Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File:                     06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier:          jlOZO2btMrwZ0YqbPnTcpkbCG2BSxrHn6MHzWQ27rok=
Subject key identifier:   4F:53:06:89:5D:4C:FC:97:72:7C:C4:10:7C:10:1F:75:A2:C5:47:71
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer:       /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial:       019CAAC71DFA4EDC42669DFE8657A799F7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number:          0504
Signing time:             Sun 01 Mar 2026 19:01:41 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:41 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:41 +0000
Files and hashes:         1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: X8im6JAQ1LBE8nzGDn5bSOmNitk34yiMnhiswii0AGA=)
                          2: rIj8wufE-prK99O3Ylq0RCBcGE8.roa (hash: m+lWR0TLu74BujfNz39crAI9zcqKkYdaZMG20ho5wX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:1d:fa:4e:dc:42:66:9d:fe:86:57:a7:99:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
        Validity
            Not Before: Mar  1 19:01:41 2026 GMT
            Not After : Mar  2 19:01:41 2026 GMT
        Subject: CN=4f5306895d4cfc97727cc4107c101f75a2c54771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:3c:d3:04:6e:1e:dc:11:5f:bf:f0:d9:2e:
                    75:a8:23:5c:98:39:9f:94:ac:be:f4:66:61:ee:2e:
                    7a:c3:8b:5d:5a:84:e4:24:bd:55:6c:ec:16:87:bf:
                    66:4c:28:4a:86:75:53:c9:3f:14:55:9b:b0:c5:fc:
                    7b:fe:87:31:9f:7e:71:fa:b9:4a:18:da:c1:ac:ee:
                    bf:c5:c9:5f:c1:eb:44:59:13:41:ae:41:be:a2:05:
                    60:b3:fd:14:ba:a5:47:ab:b7:d3:84:43:38:bd:ca:
                    b2:7c:13:ba:d5:ba:39:85:72:61:9a:2d:f7:f0:09:
                    59:14:ba:28:e2:f7:ac:a0:0a:cd:d7:53:2e:0e:83:
                    e7:07:e6:0e:b8:c3:ff:67:c6:82:78:ac:2d:05:2c:
                    c8:6d:b8:e4:05:b5:b5:03:7f:00:9c:4f:a8:2a:92:
                    ed:8d:8a:83:9b:18:80:e5:d1:9b:d4:e6:ea:e7:a2:
                    28:be:b5:a4:ef:98:ab:97:ef:4c:e5:e6:68:7b:82:
                    5e:24:7e:9b:f3:8f:4c:e6:a7:24:b9:b9:51:f4:12:
                    85:9b:7f:93:3e:7a:42:bf:37:50:cb:bf:ca:b8:4f:
                    7d:36:2c:34:af:5f:bd:69:a7:61:11:79:c0:f8:27:
                    3f:ab:38:7e:3e:fc:95:f3:2a:79:8c:d2:cf:af:05:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:53:06:89:5D:4C:FC:97:72:7C:C4:10:7C:10:1F:75:A2:C5:47:71
            X509v3 Authority Key Identifier:
                keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:97:bd:7b:33:9f:7c:b6:41:2a:02:27:90:33:af:9a:fa:8c:
         6b:a0:dd:52:92:cd:46:09:61:83:de:1b:e9:3f:bf:17:65:47:
         82:47:12:33:30:99:00:db:20:62:9d:1a:46:45:b4:00:f5:05:
         3b:49:38:96:88:a8:22:26:14:a1:af:c2:6f:2f:ae:f5:1c:fd:
         7a:52:27:05:f0:af:4a:3b:89:5f:b5:4b:65:d3:a7:8b:ee:58:
         e6:e6:78:2a:e2:2b:2e:72:61:97:69:6a:9b:73:ce:57:05:be:
         91:b8:d4:d3:4b:ad:a0:0e:6a:6c:b0:13:77:ed:f7:0e:26:15:
         46:78:c9:8d:82:87:31:7a:38:e3:af:18:c5:8e:89:61:be:4f:
         d3:cf:ee:28:a7:a7:1d:14:ee:6a:c1:d7:78:a4:4b:76:34:f2:
         f3:c0:57:38:5f:f6:db:0b:65:9d:4b:d2:80:ed:81:92:7a:dc:
         ba:7b:3d:31:16:9f:8d:64:43:45:98:75:f9:af:a8:3e:3a:be:
         9c:f1:83:64:11:3a:80:b5:4d:92:d6:63:b1:f9:91:6f:49:83:
         e5:80:d9:a0:e9:44:f3:75:a5:47:36:37:29:e9:ff:09:f5:40:
         35:a1:cd:23:c4:79:dc:23:2c:43:6d:65:6f:45:30:dc:1f:c0:
         4f:7c:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:28 2026 by rpki-client