Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          /4qIjOsBiUSZOC3n4O6YQX6awSO2zyPNpD+2MXgMLT4=
Subject key identifier:   17:A1:AE:EF:F9:57:66:F3:79:8B:37:14:40:6C:07:44:57:6D:3F:AD
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019EA9E54445A82E3D4859D91142FC41387A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          07E7
Signing time:             Tue 09 Jun 2026 01:00:35 +0000
Manifest this update:     Tue 09 Jun 2026 01:00:35 +0000
Manifest next update:     Wed 10 Jun 2026 01:00:35 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: IWU5vOik01w_NWfHX4A-G0r-5ZM.roa (hash: CKiC3NBglteq1r3AOMYvyLn95+PeazbeHMCDjbAGPZs=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: EzfwMTP/ANc6klVbsYbTmPdqUBkW46WbJ2bIq2ZU2IQ=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:e5:44:45:a8:2e:3d:48:59:d9:11:42:fc:41:38:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Jun  9 01:00:35 2026 GMT
            Not After : Jun 10 01:00:35 2026 GMT
        Subject: CN=17a1aeeff95766f3798b3714406c0744576d3fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:90:c1:01:49:a7:82:59:eb:ef:68:9f:e8:
                    e1:6e:b2:89:86:5b:e3:34:94:b2:c4:18:dd:47:f3:
                    7c:57:04:c9:33:a2:c8:f4:02:84:75:08:46:26:4f:
                    8d:b9:5d:f0:54:2e:de:a8:2f:f6:b1:2a:8d:31:3a:
                    cd:20:a0:9b:85:fa:8b:38:ec:93:87:d8:fc:f6:13:
                    d2:8e:94:29:64:5a:47:5a:4d:43:91:61:04:a8:6b:
                    06:f5:a5:bb:03:fd:c1:f9:f1:90:35:fe:aa:c9:cb:
                    df:33:3c:92:e6:d0:72:47:d9:82:8b:8e:ac:80:e8:
                    3e:32:87:f2:6b:fb:50:ef:72:29:32:80:a7:4b:ab:
                    93:8e:36:2d:55:23:01:cc:3a:65:f1:19:a7:b6:57:
                    3c:76:c8:46:0b:c8:ae:b8:d0:31:fc:5a:b2:ec:aa:
                    14:51:bd:81:76:80:49:69:29:0d:ec:91:99:49:bb:
                    9a:f3:37:de:22:c2:05:e8:5e:f7:f8:13:dd:ef:80:
                    b7:d0:0d:f6:cf:11:f9:d1:18:6b:53:6e:e6:45:58:
                    df:7f:94:9e:7c:e8:1c:fe:5d:29:1c:c0:f5:15:ba:
                    41:88:e8:1a:b0:60:57:d8:8e:99:b4:35:dd:b2:9b:
                    a7:2e:59:38:4e:82:d3:3b:04:73:12:57:2c:39:b7:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:AE:EF:F9:57:66:F3:79:8B:37:14:40:6C:07:44:57:6D:3F:AD
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9b:b1:ad:0b:f3:91:60:25:75:5a:7e:3f:1e:e2:d5:e3:35:
         d3:39:97:67:c8:6d:98:b3:6a:98:89:3d:bf:b8:42:ae:ef:70:
         64:47:c5:65:4d:aa:95:46:34:15:3b:9c:7d:01:28:ac:90:5e:
         9a:07:0c:2e:f6:5e:17:16:7d:e3:5e:17:d1:80:a9:ec:27:0f:
         3f:52:98:a5:40:98:3f:d3:85:2f:cf:35:4e:9b:84:c7:6d:ca:
         f8:bf:08:02:d9:5d:e5:9c:3d:91:8b:37:a4:cb:a3:5b:ab:6f:
         04:56:97:6e:e2:7f:01:d5:12:c1:81:94:93:c5:75:2e:89:58:
         5c:1d:d2:6c:cb:01:ed:e9:40:dc:3a:68:90:b2:9e:8d:2f:14:
         36:51:73:b2:aa:3d:a6:36:01:2c:95:1e:b1:a2:d8:6f:2d:d7:
         c1:f1:46:cb:77:6e:73:d8:52:e1:be:82:cb:9d:a0:92:7c:1d:
         e8:9a:a7:ac:88:94:bb:a8:15:71:23:4e:77:8a:26:f4:27:10:
         9b:c7:01:ba:4b:37:43:6d:37:fa:f1:d9:ed:50:54:db:b7:85:
         6b:f5:02:e9:0f:e5:96:9c:9f:19:bb:3e:23:a9:41:ce:04:81:
         b6:7f:79:84:80:a4:39:fa:92:3a:60:1e:02:0d:0b:80:69:1e:
         18:05:de:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6p5URFqC49SFnZEUL8QTh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjYwNjA5MDEwMDM1WhcNMjYwNjEwMDEwMDM1WjAzMTEwLwYDVQQD
EygxN2ExYWVlZmY5NTc2NmYzNzk4YjM3MTQ0MDZjMDc0NDU3NmQzZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/KQwQFJp4JZ6+9on+jhbrKJhlvj
NJSyxBjdR/N8VwTJM6LI9AKEdQhGJk+NuV3wVC7eqC/2sSqNMTrNIKCbhfqLOOyT
h9j89hPSjpQpZFpHWk1DkWEEqGsG9aW7A/3B+fGQNf6qycvfMzyS5tByR9mCi46s
gOg+Mofya/tQ73IpMoCnS6uTjjYtVSMBzDpl8Rmntlc8dshGC8iuuNAx/Fqy7KoU
Ub2BdoBJaSkN7JGZSbua8zfeIsIF6F73+BPd74C30A32zxH50RhrU27mRVjff5Se
fOgc/l0pHMD1FbpBiOgasGBX2I6ZtDXdspunLlk4ToLTOwRzElcsObcR+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBehru/5V2bzeYs3FEBsB0RXbT+tMB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZuxrQvz
kWAldVp+Px7i1eM10zmXZ8htmLNqmIk9v7hCru9wZEfFZU2qlUY0FTucfQEorJBe
mgcMLvZeFxZ9414X0YCp7CcPP1KYpUCYP9OFL881TpuEx23K+L8IAtld5Zw9kYs3
pMujW6tvBFaXbuJ/AdUSwYGUk8V1LolYXB3SbMsB7elA3DpokLKejS8UNlFzsqo9
pjYBLJUesaLYby3XwfFGy3duc9hS4b6Cy52gknwd6JqnrIiUu6gVcSNOd4om9CcQ
m8cBuks3Q203+vHZ7VBU27eFa/UC6Q/llpyfGbs+I6lBzgSBtn95hICkOfqSOmAe
Ag0LgGkeGAXelQ==
-----END CERTIFICATE-----
Generated at Tue Jun 9 04:51:20 2026 by rpki-client