Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          BudJtH5xqO4zpPLrk/1oePyIBFzJSc2owe4IbSfkm4k=
Subject key identifier:   DE:38:F6:69:38:7F:D1:28:72:61:5A:5F:24:B5:26:AD:EC:55:B5:E2
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01A0CB90213AAEF4CAE0EBBF5FDCA11997FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0902
Signing time:             Wed 23 Sep 2026 00:00:15 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:15 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:15 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa (hash: d+42K0KbbMljsHI/57qhDXnhu+FZGoaYhE5dNSHCWpo=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: Ps95dzyyndlI/p7ImSVFP/tspM4ElFiRu4wsDUQxirE=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:21:3a:ae:f4:ca:e0:eb:bf:5f:dc:a1:19:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Sep 23 00:00:15 2026 GMT
            Not After : Sep 24 00:00:15 2026 GMT
        Subject: CN=de38f669387fd12872615a5f24b526adec55b5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:53:b2:08:0e:0a:61:aa:52:21:ca:9d:d2:
                    cd:e0:ce:1d:c8:34:d2:86:33:b4:9b:26:4c:39:b7:
                    a3:c7:bc:d5:67:ed:37:ef:2d:20:39:ff:44:04:e0:
                    18:00:af:52:ce:09:18:0f:b1:fb:25:a7:47:6d:e8:
                    84:0e:65:41:49:1a:3f:26:ad:a2:9d:31:2d:22:fc:
                    b4:f1:d4:7b:81:de:f7:57:a9:b1:00:d3:f8:bd:e2:
                    d6:93:71:13:38:b9:d9:95:b8:67:6e:e1:5a:4a:5f:
                    2c:a6:4e:bb:17:26:54:12:59:00:1c:03:b4:f3:8a:
                    f8:c1:41:77:63:5a:ca:ad:e1:93:01:fa:f4:e9:b5:
                    ba:20:30:1c:ae:ed:58:30:0f:65:84:28:84:74:c6:
                    f2:7a:59:65:0c:f5:e9:2d:51:75:f1:b4:03:e7:b9:
                    70:01:11:14:5b:2d:af:ba:a3:ad:99:32:b1:8e:db:
                    47:25:80:18:91:56:99:20:dc:18:d6:5a:34:37:b5:
                    fa:52:3c:84:b4:48:92:a3:52:5c:48:cf:2c:f6:e6:
                    4e:a8:9a:fe:5f:ae:16:98:f7:8f:c2:1d:e0:1c:8c:
                    9b:ee:02:30:fe:37:74:90:c3:22:59:6a:dc:43:f4:
                    d0:2a:16:d0:e4:92:e0:3d:64:e1:24:77:c8:66:e9:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:38:F6:69:38:7F:D1:28:72:61:5A:5F:24:B5:26:AD:EC:55:B5:E2
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:3d:2d:34:a8:22:e2:0c:51:3e:ba:65:c3:e9:5e:b6:c5:
         f9:86:59:6f:c2:93:6e:2e:0a:b6:2a:98:b7:7e:2c:9f:9f:e9:
         36:32:60:9f:3a:ec:15:85:7b:80:9d:63:6a:59:2b:2b:91:18:
         77:51:03:1c:66:fe:e6:12:ee:2b:57:df:ad:c5:22:6c:12:f7:
         ba:78:ac:f6:d1:53:37:84:4c:4c:d6:3a:34:3b:b4:87:24:e4:
         1b:41:7e:76:50:87:00:d5:32:0f:22:9d:4c:7b:bf:8a:5b:f8:
         25:b9:e0:e1:48:29:97:ef:fd:d2:35:b6:bc:14:e5:e9:13:6d:
         01:3d:35:39:06:a1:eb:28:d1:10:53:7d:b0:a7:cd:79:67:63:
         08:ed:73:3e:9b:a2:1a:52:01:eb:5e:42:74:f6:51:02:83:f2:
         0f:34:6a:7d:c3:ec:8e:cd:e0:b8:5f:6d:ec:9d:a3:aa:69:00:
         f9:4f:e1:08:e8:d3:bd:49:56:a3:72:4c:64:b2:3e:16:a4:f5:
         c1:28:1a:34:62:11:f8:a5:f1:5b:9c:66:f8:62:4e:e8:71:bc:
         4e:7c:84:04:51:db:da:dc:fd:5b:ac:08:5e:30:e2:24:ec:e0:
         9e:f2:2b:3c:12:bb:af:3b:22:d1:d8:bd:7b:cf:49:0e:ad:ed:
         5e:eb:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:00 2026 by rpki-client