Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          F9s4sdQBSVhUmU4olDKh4q3wMRzwysQu0mdBk0/62AI=
Subject key identifier:   CB:0D:97:E1:D9:A2:0C:56:84:F9:82:67:C6:EF:D5:1C:11:F7:AC:B9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019D59711943874D833F520E5704E6E39CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          15A4
Signing time:             Sat 04 Apr 2026 17:01:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:01:17 +0000
Manifest next update:     Sun 05 Apr 2026 17:01:17 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: b/qEP/n6KJfydfGh/T2hI9xy6E4HrT/QSlmCBTw9usc=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Apr 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:59:71:19:43:87:4d:83:3f:52:0e:57:04:e6:e3:9c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Apr  4 17:01:17 2026 GMT
            Not After : Apr  5 17:01:17 2026 GMT
        Subject: CN=cb0d97e1d9a20c5684f98267c6efd51c11f7acb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:a5:77:21:b0:0e:1f:6e:b0:a0:18:8d:5c:
                    f7:e9:13:7a:30:27:f0:5b:0c:72:9e:57:cc:ba:3a:
                    88:f9:57:36:ee:5e:3c:b9:af:44:f7:a3:69:19:e8:
                    c4:77:b1:b2:65:00:d3:35:ee:b0:16:31:f9:5a:36:
                    64:69:c4:90:7f:7a:42:48:67:11:49:2a:72:e6:08:
                    ee:ad:a7:76:68:76:ca:e6:b5:29:76:75:5f:7b:29:
                    93:33:1a:1c:09:2e:f5:98:a2:cc:44:4f:25:03:35:
                    9b:d6:1d:47:6f:dd:9e:20:a6:59:7f:d5:eb:3f:34:
                    5f:aa:78:ba:d5:cd:73:8e:cb:14:9e:3a:a3:9d:2c:
                    dd:e9:fd:43:47:34:48:23:c6:af:0c:4a:5d:da:1a:
                    45:70:c0:8a:d4:f2:84:c4:73:26:03:8b:31:80:5b:
                    47:17:85:ad:1c:85:b1:18:00:79:1e:6d:4b:69:ac:
                    59:a4:d0:47:67:81:32:51:b0:50:51:11:b2:cd:10:
                    bf:53:0f:66:e1:de:64:fd:6d:ec:85:a8:d7:78:1a:
                    b3:b5:d8:22:bd:ef:49:c3:40:74:f4:2a:21:cd:70:
                    23:9a:89:27:0b:4f:b2:fb:9f:af:58:cc:4d:89:a5:
                    11:15:72:d4:17:ae:ca:b9:f3:04:08:b3:29:80:54:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:97:E1:D9:A2:0C:56:84:F9:82:67:C6:EF:D5:1C:11:F7:AC:B9
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:69:cb:48:43:32:4a:7d:31:1c:32:0f:61:71:27:0b:08:
         0a:17:d2:5c:04:c9:e6:a8:b3:b0:21:da:04:40:08:85:66:6a:
         39:46:6a:70:9f:06:c0:d8:1e:56:fe:fe:d3:98:0e:27:84:c6:
         f1:0d:1a:b9:6d:49:96:01:e8:9b:1e:93:6a:af:46:95:2b:32:
         be:48:3c:e8:a4:c4:ae:d4:1e:37:d8:53:d5:80:4c:b2:c0:9b:
         a0:2d:39:1c:83:e0:0f:de:40:b1:87:d8:9d:21:e5:79:f6:3a:
         83:d9:24:bb:4a:02:c8:3c:1f:8d:17:49:31:2c:14:79:f2:6a:
         48:45:33:e3:c4:20:62:66:46:05:3b:fc:a7:14:54:0b:8c:a6:
         b4:61:07:eb:8a:44:99:ba:4b:e5:00:c6:c5:ba:6e:29:bc:d7:
         05:93:3f:7c:b2:6c:b4:d7:78:05:4e:30:e6:c1:a3:ee:e3:3a:
         d4:a7:b1:99:f5:9f:db:1b:84:6e:e7:bd:25:7c:9a:9d:23:45:
         c2:c1:ee:4d:e0:48:a6:0a:43:77:68:03:38:87:21:9f:5c:78:
         ed:06:2d:7c:a9:b1:fd:0c:98:05:01:49:02:30:19:00:44:92:
         0d:d2:c8:b5:e2:41:22:c0:98:ba:47:2f:f2:29:19:74:bc:b8:
         35:c8:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 22:49:18 2026 by rpki-client