Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          sSFA6ifJwOITkiU6y8jK7I6Qgs1ek/JjVsMzHP7rzcI=
Subject key identifier:   62:E4:11:15:B0:86:7E:A7:7F:81:D6:F8:E4:13:42:47:CA:34:DF:2A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019F43C058BDFCEA3FAFF014B5968A76157D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          16A2
Signing time:             Wed 08 Jul 2026 22:01:46 +0000
Manifest this update:     Wed 08 Jul 2026 22:01:46 +0000
Manifest next update:     Thu 09 Jul 2026 22:01:46 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: pw+/DHtRCxpnwQflP1Elm/8T8JXK7B5C+cYWWGowa3Y=)
                          12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 20:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:43:c0:58:bd:fc:ea:3f:af:f0:14:b5:96:8a:76:15:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jul  8 22:01:46 2026 GMT
            Not After : Jul  9 22:01:46 2026 GMT
        Subject: CN=62e41115b0867ea77f81d6f8e4134247ca34df2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:44:a5:7f:ce:61:41:0d:44:14:bf:ca:32:
                    3c:b1:70:81:0e:7d:6e:b9:68:a1:e2:bb:06:4c:e3:
                    5e:37:a2:6a:87:75:71:b4:20:6f:45:d7:43:ef:37:
                    91:4f:a0:b5:46:0d:ea:87:71:d9:2d:fd:53:df:c1:
                    f6:b5:2b:25:2e:7a:c1:06:a9:62:b5:d7:cf:90:3e:
                    c3:47:41:d9:65:13:9e:ad:79:63:05:31:03:fb:da:
                    c0:64:ef:e8:5f:7e:30:12:d3:43:ad:1c:26:4e:6b:
                    e9:53:20:62:aa:f4:30:cc:14:08:d8:8a:53:ac:fc:
                    d8:f7:a5:de:88:00:57:fc:75:08:4a:17:bc:87:1e:
                    42:dc:21:6e:24:6c:29:35:84:fc:21:f7:df:e7:f7:
                    0f:dd:b9:39:37:85:0c:61:c7:fc:fe:ee:72:a2:d4:
                    e7:99:50:b1:75:84:84:0c:9c:49:c6:ba:1e:3f:ba:
                    99:cf:4e:fa:cd:ba:02:8f:c0:7f:de:bb:9b:d4:30:
                    29:9d:7f:ef:d9:4e:65:97:6b:9f:89:93:35:6a:6e:
                    2b:f7:a0:1c:d5:80:6c:10:ca:1c:0f:d2:46:08:8a:
                    da:d5:48:58:9f:eb:fb:19:f5:eb:17:2e:f9:af:ea:
                    de:ca:ab:eb:94:d9:d4:59:51:a2:24:78:38:32:dd:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:11:15:B0:86:7E:A7:7F:81:D6:F8:E4:13:42:47:CA:34:DF:2A
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:d5:da:7e:59:1f:e4:42:03:ff:e6:b2:86:7c:57:73:33:
         e0:fb:42:15:55:c8:41:58:4d:9e:9e:7a:0b:90:49:02:f6:18:
         d5:bd:17:d9:45:c1:79:a6:85:c0:65:ae:b7:2a:f8:82:60:bd:
         6c:02:e2:21:50:dc:0f:6a:6a:ae:da:f2:ce:96:6e:4b:39:0b:
         b4:e0:8f:40:11:81:3a:ac:9b:65:43:75:ab:95:ec:78:ba:a9:
         07:c3:4b:6b:b8:f5:bb:16:35:ae:6f:43:92:80:c8:7a:93:6a:
         6c:9a:7d:30:d9:95:f1:00:aa:b7:f6:8b:0e:a1:b5:a7:40:81:
         02:8f:4c:25:19:5e:b2:13:c3:ac:d9:8a:e9:a5:e9:13:63:37:
         25:c1:f1:19:01:a2:98:a3:6a:2a:e6:8a:83:26:74:b0:23:8b:
         65:4d:be:8b:2d:51:67:28:39:8f:8f:11:00:85:d7:ff:5c:3e:
         d5:1e:7c:88:1a:04:0c:a9:72:1d:60:a5:d7:2c:3e:68:8b:1c:
         b3:09:43:30:a0:c2:43:07:16:23:4c:d3:4a:5f:a1:35:1d:e9:
         74:78:f0:ea:0f:56:41:62:bd:5c:4a:46:13:60:47:b5:6e:00:
         c4:36:07:a4:a4:78:70:1d:e6:cb:bb:c2:dd:42:fc:e9:ce:6d:
         49:6f:61:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9DwFi9/Oo/r/AUtZaKdhV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwNzA4MjIwMTQ2WhcNMjYwNzA5MjIwMTQ2WjAzMTEwLwYDVQQD
Eyg2MmU0MTExNWIwODY3ZWE3N2Y4MWQ2ZjhlNDEzNDI0N2NhMzRkZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNEpX/OYUENRBS/yjI8sXCBDn1u
uWih4rsGTONeN6Jqh3VxtCBvRddD7zeRT6C1Rg3qh3HZLf1T38H2tSslLnrBBqli
tdfPkD7DR0HZZROerXljBTED+9rAZO/oX34wEtNDrRwmTmvpUyBiqvQwzBQI2IpT
rPzY96XeiABX/HUIShe8hx5C3CFuJGwpNYT8Ifff5/cP3bk5N4UMYcf8/u5yotTn
mVCxdYSEDJxJxroeP7qZz076zboCj8B/3rub1DApnX/v2U5ll2ufiZM1am4r96Ac
1YBsEMocD9JGCIra1UhYn+v7GfXrFy75r+reyqvrlNnUWVGiJHg4Mt0qfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLkERWwhn6nf4HW+OQTQkfKNN8qMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsabV2n5Z
H+RCA//msoZ8V3Mz4PtCFVXIQVhNnp56C5BJAvYY1b0X2UXBeaaFwGWutyr4gmC9
bALiIVDcD2pqrtryzpZuSzkLtOCPQBGBOqybZUN1q5XseLqpB8NLa7j1uxY1rm9D
koDIepNqbJp9MNmV8QCqt/aLDqG1p0CBAo9MJRleshPDrNmK6aXpE2M3JcHxGQGi
mKNqKuaKgyZ0sCOLZU2+iy1RZyg5j48RAIXX/1w+1R58iBoEDKlyHWCl1yw+aIsc
swlDMKDCQwcWI0zTSl+hNR3pdHjw6g9WQWK9XEpGE2BHtW4AxDYHpKR4cB3my7vC
3UL86c5tSW9h5w==
-----END CERTIFICATE-----
Generated at Thu Jul 9 02:53:21 2026 by rpki-client