Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          P1H55EqOj67ZnFtK1+YpB+0A4XSkNfPQ8g4XaimKxG4=
Subject key identifier:   97:90:91:87:94:A6:4F:D5:9C:B1:61:9A:04:D0:B2:0B:0A:1D:52:F9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019CA079FE5A9D0254E30F2D75F8673E11B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1543
Signing time:             Fri 27 Feb 2026 19:01:15 +0000
Manifest this update:     Fri 27 Feb 2026 19:01:15 +0000
Manifest next update:     Sat 28 Feb 2026 19:01:15 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
                          6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
                          10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: MGcWEWpphaW6iQJec0UsJ8Z8aWKOHhHdsWJxwfUq93U=)
                          15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=)
                          24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
                          25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Feb 2026 16:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a0:79:fe:5a:9d:02:54:e3:0f:2d:75:f8:67:3e:11:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Feb 27 19:01:15 2026 GMT
            Not After : Feb 28 19:01:15 2026 GMT
        Subject: CN=9790918794a64fd59cb1619a04d0b20b0a1d52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:7c:33:dd:19:95:50:6c:df:0f:39:c9:0e:
                    56:c4:cb:5e:85:3c:54:12:61:9d:94:c2:8a:0b:d1:
                    eb:40:70:0c:11:32:15:4b:f1:ae:83:30:35:94:c9:
                    3a:dd:03:2a:87:ae:7f:83:e4:cc:4e:c2:66:e4:b9:
                    c3:7c:3f:35:fd:32:17:6d:18:ad:8d:75:41:a0:3b:
                    73:ad:64:21:d4:53:c8:9a:cc:28:5f:a9:a0:53:c5:
                    bd:c2:2d:64:ac:ce:6b:13:c6:52:7d:d0:cd:2d:72:
                    9e:62:22:fc:4f:f2:14:06:04:66:6b:5f:ea:2b:08:
                    e4:09:77:ee:46:98:40:d9:c6:88:9a:06:6a:f3:32:
                    47:76:50:52:ae:7c:50:de:e6:cf:04:a3:34:4d:e4:
                    c0:a4:26:b8:d8:b1:5f:65:f6:4d:bf:10:4c:2d:83:
                    4f:a4:ef:f2:a8:a1:1f:37:33:ac:e1:5c:fe:66:bc:
                    ef:87:37:d9:42:ec:e6:1f:77:4b:2a:81:d7:7a:2d:
                    d3:ad:d7:3c:73:d7:02:1b:f2:95:f5:ea:a2:90:ec:
                    2e:4a:ef:4f:c7:d9:29:11:1b:02:b8:ec:f2:25:75:
                    17:90:22:9c:cd:44:1e:cb:d4:aa:d9:57:b2:a5:ad:
                    9c:b2:d1:15:8b:e7:ff:12:02:bc:3e:89:da:94:9d:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:91:87:94:A6:4F:D5:9C:B1:61:9A:04:D0:B2:0B:0A:1D:52:F9
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:d3:c4:30:9b:9e:72:0d:3a:8c:24:75:b8:98:3e:5e:6d:
         47:4f:cb:09:a9:1f:27:76:ee:91:05:08:7c:cb:e1:1f:5b:5d:
         72:99:03:72:92:1b:cf:69:17:43:bc:ed:03:d4:f0:d7:d8:59:
         a0:02:c0:27:6d:ca:12:65:85:15:43:5c:a2:53:79:e1:08:4e:
         64:0f:5c:f9:2b:a6:f1:a4:b2:c5:2e:87:f9:c1:cf:41:7d:42:
         05:26:29:02:1c:2c:66:de:69:43:38:1d:6e:7b:92:b9:b2:1e:
         f7:4b:cb:e6:64:51:ab:49:22:2b:02:73:67:c1:a4:f9:33:04:
         64:3d:00:64:d5:de:c4:dd:f9:17:e5:d4:b7:39:a3:05:c7:09:
         72:6a:2b:1b:cf:fc:b6:e2:0c:5e:53:0c:10:2c:51:d6:9d:bc:
         9f:a9:71:7a:14:bc:75:ad:94:52:24:36:52:b5:a8:ce:b5:ba:
         41:66:66:46:85:75:4f:c8:26:25:b9:a4:c8:f6:51:f6:ca:9a:
         73:48:18:09:38:a7:6b:12:ca:53:df:4f:2a:45:b6:c7:c1:ed:
         a6:4c:61:de:5c:4d:a2:98:d6:70:86:cc:69:86:37:d2:04:63:
         b6:ba:16:45:0a:65:c0:8a:4d:6b:99:8a:f6:d0:5f:18:1b:17:
         1a:91:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 01:46:06 2026 by rpki-client