Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          2C6kx5SbeERTP/L9dLe/GGUZy+URg7af3RtgRsVVyzg=
Subject key identifier:   EC:A1:80:FC:64:11:C0:7C:E9:1E:9D:71:1A:1A:34:25:EF:25:0F:90
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019E12D600A575E680053137F19E7B4BB288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1604
Signing time:             Sun 10 May 2026 17:01:15 +0000
Manifest this update:     Sun 10 May 2026 17:01:15 +0000
Manifest next update:     Mon 11 May 2026 17:01:15 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 7hR5vpVx4iZmhaaFQp61gRqzr8Jqe5EF871TWkLVgNA=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:12:d6:00:a5:75:e6:80:05:31:37:f1:9e:7b:4b:b2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 10 17:01:15 2026 GMT
            Not After : May 11 17:01:15 2026 GMT
        Subject: CN=eca180fc6411c07ce91e9d711a1a3425ef250f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:81:4d:85:03:35:93:24:63:40:ab:68:dc:
                    aa:3a:91:05:ad:01:52:7a:e9:0b:75:23:5a:15:38:
                    f4:90:f6:8e:18:e4:52:99:30:c5:3e:6a:17:6b:7f:
                    d7:eb:61:c7:c0:06:fb:31:a4:7e:e6:b8:cf:ac:74:
                    07:c2:bb:49:03:d7:af:73:a1:2c:c9:ce:78:8c:a5:
                    b3:5d:27:d3:35:88:1c:75:bf:1a:0b:69:de:83:ec:
                    34:4a:d3:70:18:01:be:3c:d0:99:3f:9e:fb:08:ec:
                    e5:96:17:ae:a1:6e:fd:b5:61:c6:89:55:ee:6a:a8:
                    fb:42:aa:3b:b6:2f:58:88:76:5a:95:e1:c0:a5:50:
                    91:14:a3:9d:dd:a8:c7:79:ad:32:24:df:7d:56:21:
                    fe:76:ba:16:fc:d3:c2:20:1f:ed:bc:c1:3c:46:e9:
                    73:ed:74:4c:83:a0:a7:54:48:2c:98:64:ff:85:8a:
                    84:04:39:7b:9a:40:89:33:5f:c3:a1:b7:a9:41:fa:
                    96:32:f2:99:12:0a:82:58:7f:89:62:1a:ea:c8:7c:
                    ca:0d:e3:ee:47:d6:36:fe:77:40:35:3f:5a:88:43:
                    32:e1:f2:44:2e:02:2e:a0:f7:e3:8d:20:a2:a7:65:
                    04:0b:22:3a:e8:2a:e4:89:3e:28:20:c8:79:6d:e3:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:80:FC:64:11:C0:7C:E9:1E:9D:71:1A:1A:34:25:EF:25:0F:90
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:95:d4:c2:32:fa:81:c3:52:b6:d6:31:b9:4a:40:62:a7:a4:
         52:c6:4e:b8:1a:68:94:9d:b3:51:0f:e4:4f:f8:bd:8b:8a:75:
         f7:0c:37:2f:35:a5:1d:67:df:a6:81:e6:44:6e:f7:69:2f:cb:
         1e:f6:92:0d:eb:5b:07:0d:b6:f2:96:dc:18:dc:6e:8a:dd:43:
         45:f2:87:bc:2a:2f:e7:e0:53:b9:d5:62:bd:8c:f5:11:b6:4a:
         d5:f8:cf:fb:a4:88:d4:b1:31:0e:1f:b8:a2:62:30:00:24:a4:
         d5:23:b4:de:04:fa:24:a3:ca:02:82:a1:60:ac:df:37:1f:4b:
         90:4f:8c:08:00:a9:4a:bc:fd:ea:d2:62:86:af:d9:f2:54:6d:
         09:6d:02:8b:07:a6:c9:f0:f7:9f:9c:b0:ad:61:c3:16:37:30:
         d7:cf:dd:1c:c3:c8:fc:de:01:54:f0:bd:d0:f6:54:55:17:d2:
         27:6e:bf:af:57:1f:c7:fb:1e:71:12:90:be:d9:a6:a2:87:c1:
         d9:f4:64:35:24:14:7e:a2:8f:28:ce:54:40:c8:de:c9:60:14:
         f4:f7:d8:b1:ce:dd:25:df:45:3b:36:2a:c5:ba:18:ac:c2:8d:
         38:e6:fc:99:dc:ab:cd:8e:46:70:b5:67:1d:f9:d1:8c:cd:4e:
         ef:09:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 21:45:49 2026 by rpki-client