Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          Vm6csYBAb3dfQ85l099kLovDl+XbsTMhKyREMM71O1U=
Subject key identifier:   18:45:3A:05:D9:CE:7C:67:40:74:8A:13:D9:60:5D:64:A9:61:F3:10
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019FA8D038D85FB091A8CFFE3EB209C25F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          16D7
Signing time:             Tue 28 Jul 2026 13:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:46 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: Ri8MbmIyIF/RY3FdVv4aOGfP6JwBMGac8zHdhj5Wb1o=)
                          11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          14: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
                          15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
                          17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
                          21: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          22: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:38:d8:5f:b0:91:a8:cf:fe:3e:b2:09:c2:5f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jul 28 13:00:46 2026 GMT
            Not After : Jul 29 13:00:46 2026 GMT
        Subject: CN=18453a05d9ce7c6740748a13d9605d64a961f310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:a3:20:fb:1c:ae:b1:f2:b1:28:a6:5b:c7:
                    94:a9:dd:6c:45:16:d5:4e:b6:c0:ba:c3:3d:b4:f5:
                    ee:d9:f7:92:f5:f4:c5:87:85:97:31:4d:ba:05:13:
                    d8:24:c4:2f:dc:f9:c9:38:50:4a:59:da:be:1a:3e:
                    dc:e5:a6:48:c6:b4:86:be:89:b9:72:08:03:18:5e:
                    cc:22:9c:0c:de:ea:05:02:93:b9:86:a8:c2:4d:db:
                    37:fe:6d:a8:15:11:9e:2a:1c:f3:93:e2:13:21:18:
                    4b:3e:ef:1c:a5:35:93:0d:52:30:dc:a0:a0:45:4f:
                    98:72:37:ec:de:3d:7e:46:32:f5:78:f0:c6:55:c8:
                    27:47:ec:6d:d7:14:d4:88:96:10:43:29:e6:f3:0a:
                    14:dd:ad:84:b9:fe:b0:e0:2a:ce:fb:2e:ce:bd:e8:
                    a2:a4:77:12:4d:56:a1:8b:55:4b:bf:51:bf:08:3b:
                    25:f9:29:8c:5b:f1:27:1b:1a:45:93:1f:64:aa:ba:
                    30:fa:6d:cd:59:26:ba:c6:e1:d3:96:36:fa:1b:da:
                    4d:11:98:f8:f5:09:99:6b:3a:2a:20:af:f2:76:e6:
                    63:a4:f4:e5:37:ca:91:66:4b:78:be:0f:49:5f:bc:
                    ad:76:b0:3d:8a:a6:89:a4:f9:0a:a7:32:27:fc:0d:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:45:3A:05:D9:CE:7C:67:40:74:8A:13:D9:60:5D:64:A9:61:F3:10
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:92:de:7f:f0:41:79:3b:b6:61:a7:52:61:52:28:df:8b:
         a6:25:f4:46:5c:75:b2:35:78:a3:64:cf:f2:7b:d4:61:ab:48:
         83:5f:5e:98:30:52:fc:3d:28:95:4d:2a:2b:2d:7c:98:91:a1:
         1d:7e:35:08:aa:1f:35:81:95:86:30:6a:e3:d2:84:8d:17:5a:
         49:bf:f2:1a:83:44:a6:65:af:f4:c5:b9:9c:cb:0f:6f:54:12:
         4d:ff:12:cc:d3:5a:95:9b:30:c7:b5:28:2b:ec:07:ac:a6:f4:
         69:62:19:31:bc:90:ce:1d:ab:6e:70:99:2f:5b:4d:f1:e7:d2:
         a6:5b:94:31:fc:0a:8a:f0:dd:11:4a:21:9b:47:35:36:c0:e8:
         5a:df:a9:1a:be:aa:ec:16:a4:a6:1e:17:02:de:ef:ab:ad:c5:
         dc:a0:3c:95:8b:f3:7b:87:0e:40:5d:21:6b:b9:35:ee:fc:9b:
         f9:65:7c:64:a5:cd:89:0e:99:04:6e:4d:46:51:7a:f2:84:15:
         29:8a:34:ff:64:bc:01:5f:14:27:51:9f:e7:7b:41:e6:90:fc:
         a5:0f:5f:64:a9:8b:33:4f:e5:80:01:d8:35:d6:c2:ea:7b:ca:
         db:e4:e7:9c:80:0a:d9:c6:ac:be:0b:1c:10:b6:66:3f:83:d7:
         08:27:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:28 2026 by rpki-client