Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          WByupCKe3pzwfwrNAXvpYjvanfwyBuHpPBBlBs5kN5c=
Subject key identifier:   5A:B2:42:D2:DF:EE:98:0E:08:80:C2:4F:D2:7C:A0:07:D5:F1:E6:10
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01A1D9EF1205D2650D8DCE5E365A17C78508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          098E
Signing time:             Sat 14 Nov 2026 12:01:25 +0000
Manifest this update:     Sat 14 Nov 2026 12:01:25 +0000
Manifest next update:     Sun 15 Nov 2026 12:01:25 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa (hash: d+42K0KbbMljsHI/57qhDXnhu+FZGoaYhE5dNSHCWpo=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: N0IBW1CTrxpEsEJl1QvQGrlDGL44JYF1qKfImIBJ/Yk=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:ef:12:05:d2:65:0d:8d:ce:5e:36:5a:17:c7:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Nov 14 12:01:25 2026 GMT
            Not After : Nov 15 12:01:25 2026 GMT
        Subject: CN=5ab242d2dfee980e0880c24fd27ca007d5f1e610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:e9:7a:ce:2e:f1:ac:24:07:19:4c:44:11:
                    57:d1:74:30:94:6e:5d:a8:f5:6d:b9:ef:91:b3:b0:
                    b1:42:b4:ba:91:a1:02:1f:fc:56:3a:84:83:e7:1f:
                    aa:11:90:5f:81:c6:6e:03:3a:6d:e5:dd:1a:a2:96:
                    ee:79:f8:a5:a6:9d:ea:1e:c1:72:e2:73:be:e4:ea:
                    78:dd:b3:9c:11:9d:9c:ed:63:05:d1:dc:8a:06:e4:
                    da:6f:19:67:ef:f9:d8:dc:4f:d3:ce:8a:b6:c2:90:
                    3c:8c:8e:3a:14:10:c3:03:69:76:c3:02:e1:b3:00:
                    1c:73:13:d6:c0:15:f3:6a:92:0e:12:93:2f:55:c6:
                    ab:f7:23:9c:9a:96:c7:86:5c:9c:a7:ce:1f:50:a6:
                    63:2d:e7:e0:29:ac:c4:41:d8:34:2a:1c:94:82:88:
                    27:e2:11:45:97:00:39:d7:4c:41:79:e6:68:11:aa:
                    ae:37:bf:cb:cc:1c:11:09:91:a0:ae:14:9f:cf:95:
                    61:83:04:6a:81:70:51:0e:05:13:44:65:9e:43:85:
                    49:74:34:e5:21:c9:8f:15:31:8e:8c:e0:61:a9:23:
                    90:17:1c:5d:da:e8:19:8f:05:57:5b:40:d3:21:7f:
                    9e:37:30:4d:12:05:23:ac:c9:2e:13:26:ed:dd:97:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B2:42:D2:DF:EE:98:0E:08:80:C2:4F:D2:7C:A0:07:D5:F1:E6:10
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:d5:38:dd:e4:2c:27:ee:0f:05:b8:f8:ec:fc:ed:b0:82:
         f9:b0:9a:53:45:94:e8:3c:eb:74:a0:c4:dc:e3:55:e5:89:ae:
         e4:df:11:ab:9a:95:c6:fd:ac:1a:55:0f:99:26:29:91:b6:8a:
         21:b8:d7:f6:ed:ac:20:d0:ad:a3:ac:d0:b2:3a:ff:1c:a2:d1:
         62:45:72:74:0b:f4:a5:68:84:0e:9a:8f:49:7e:5a:fa:77:5f:
         de:ff:66:b0:32:ff:a7:0a:7f:9a:52:2d:77:31:33:3c:eb:0f:
         ab:c3:2e:98:60:9b:fa:1e:0c:85:4c:21:7a:95:a3:5c:40:7e:
         ab:58:97:c7:bd:e3:72:6b:cd:08:1d:78:83:22:02:61:3b:5f:
         c2:17:d2:46:a4:bf:fe:52:00:3b:aa:4c:cd:e3:56:62:f8:a3:
         9f:71:6a:6a:cf:46:32:b7:5b:4a:0d:7f:bd:4c:1c:dd:42:04:
         07:2a:ce:70:c8:49:f7:bd:30:3f:b8:9a:1e:d8:d1:25:0b:a5:
         33:b6:e3:89:c8:d1:8a:06:8a:e2:8d:f6:2e:ee:a9:c7:c5:67:
         70:82:22:19:15:d5:69:fb:2b:86:0b:fd:0a:bc:2b:07:c6:52:
         cd:b8:11:b4:ec:5d:87:ed:e4:a3:ef:40:97:96:93:3e:0c:8f:
         32:d9:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:36:34 2026 by rpki-client