Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          RGqyEOBvbIQ3K846xjgrnl7Y1qtHcuOT5WgnY1bcK3g=
Subject key identifier:   06:E8:AD:30:C4:55:8E:5F:D7:88:86:F0:25:CE:4A:04:65:A4:F4:A9
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       019CABDA04D91F8552C7EA1AC4EC5B488DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          4C
Signing time:             Mon 02 Mar 2026 00:01:57 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:57 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:57 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: JHcVKen3W8Uq5wuRJtEHIzPmqZVRENR9nbMjNsAidMM=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:da:04:d9:1f:85:52:c7:ea:1a:c4:ec:5b:48:8d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Mar  2 00:01:57 2026 GMT
            Not After : Mar  3 00:01:57 2026 GMT
        Subject: CN=06e8ad30c4558e5fd78886f025ce4a0465a4f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:8b:c5:8c:af:8c:8f:a7:7a:21:10:3f:f3:
                    67:38:ca:ac:a2:09:4e:4a:f3:e6:aa:da:52:6e:cf:
                    d9:c5:11:be:e6:12:c8:52:4c:96:2f:05:e1:13:1c:
                    29:83:02:f2:db:7f:2f:59:dd:d2:b9:d9:c6:66:37:
                    db:30:25:05:70:9a:b1:59:ad:51:55:ae:2d:99:da:
                    b4:46:d1:51:a4:55:d8:cd:80:74:59:38:c0:4b:8c:
                    7a:d8:5a:40:d6:b3:60:a5:7f:99:fc:ce:82:59:97:
                    9d:0d:40:8c:81:bf:55:3e:a8:09:cf:3c:53:d5:db:
                    5c:f1:5f:3f:f5:4b:9c:bd:5c:01:4c:59:df:c1:9d:
                    ee:eb:5d:7f:d8:d6:83:30:2a:69:22:49:a5:2f:00:
                    b8:2b:45:eb:b9:5b:a2:7f:57:8e:fb:59:06:64:1a:
                    f4:ef:7c:4e:d8:59:1f:15:aa:20:85:99:17:e6:70:
                    8a:fd:f5:3b:97:5e:d1:69:72:1b:18:86:82:08:97:
                    43:81:02:5e:ff:83:47:5b:85:4d:62:c2:89:17:5b:
                    0f:69:ea:5c:6c:1f:ee:5b:b6:e6:98:ea:3e:2d:cb:
                    d8:5f:7a:51:2d:d8:a5:6e:28:09:6f:b6:94:b6:be:
                    a9:1e:87:ef:fa:31:78:e5:9c:60:de:18:03:13:a5:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:AD:30:C4:55:8E:5F:D7:88:86:F0:25:CE:4A:04:65:A4:F4:A9
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c3:b9:a0:b3:bf:45:c1:fd:27:d3:50:24:ed:f8:76:7d:1d:
         3d:12:bb:fa:a4:c4:3f:89:c2:88:0f:ad:29:99:0d:9e:a3:ad:
         18:38:3b:63:54:90:03:19:13:eb:e3:f6:15:97:c3:81:0f:01:
         6e:ed:c2:00:c1:d5:fe:f4:28:29:48:fe:35:83:be:2a:00:3f:
         b2:88:1d:16:dc:58:0d:3c:a0:d9:a4:af:ce:30:ac:c5:cf:0a:
         26:db:c5:30:fe:90:23:9d:fe:ae:28:86:c0:cd:e2:02:ef:a5:
         cf:79:2a:a1:b4:09:fa:db:6d:70:3b:2f:6b:c7:11:27:a4:4a:
         09:7a:7d:9a:74:6c:08:61:68:47:b4:5a:77:d8:cf:b6:e6:ca:
         c6:e1:a3:4f:50:5c:b7:b7:dd:a9:e3:94:ad:64:1d:94:bb:af:
         0f:03:05:ca:49:71:86:87:61:88:bb:a4:d4:76:38:34:3b:fc:
         41:37:b9:30:0c:eb:cc:6b:3a:05:cc:76:3e:2e:f4:ce:09:03:
         3a:79:75:d7:ed:29:a4:97:9e:5b:24:31:0e:4a:ec:87:37:9c:
         e1:29:5d:b0:27:62:4e:d2:53:04:13:af:69:83:5a:7f:2c:08:
         e6:cf:d6:2d:a5:b0:bf:b7:af:2b:15:d2:c9:ed:2f:0f:9e:36:
         7d:be:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:10 2026 by rpki-client