Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          nYO70G1Zk/gO6G4P/t4Uotk1zmsYOXkbhdNy4zUzHss=
Subject key identifier:   73:55:E8:5D:C9:5B:DD:F1:93:20:35:21:C9:C8:F7:51:B3:69:60:80
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01A175826425CD8E6DB154931C9023EAB4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          095A
Signing time:             Mon 26 Oct 2026 00:00:41 +0000
Manifest this update:     Mon 26 Oct 2026 00:00:41 +0000
Manifest next update:     Tue 27 Oct 2026 00:00:41 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa (hash: d+42K0KbbMljsHI/57qhDXnhu+FZGoaYhE5dNSHCWpo=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: +wpd9pjlU8SsNyjnN7dvnpj7mh1807o5zHo+365h4rA=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:82:64:25:cd:8e:6d:b1:54:93:1c:90:23:ea:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Oct 26 00:00:41 2026 GMT
            Not After : Oct 27 00:00:41 2026 GMT
        Subject: CN=7355e85dc95bddf193203521c9c8f751b3696080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:23:f7:db:d3:63:46:0c:45:4f:c9:e4:7c:
                    4b:1b:8c:36:95:71:e5:8e:84:44:43:dc:cf:ce:be:
                    f7:c2:b9:2f:4c:cb:7e:ae:d2:d5:ce:1d:82:75:c5:
                    48:fa:8a:bd:40:f2:70:54:4e:82:a6:9d:f7:f1:5b:
                    15:b6:1b:fa:9d:01:75:7f:c6:58:f1:eb:ae:28:de:
                    5c:86:89:6d:a6:f4:50:ec:66:4c:e8:72:e3:1a:a8:
                    6e:34:f3:24:5a:05:6e:01:79:d1:13:13:18:58:5d:
                    2c:81:2c:64:fa:7b:de:31:73:e9:e6:6a:4b:57:59:
                    c2:ed:04:e0:cc:19:85:41:10:ba:53:5a:94:d6:ff:
                    80:29:b0:63:cc:00:ca:14:ec:68:0b:09:05:a6:7c:
                    4a:8e:04:be:33:5d:ea:0c:94:5c:f5:29:cd:69:b6:
                    d0:d1:37:88:62:8b:fd:f9:c8:1e:af:02:0b:39:5a:
                    8e:d8:cf:2f:60:02:57:87:ff:15:89:f1:91:b6:0f:
                    00:7f:8c:6b:72:1a:53:9e:10:b7:fd:db:53:ae:63:
                    10:44:98:79:cb:68:a7:80:3a:c3:cd:28:f2:7f:16:
                    33:f6:eb:eb:ea:16:81:0f:aa:89:06:47:cb:b9:4c:
                    84:0d:30:6c:35:61:cf:0d:ac:91:93:62:75:45:75:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:55:E8:5D:C9:5B:DD:F1:93:20:35:21:C9:C8:F7:51:B3:69:60:80
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:50:cd:90:73:1b:71:09:2a:b9:41:89:f3:c4:db:20:58:0e:
         19:72:fe:6c:fe:d0:40:fc:a6:ee:57:50:c0:88:86:5f:a4:5a:
         19:ba:f4:30:23:d8:65:25:69:22:1b:12:ef:e8:ba:20:b7:9a:
         cd:c6:ce:76:c1:3a:59:ac:2c:63:21:a2:67:00:40:bd:21:53:
         dc:9d:6e:bd:b2:99:f6:f8:76:0a:e1:27:8b:2b:6a:2b:57:3c:
         51:ce:0e:35:56:7b:d0:9c:ae:e2:fe:f1:92:ac:4c:97:90:29:
         1c:e8:8e:db:f5:ee:f7:2c:4a:b5:3e:4f:a3:e8:2d:13:f5:5f:
         a7:f4:d1:07:d1:ac:eb:86:b0:92:d4:3f:b9:11:ff:ed:8a:b3:
         9b:42:67:8b:5a:45:e7:0a:d3:5b:e2:2b:17:93:76:8b:14:70:
         51:2c:57:b0:cf:83:e9:f8:00:c2:b1:1b:0a:86:3c:5c:42:e8:
         00:32:bf:d4:9b:80:86:a9:0a:d1:0c:29:6b:23:c5:ec:30:87:
         98:c1:7c:be:2d:99:85:cd:40:23:31:dd:84:80:c7:f7:f2:1f:
         50:65:14:e7:ac:7c:27:71:04:19:50:3f:42:e9:75:a8:00:18:
         fa:43:6c:1d:17:84:36:c7:4c:43:9f:2e:ab:b6:a1:81:e2:81:
         79:e2:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:37 2026 by rpki-client