Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          pdT9N4jA2a6SdWFDJ6BuPLwSj432E6gXTAU7tTbgJLM=
Subject key identifier:   FF:3F:41:91:69:AB:03:35:6D:26:70:BE:3F:82:D3:2A:1A:D1:68:00
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019DC9735BFBE4B8526596F23F081B553107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          15DE
Signing time:             Sun 26 Apr 2026 11:01:13 +0000
Manifest this update:     Sun 26 Apr 2026 11:01:13 +0000
Manifest next update:     Mon 27 Apr 2026 11:01:13 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: uVd9/3VEJO+n9ev1RWs5SIrvvJFea4ieHsfrHinPtYA=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c9:73:5b:fb:e4:b8:52:65:96:f2:3f:08:1b:55:31:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Apr 26 11:01:13 2026 GMT
            Not After : Apr 27 11:01:13 2026 GMT
        Subject: CN=ff3f419169ab03356d2670be3f82d32a1ad16800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:ba:05:b6:f9:59:3b:fe:fc:e1:26:db:53:
                    ea:0a:47:90:8d:15:c8:50:a4:e3:52:03:01:83:97:
                    5c:bd:e8:1d:85:4b:3a:50:a0:82:b6:18:bf:6d:3a:
                    96:bb:4b:f6:90:0d:98:8d:d5:60:36:b4:8d:b7:06:
                    bc:cc:60:d7:16:03:86:7b:5a:7f:4e:08:0a:7a:53:
                    29:9c:f9:9d:85:ec:ad:7d:1f:61:65:24:28:fd:5b:
                    c7:6a:fe:be:ce:ba:04:e4:75:e2:84:ee:63:de:46:
                    90:79:05:ed:20:fb:80:e5:e1:a8:ac:dd:52:4b:ec:
                    cf:e2:23:88:e6:b8:2a:b7:6e:c9:73:74:b7:49:14:
                    39:a3:fd:39:1b:a0:05:ac:87:64:9b:2f:8e:ef:bc:
                    c9:44:72:18:0a:b0:a6:9a:5b:d2:6e:32:92:5d:ab:
                    81:02:db:9a:fb:5a:10:15:91:bc:96:46:21:d0:48:
                    bb:15:09:4f:ef:03:48:33:b6:dd:e9:13:dc:74:9f:
                    dd:a7:c4:96:17:96:ce:89:2b:d7:00:aa:83:40:33:
                    5d:13:78:1a:25:a5:ee:ac:c3:c5:73:47:b0:8c:2d:
                    06:70:33:54:e2:a6:7b:b4:d2:8d:40:ae:dc:5a:16:
                    22:67:70:54:9b:39:ac:e6:de:0a:8b:7b:ff:92:28:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:41:91:69:AB:03:35:6D:26:70:BE:3F:82:D3:2A:1A:D1:68:00
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:d4:68:0a:5e:c0:80:d2:66:82:2c:9c:ba:3b:44:aa:f8:
         d6:99:eb:be:d0:d5:e6:24:9b:29:ea:57:c2:a3:c1:32:06:b0:
         ee:7e:3c:1e:e4:0b:99:61:5c:9e:01:8c:62:2f:b1:fd:74:d8:
         a6:41:33:59:e3:d6:15:ab:b4:b0:89:bd:17:d3:0f:0f:97:fc:
         8c:f6:1f:14:08:e6:d3:42:7a:93:77:85:d1:c0:b9:8b:cf:07:
         70:da:fb:7b:6e:84:4f:eb:e4:7d:ab:83:d9:a0:55:86:5c:af:
         92:29:33:1c:61:a6:20:98:f2:c9:88:c0:34:df:50:fc:09:f9:
         00:b1:72:56:3e:f9:72:bc:a5:d8:32:ed:cc:d0:88:d0:19:2d:
         a6:ab:1c:cd:f8:c2:9b:60:4b:19:15:18:89:1a:df:f5:57:2c:
         d2:53:35:07:93:92:9e:2d:37:e1:bf:24:af:a6:59:5e:fe:d8:
         a8:0f:e6:9a:0e:65:65:eb:1b:da:ab:40:47:24:b2:4e:c3:10:
         ec:b1:fe:7b:d0:21:a7:21:e3:db:d0:a1:ba:09:a4:57:bc:23:
         a0:66:32:18:41:b5:e0:0d:dc:23:0e:d9:71:67:22:25:7b:1f:
         b4:2b:cd:f0:c7:ea:22:f1:7e:a6:fc:2a:1c:32:0b:f4:1e:50:
         43:fd:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 20:10:46 2026 by rpki-client