Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          VxAy/u0TVFYUxivenAg5hqRYRUY4jivVJMNtxa/znPo=
Subject key identifier:   16:C2:33:EC:74:33:C3:39:1A:6E:26:35:DD:E5:4F:98:1C:CA:B2:4C
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019CAC0FE46274DFD5D88220F14DF6CFCF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          06DE
Signing time:             Mon 02 Mar 2026 01:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:48 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: Wwry0pTyAtK1A6b2shrM5APPbZI.roa (hash: CHi4AVwGvGrl5tChQ0TUYjHIVyCz1akOxd1fug9TFQ0=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: qwdyZZMRNMPAotbJjjpqMbIqz6tlagJcGfUFt9JbnDE=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e4:62:74:df:d5:d8:82:20:f1:4d:f6:cf:cf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Mar  2 01:00:48 2026 GMT
            Not After : Mar  3 01:00:48 2026 GMT
        Subject: CN=16c233ec7433c3391a6e2635dde54f981ccab24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:a0:96:4f:79:c1:c5:51:d6:54:58:a0:90:
                    56:4b:4b:ed:bc:54:3c:57:76:79:64:a4:f0:41:3f:
                    8a:91:f1:4a:90:cb:64:1d:30:7b:30:9d:9b:4d:c6:
                    50:c6:1c:e9:04:e8:d2:9a:02:fb:73:da:9e:8f:c4:
                    ab:49:be:98:59:2c:15:39:41:da:2c:8a:32:75:ac:
                    a7:d8:b9:e2:96:29:f4:c2:02:c7:16:d4:35:62:f2:
                    1b:d4:3d:99:7d:04:c8:f9:7a:5e:96:81:53:3c:df:
                    6a:79:44:10:9f:1f:c9:76:35:a8:34:3d:ff:e8:30:
                    45:c6:8e:3b:e1:38:65:42:1e:dd:75:61:e5:5c:79:
                    2b:eb:4f:66:4c:94:87:ea:56:cf:57:17:7e:91:66:
                    86:c7:67:51:00:94:4c:4d:38:4f:6e:1b:5e:50:a4:
                    2b:de:b1:e2:02:07:5c:b7:7e:84:e3:0a:8c:08:4b:
                    4f:da:73:a3:dc:4b:f3:3c:96:4c:90:0a:d5:2e:ca:
                    50:ba:4b:a8:64:64:db:d7:5c:7c:8c:71:84:54:b9:
                    85:ba:f9:25:da:03:ce:90:66:64:3b:27:c5:ab:e4:
                    8c:da:c9:0b:e0:3d:39:6e:01:60:d0:55:6f:2e:0a:
                    cc:3c:2b:23:78:f3:bf:9a:d8:89:52:e0:fe:4c:cf:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C2:33:EC:74:33:C3:39:1A:6E:26:35:DD:E5:4F:98:1C:CA:B2:4C
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:c2:01:3d:e3:6a:7b:f0:c3:0d:18:4f:59:c4:ef:f1:18:
         76:7b:19:7b:59:02:cf:1d:6b:ab:60:61:8b:22:f7:e7:7e:1d:
         66:c6:29:44:cd:c2:ee:ea:97:9e:81:96:e7:cf:4a:5e:b8:c7:
         01:34:cb:c6:3c:4a:9b:3e:67:46:55:df:6e:0c:bb:41:bf:f7:
         bd:c9:1b:68:bd:75:47:ef:69:4c:6a:8e:5b:cc:e8:b0:c4:4e:
         69:fd:38:80:f9:59:3a:0d:86:6c:cc:7f:bd:fd:64:d8:fa:25:
         91:1a:89:68:f9:b6:8b:89:72:dd:d9:c8:bd:da:c5:a1:65:ee:
         c4:b3:17:bc:b9:b4:26:c8:b9:54:13:d7:61:94:0d:1a:fe:ee:
         f4:6b:d7:b4:8c:b4:5f:57:08:1b:34:4b:1b:15:fd:3f:0d:f6:
         64:52:0b:12:66:9c:c4:5d:ae:ce:ac:9b:33:65:b0:90:fc:52:
         8c:ac:db:64:0b:c1:8a:b3:2a:8f:01:d6:cb:c0:4e:3e:7e:53:
         53:19:ca:72:c7:dc:e4:e0:8e:9d:7e:a4:cd:e9:15:7d:f4:e6:
         c5:d4:14:3a:b2:22:bf:9e:13:79:2c:30:99:5c:26:fc:d6:98:
         31:b9:bb:0b:30:26:9b:b6:0d:45:1e:bb:da:34:52:39:2f:6a:
         a7:7b:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:42 2026 by rpki-client