Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          KkFvO7rUMde+fF2usJlfRgaX2GGweC5XwgECjf8rxaI=
Subject key identifier:   82:D8:2F:C2:F9:DD:56:43:4F:A4:18:15:91:CE:7D:D2:97:8F:F2:9A
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019D25BA9C0851357A11393D8195958C59F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          071E
Signing time:             Wed 25 Mar 2026 16:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:19 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: IWU5vOik01w_NWfHX4A-G0r-5ZM.roa (hash: CKiC3NBglteq1r3AOMYvyLn95+PeazbeHMCDjbAGPZs=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: fqFIp66ceLRVxkyI5rQGQHCj+Ns1MPkGbV3XrYsYigc=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:9c:08:51:35:7a:11:39:3d:81:95:95:8c:59:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Mar 25 16:01:19 2026 GMT
            Not After : Mar 26 16:01:19 2026 GMT
        Subject: CN=82d82fc2f9dd56434fa4181591ce7dd2978ff29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:d9:98:31:50:c3:82:ff:99:69:aa:bf:03:
                    e1:78:f6:f7:2f:08:12:37:be:9d:8e:44:dd:69:be:
                    1b:02:71:69:30:01:5b:7d:f0:44:44:83:6d:de:35:
                    f7:10:b8:a7:23:11:dd:3a:a3:18:61:21:93:58:21:
                    08:17:75:0a:de:bd:04:0d:46:4e:7b:98:55:9f:74:
                    91:15:a9:0f:68:ff:84:55:4f:36:04:19:a1:11:95:
                    3a:d0:0a:3e:04:d4:95:d2:6b:90:1f:17:6d:2e:e6:
                    0b:20:41:8c:bb:bc:0d:c7:64:b2:93:21:67:0e:28:
                    86:da:03:f0:79:91:92:7f:3e:df:14:4a:83:82:14:
                    fc:e0:95:c7:98:76:c4:12:48:b0:e3:5f:9f:33:88:
                    08:e2:f4:a0:88:28:c5:0f:1c:ba:89:1c:6a:21:64:
                    95:ea:36:9f:d9:c1:94:14:ce:42:f2:68:8e:60:f4:
                    fb:9f:2f:8b:fa:5b:4b:11:e9:90:70:bc:67:0d:ff:
                    c7:b3:52:f7:b2:dd:2b:09:ab:7d:9f:96:14:09:ce:
                    b1:39:cd:df:4d:e3:b3:37:b7:02:f9:35:5c:1d:63:
                    54:62:8f:d0:07:7e:9f:9b:aa:f8:55:85:5b:3d:5a:
                    78:15:5a:ef:70:01:c3:32:72:1d:bc:c8:9e:98:4c:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:2F:C2:F9:DD:56:43:4F:A4:18:15:91:CE:7D:D2:97:8F:F2:9A
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:ca:9b:d1:64:02:92:b7:bc:4f:c9:c9:cb:19:55:ed:d4:
         6f:27:5c:de:9a:f2:41:9b:c1:3a:2b:09:bd:e6:6d:29:8c:db:
         a9:0d:f3:a2:9b:ea:d1:6d:50:b5:d4:cd:3e:c9:7a:13:ed:db:
         9d:cc:98:ee:b8:f5:7d:e2:26:cd:66:9d:54:23:3a:07:ac:1b:
         bf:7f:35:e2:d9:70:47:20:27:0c:11:12:a8:5c:21:95:a5:42:
         91:2b:a9:d8:f4:7b:85:2b:4c:dc:14:dd:50:aa:55:98:ca:7c:
         f7:64:44:fd:78:01:42:db:b7:2e:1e:88:8a:26:89:13:a8:45:
         a2:2e:70:33:7f:06:2a:35:80:ca:dc:23:98:10:70:e7:9e:25:
         6b:f0:90:b2:20:c2:61:a4:37:d5:df:6f:ab:a1:c5:02:0a:c5:
         ac:cf:c2:f4:c9:bd:e6:db:26:ab:32:d7:4c:b0:ef:62:ad:48:
         52:59:dc:c6:46:34:18:54:1d:82:c6:27:f6:db:7c:b9:1f:7f:
         56:19:e3:33:41:3b:8b:c3:2b:eb:93:9a:f1:f4:db:69:85:c8:
         81:60:1e:55:cd:d6:68:cf:a0:d9:da:20:c6:4d:48:0c:09:85:
         a2:9c:97:5a:f2:fd:af:d2:0e:60:11:5d:e9:93:f3:9e:8f:17:
         b4:aa:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:04 2026 by rpki-client