Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          ktXRrGIn+IohWgsEmysEayhwrupPfyesEJlI3rvRUF0=
Subject key identifier:   43:F4:DA:C8:42:C9:B3:AA:F4:A5:45:13:39:7B:DB:82:08:0A:C7:3A
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019EBF23F35654EB002A46C43DCDAC775347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          07F2
Signing time:             Sat 13 Jun 2026 04:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:04 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: IWU5vOik01w_NWfHX4A-G0r-5ZM.roa (hash: CKiC3NBglteq1r3AOMYvyLn95+PeazbeHMCDjbAGPZs=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: sJZ7GBJINbYw+6g6XkTEQLziolXFA2USh4aKGp2JMyU=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f3:56:54:eb:00:2a:46:c4:3d:cd:ac:77:53:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Jun 13 04:01:04 2026 GMT
            Not After : Jun 14 04:01:04 2026 GMT
        Subject: CN=43f4dac842c9b3aaf4a54513397bdb82080ac73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:9d:fa:03:ff:92:1c:6c:79:aa:13:02:ea:
                    62:50:24:f3:86:5c:da:07:01:c4:b0:be:2f:16:7f:
                    84:16:ed:5f:4f:48:47:d6:9b:f9:1d:3a:6c:f5:67:
                    8a:fc:bf:4a:6c:c3:d6:dc:f7:aa:f1:16:e6:b9:52:
                    b0:0b:29:1c:2e:4d:6a:0c:40:5b:c3:db:dc:39:59:
                    d0:7b:f4:02:2b:7e:00:f4:6d:25:48:d3:84:ca:09:
                    1a:c8:ae:d9:75:9f:55:6b:b4:35:9c:84:76:24:75:
                    18:cf:10:81:17:fd:6f:68:2d:60:3b:b4:c0:b3:d7:
                    bd:f8:19:00:38:d7:b6:4f:47:52:c2:f0:38:69:55:
                    af:a2:78:5c:4b:0f:7f:2a:ca:97:00:e4:40:43:94:
                    d9:0f:54:91:ab:3b:d3:bb:22:bb:86:97:e0:6d:34:
                    6e:65:d6:c1:72:df:ce:93:26:28:a3:79:a8:31:8f:
                    73:36:5f:23:5a:b0:8b:86:4d:16:c4:d3:bf:e8:62:
                    3e:f3:c7:87:09:1b:df:95:1b:f9:d3:45:a6:80:03:
                    8b:51:39:e6:27:18:48:68:3e:c6:c5:d1:df:e3:28:
                    65:3e:f4:6b:0c:38:0e:72:e0:04:1f:c3:d3:e5:4e:
                    f0:70:cd:d2:78:55:47:bd:b3:43:d7:94:14:f7:5c:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F4:DA:C8:42:C9:B3:AA:F4:A5:45:13:39:7B:DB:82:08:0A:C7:3A
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:ac:2d:e7:69:a5:56:1e:95:47:90:1a:99:3e:b7:79:75:
         18:ce:04:de:15:7f:ee:37:68:62:bf:e3:26:02:d3:ba:49:ed:
         eb:ea:09:86:7a:bf:11:c8:a2:c8:b3:62:5e:3b:da:c4:f6:76:
         85:56:af:fd:96:c4:0e:f3:41:a3:7f:da:0a:40:17:3c:be:9f:
         39:3e:e3:be:50:c9:54:25:2a:8d:29:45:31:ee:74:ed:21:fa:
         93:95:29:3c:f4:aa:c5:e7:1c:48:79:a6:57:ac:b5:37:1d:69:
         f9:b7:85:4f:80:a0:82:f3:6b:c2:c9:e2:0b:a1:76:9e:37:d5:
         b9:d1:cb:0d:7c:ee:88:39:a7:40:a0:ae:b4:98:b2:7f:21:74:
         8d:6e:46:1f:8b:eb:48:d0:86:3d:fa:b8:fe:ae:e5:b4:f9:ee:
         93:60:9c:cc:32:e4:62:c4:7b:4b:5f:a4:6b:9d:08:e8:8f:73:
         e2:cb:0b:e3:fe:3d:30:03:c3:5c:59:92:38:97:a9:35:13:21:
         75:27:cc:84:9b:35:05:a1:c3:b9:d7:bc:c1:2b:9e:26:21:cd:
         70:18:78:fc:3b:6e:56:69:5f:68:44:8a:82:15:83:5f:c0:ce:
         7f:8e:db:54:fd:bc:f0:82:1d:68:a8:51:ab:cb:f7:af:f7:77:
         30:41:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:10 2026 by rpki-client