Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          Rzawo1SSHfTfOJMU2l+mwq3Zf9+A/O/rugQ017h8D8E=
Subject key identifier:   87:E3:CB:C6:9A:07:18:5E:8C:9D:9B:B7:49:85:2F:8C:47:9E:60:9B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019FF9487B1348DE8D2B6952635D8AEF06A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1703
Signing time:             Thu 13 Aug 2026 04:01:44 +0000
Manifest this update:     Thu 13 Aug 2026 04:01:44 +0000
Manifest next update:     Fri 14 Aug 2026 04:01:44 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 1kOZn--0TV8mINAOK8zNe0cR5Fc.roa (hash: +yJ0/l/ebfqk5PtE/KW8wQHru8HbhRVMl8T92kwAYpA=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: I6yWrO9IPY10oLlfOOIXgexn77ICYL7EBC7cy7r1LNA=)
                          12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          14: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          19: mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa (hash: SFWqGIC3QiWf99ScQ0ED4oUM7qmummOqBhR+e6cUZNI=)
                          20: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          21: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          22: vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa (hash: FLQ9RRF3YmE7lXTh4GwRBI1gCsAaA+JXKOxdV9Z6XkM=)
                          23: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:48:7b:13:48:de:8d:2b:69:52:63:5d:8a:ef:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Aug 13 04:01:44 2026 GMT
            Not After : Aug 14 04:01:44 2026 GMT
        Subject: CN=87e3cbc69a07185e8c9d9bb749852f8c479e609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:8b:fd:d7:6e:14:51:d9:e4:4d:7a:36:c8:
                    2c:25:e2:96:e2:80:bf:a0:58:d7:03:16:2c:a0:04:
                    5c:54:c9:4c:7f:98:d5:19:5c:14:af:a1:c9:83:3b:
                    e1:20:6e:8a:64:9b:45:b0:75:6e:8f:88:5c:cf:0a:
                    48:3c:0a:78:0e:fa:9f:16:07:40:76:eb:d2:4b:53:
                    f0:57:97:a5:8e:33:28:2d:63:d5:15:78:5c:ca:a0:
                    f7:cd:0c:c6:e1:ae:51:49:9a:be:08:df:57:90:3a:
                    fd:6c:77:8e:7e:50:83:3b:36:5a:a4:9e:96:7a:c2:
                    1c:18:77:9c:74:46:27:81:4f:57:b3:3e:8d:30:66:
                    b1:b1:cf:80:3d:dc:d7:6b:25:0f:83:44:21:fc:1b:
                    6e:78:ff:98:69:a4:b9:a2:f7:57:f7:7f:c9:20:9a:
                    f8:35:cd:f4:2d:b3:3a:78:55:ed:57:72:8a:ad:14:
                    85:7c:73:ca:a7:2d:2a:7f:6c:67:7a:61:07:c6:5d:
                    74:2d:60:11:74:98:18:ab:b6:bc:1d:94:3d:7d:4f:
                    af:8d:48:a5:2a:f0:0e:a2:37:85:b8:7d:a1:d7:df:
                    f2:fe:e5:c4:b4:f3:0e:9d:45:c3:df:ee:60:78:c5:
                    7e:ca:9a:8b:f7:2e:23:c7:e4:90:3e:ca:08:a4:a5:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:CB:C6:9A:07:18:5E:8C:9D:9B:B7:49:85:2F:8C:47:9E:60:9B
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:c9:9b:05:78:da:8c:01:59:8c:b7:68:ec:85:ad:f2:87:
         eb:68:0a:c9:34:1b:0b:e4:c7:d8:a9:b9:7e:3b:fe:b0:a6:23:
         8c:69:98:76:65:db:c8:96:4f:9a:d1:ad:b9:b0:f5:1c:11:9e:
         6b:16:5d:1d:a7:6e:2b:7e:cf:d6:87:77:fc:6a:b1:2a:9d:c2:
         a8:8a:5f:52:8f:3b:19:54:f6:80:09:f7:72:c9:f1:99:96:20:
         d0:e8:54:11:45:59:09:cc:4d:04:6c:c2:d1:ef:0a:8c:9c:dc:
         70:e8:d8:06:34:f1:16:c9:1e:8d:d2:9e:c0:d2:fd:f1:81:20:
         ca:af:2a:d0:b5:34:af:c7:38:64:df:e2:31:fa:88:12:05:09:
         93:07:35:b9:58:22:25:e8:82:a4:21:09:bf:5a:de:db:09:8f:
         5c:55:f9:3f:80:1c:ea:1e:3c:14:82:26:f0:6c:8b:2c:eb:d9:
         58:cc:40:2f:ce:50:ec:cd:09:b1:44:ed:11:09:0b:da:16:24:
         1a:ba:62:e8:7d:a0:da:ac:0f:9b:08:0c:6c:77:09:50:c2:31:
         39:06:7d:c3:13:c7:f8:f4:63:14:df:68:94:3a:f5:c8:5a:2c:
         9c:79:fb:7f:7a:35:90:5e:7d:62:ac:dd:83:7a:ef:62:98:63:
         72:b2:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:27 2026 by rpki-client