Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          lbGWfjrJByeJ3+EMZR5zFtXBXwF3m3GcsCKLb2JfkWM=
Subject key identifier:   E0:F1:2D:F9:60:AA:CD:F2:3E:D4:34:C2:4E:C9:5B:1E:C3:44:1F:D1
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01A0CD7EE1708A449BCF99198BBAEBAFE8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0903
Signing time:             Wed 23 Sep 2026 09:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:39 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa (hash: d+42K0KbbMljsHI/57qhDXnhu+FZGoaYhE5dNSHCWpo=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: hi0Xc9Mm0avTlrxvEMOaSHHh8ikN+UePBPRlJdFc8d8=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:e1:70:8a:44:9b:cf:99:19:8b:ba:eb:af:e8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Sep 23 09:00:39 2026 GMT
            Not After : Sep 24 09:00:39 2026 GMT
        Subject: CN=e0f12df960aacdf23ed434c24ec95b1ec3441fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:9a:96:59:a5:65:ba:54:6b:10:eb:a3:13:
                    ec:5b:12:c0:bc:1f:5a:90:11:01:e6:4b:0a:22:1d:
                    7b:cd:8b:f7:23:fb:13:63:41:11:97:71:75:b5:95:
                    cb:34:8a:f3:c8:18:77:32:22:44:de:7a:fc:f5:25:
                    e0:69:73:89:e7:a7:9d:49:28:e2:80:c6:db:ac:96:
                    e7:c0:3f:d9:00:99:f7:91:cb:72:bd:c6:3b:a9:a2:
                    a6:fa:5a:10:e7:74:58:f6:e4:45:65:26:1a:c4:5a:
                    bf:d2:23:29:d3:e2:78:04:ca:ab:16:00:a6:f3:d8:
                    8d:07:78:1e:7c:cb:a4:2a:a7:c5:30:eb:fa:f4:f2:
                    65:72:9c:9a:39:2a:15:3b:bc:8c:c2:ed:14:45:66:
                    1f:1c:7a:28:05:5d:43:39:cb:c4:5e:ad:9e:54:06:
                    35:a6:be:80:04:e4:29:fe:5b:d4:ce:73:5c:3f:06:
                    b2:f0:9f:13:d1:ce:74:38:7a:e1:2a:d6:ae:8d:dc:
                    d1:76:d5:2f:67:25:5d:50:c8:23:e4:49:21:73:50:
                    94:b2:0c:4d:00:02:c8:4a:16:23:a5:07:67:1d:1c:
                    b2:24:dc:ed:87:34:5f:95:f4:af:05:f2:a3:39:dd:
                    56:76:89:83:73:73:c3:26:f2:97:58:c9:ed:a4:fe:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:2D:F9:60:AA:CD:F2:3E:D4:34:C2:4E:C9:5B:1E:C3:44:1F:D1
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:01:e9:c4:11:d3:21:05:32:a2:7d:59:e6:1c:00:12:87:
         54:d8:3b:74:a3:66:d9:ee:a4:94:16:7f:81:71:20:6b:5c:7c:
         d3:ff:19:b2:ee:57:b5:91:a1:b4:cf:5c:d8:4f:3a:f0:24:7e:
         de:6c:36:76:3e:97:e7:fe:fc:a9:cf:f4:3a:b5:2f:97:2d:9c:
         83:58:2b:51:79:72:e0:d0:d5:ce:cb:73:80:0d:90:5e:5a:c9:
         fc:1c:69:70:95:6b:2b:b4:e3:df:93:f2:01:fd:0e:32:a8:a5:
         95:9f:06:b8:a1:79:73:1e:f7:3f:03:f5:97:62:d1:e8:b3:dc:
         1c:cc:cb:99:41:0f:36:34:19:c0:c3:f9:b2:de:5e:04:fc:31:
         a2:31:7f:cb:53:28:34:10:42:68:7b:31:78:69:33:1f:f3:ad:
         d0:6b:f0:52:51:7c:b2:c0:2b:72:05:d3:9d:5f:88:5c:86:bc:
         6e:53:c7:c5:21:f0:be:a0:23:59:fd:44:7f:00:af:ba:66:30:
         0c:f6:24:42:dd:2f:11:e4:d5:91:06:f7:9c:0e:03:78:5a:0c:
         e7:d8:b4:20:41:6e:99:3f:86:86:e3:65:f4:0f:b6:08:26:9a:
         03:e0:5a:c5:3b:b3:63:e3:75:cb:bf:7a:fa:93:43:a0:e3:8c:
         fc:35:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:57 2026 by rpki-client