:7f:3c:51:8b:14:88:6b:
         7a:f8:79:e6:95:76:ce:15:c2:52:60:70:00:dc:65:86:ee:d7:
         90:17:89:5a:25:b4:53:41:96:f3:8d:30:42:ff:ce:2c:4a:18:
         fa:2e:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:15:39 2026 by rpki-client