Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          kfZU8xjSaPwaj+vNHD3zrxmnIkK8c3B197lOTzgXkII=
Subject key identifier:   36:C5:A6:45:4D:7C:0C:18:1B:07:11:2D:2C:3B:39:B6:DA:6B:65:DF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019EBEB65C41CA9FDDB505F2D1E2C8C96DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          165D
Signing time:             Sat 13 Jun 2026 02:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:22 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: UdFaVoMRidVVqg51jbLBbGAy8tPtcXsN1tIaXHYLL6c=)
                          13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:5c:41:ca:9f:dd:b5:05:f2:d1:e2:c8:c9:6d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jun 13 02:01:22 2026 GMT
            Not After : Jun 14 02:01:22 2026 GMT
        Subject: CN=36c5a6454d7c0c181b07112d2c3b39b6da6b65df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:29:1f:a7:69:46:f7:66:8a:bd:9b:99:09:
                    0a:21:ee:e3:9a:0c:f0:24:92:39:46:1e:76:d5:f5:
                    18:a7:7c:45:81:09:67:3f:f1:10:1f:24:6d:fe:8e:
                    73:d1:ab:15:7a:66:f7:dd:a7:c0:9e:ef:9d:d9:b8:
                    1a:3e:7f:bd:d0:d5:e9:81:55:eb:96:de:77:39:4a:
                    99:4b:7c:34:6b:e2:db:f5:ff:8f:88:c9:05:15:0f:
                    a3:b5:e6:90:c3:09:f0:9f:b3:a1:e3:4a:30:80:a0:
                    6b:c3:e9:05:9e:e1:00:e6:f1:1f:9d:e0:c5:c8:e4:
                    52:ce:53:14:2a:f9:d7:bd:9e:62:a9:af:dd:41:13:
                    a0:18:ba:55:a1:85:ac:60:1f:13:1e:a1:f0:44:3d:
                    ac:08:cc:89:b6:6d:4d:77:fe:78:8e:4f:ff:5b:53:
                    5b:8d:36:a7:ac:57:00:0c:f2:69:fe:1e:cc:9d:8a:
                    00:77:25:b5:fd:22:f0:f6:f6:4a:d4:c3:aa:eb:1d:
                    f2:10:70:3a:a7:d3:ad:a5:47:5e:4d:5c:93:6c:13:
                    4f:65:85:32:09:e5:5c:f1:e3:f0:73:73:8e:22:58:
                    2c:15:97:a2:dd:fe:41:9e:01:c3:0c:4c:48:a2:a7:
                    52:e8:a0:23:9a:69:c0:58:51:09:36:41:3e:b2:de:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:A6:45:4D:7C:0C:18:1B:07:11:2D:2C:3B:39:B6:DA:6B:65:DF
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:84:58:a7:e5:01:e9:23:42:c4:86:15:24:52:33:06:0b:
         f7:de:c8:6a:56:02:0f:64:b3:d4:73:51:20:6a:36:b1:fe:b2:
         d5:11:81:8d:66:85:5d:08:05:76:cd:16:d3:0b:30:e5:43:ca:
         d2:a7:1f:2e:38:06:2a:97:7b:e5:f1:32:b9:32:c6:45:03:bf:
         72:c3:1a:ee:cc:bb:cf:a5:58:bb:e8:0f:dc:3a:d7:14:5d:ce:
         75:ae:06:d5:89:72:bc:42:46:2d:74:e5:97:15:67:62:86:78:
         84:26:7c:49:47:09:6c:58:c7:b7:f9:24:ba:52:c0:ed:fd:e9:
         65:47:68:3e:95:11:79:67:a4:44:fb:81:65:c3:97:27:c0:29:
         4a:78:22:9f:28:0d:ea:be:6c:de:28:7c:03:4b:03:c0:f4:cb:
         ed:b4:f3:47:ad:57:50:bc:42:0a:e6:a4:9a:bc:83:b1:a3:33:
         3b:6e:6b:af:c5:f1:9c:37:e0:a4:bf:e0:b9:80:47:88:68:db:
         6a:56:84:19:70:10:59:7d:11:f2:ba:97:73:01:7b:4d:f0:d2:
         36:8a:43:40:c9:77:1d:8e:81:4d:6c:8c:ea:89:93:57:ac:fe:
         04:89:6d:1c:62:7b:c8:48:3c:4c:a5:af:94:9b:6f:3d:0c:d2:
         d5:27:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:03 2026 by rpki-client