Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          cBqN64bEy+bqFoGBxxsIj47i+gY6ey5nbhnGtXxDTto=
Subject key identifier:   11:70:EC:9A:ED:2E:E5:F3:DD:BB:FC:5B:08:EF:19:5B:44:7A:27:A3
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01A0811BF4D2F29056EBD5F4A89B5FBA1C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          08DB
Signing time:             Tue 08 Sep 2026 13:01:27 +0000
Manifest this update:     Tue 08 Sep 2026 13:01:27 +0000
Manifest next update:     Wed 09 Sep 2026 13:01:27 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: TdZYsO-nBk0NLokeLvScYa9N73Y.roa (hash: r/S7FQXjqen32U8kYC/M/6/1gv0ET8rSrBUQxbziIkI=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: NGzbEIu6g+GiNdDGIphzV6WCvFRwBmSD+L6JRooH1mM=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:81:1b:f4:d2:f2:90:56:eb:d5:f4:a8:9b:5f:ba:1c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Sep  8 13:01:27 2026 GMT
            Not After : Sep  9 13:01:27 2026 GMT
        Subject: CN=1170ec9aed2ee5f3ddbbfc5b08ef195b447a27a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:5e:74:ae:e9:ef:6c:28:20:45:fa:40:9f:
                    51:e0:40:02:98:51:00:77:21:ef:b2:45:5e:d2:76:
                    68:83:60:65:c4:de:9d:21:d8:50:be:09:db:a8:07:
                    71:42:6c:38:bf:10:ce:31:31:c3:d7:ed:e8:e9:ec:
                    73:75:f8:ea:2f:8d:24:2d:4a:70:f7:a6:0e:bc:1d:
                    89:a1:fe:6d:95:42:bf:6e:b1:3d:da:1d:b9:e4:a8:
                    e2:0f:d1:40:2f:08:07:1c:00:03:09:41:1c:89:41:
                    a9:72:a8:10:e8:d0:ee:0c:45:19:4e:2e:c6:76:63:
                    8f:03:6e:13:11:fd:7b:82:c2:70:1d:41:51:fe:27:
                    e0:7f:2d:8e:f2:fe:1f:03:12:36:ee:10:36:92:f2:
                    43:07:3c:4f:ab:6a:54:5c:13:69:44:75:8f:43:a8:
                    c7:bb:e9:4e:68:98:21:e5:a0:fb:d8:4b:ab:24:b5:
                    69:15:aa:7f:b3:39:95:09:a4:21:3b:1b:59:10:81:
                    44:f3:4e:be:6b:2b:3f:01:56:98:2c:61:e2:21:02:
                    cf:95:84:b3:d1:06:eb:91:36:38:3e:6c:1d:7b:8f:
                    00:2e:9a:be:b3:fa:82:04:96:9d:ac:3f:8f:c2:03:
                    d9:8c:00:d1:2e:2b:ab:c8:f1:ca:41:fb:b2:ef:54:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:70:EC:9A:ED:2E:E5:F3:DD:BB:FC:5B:08:EF:19:5B:44:7A:27:A3
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:ff:44:5a:ab:1d:f6:ec:44:9e:ea:e3:24:0f:0b:f0:c6:
         ca:43:65:d0:45:9c:19:69:9d:b7:63:2f:f5:5b:82:ec:ab:ff:
         a5:5d:07:c6:9c:ae:67:1a:a2:22:5c:74:cd:68:55:7f:95:19:
         7d:11:16:25:bf:cb:47:96:6a:27:c4:bb:cb:5a:d2:d8:31:e2:
         ca:e3:2c:52:c1:4b:9d:26:c4:85:79:75:7d:f7:e4:ff:4f:93:
         7a:7a:f8:25:e5:77:1e:9e:ab:79:15:c0:cb:56:75:24:47:e8:
         e2:02:91:dd:da:4a:c5:90:26:3c:4b:60:c6:5a:32:61:07:35:
         b3:de:ad:6c:56:8a:97:3f:0f:dd:77:ec:42:1e:65:88:2b:b4:
         15:74:95:07:70:5a:00:5b:8c:ec:ef:54:b6:dd:54:ad:60:b6:
         d0:43:6a:c5:13:e5:04:da:02:35:87:f3:c1:2a:c6:67:2b:29:
         3d:5f:dc:f1:c7:96:d5:39:b2:56:32:57:1d:02:27:42:50:4a:
         6b:b2:88:fc:e9:10:f5:40:03:c6:36:d1:19:2e:4b:30:9a:f7:
         e8:28:33:9c:28:c9:40:a7:15:4c:89:d4:e1:70:0e:6c:11:b9:
         93:31:ad:6a:ed:1d:74:57:f0:be:88:95:73:e3:8f:92:93:f5:
         97:58:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 17:13:29 2026 by rpki-client