Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          03TDOfNGN69xuzlJsf6/gHz0UKpp9AfHAK/FZGawEkc=
Subject key identifier:   B6:EC:FA:EF:0B:A6:AD:EA:2C:97:7D:F5:E4:65:A3:0B:E3:06:C6:42
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       019FAC761C53BC94EBFE50250943CB462B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          01DA
Signing time:             Wed 29 Jul 2026 06:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:49 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: idw5nAzTlSAcQpAOm+j+U+ziJAyCiM+MG+cbMoPpGLo=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:1c:53:bc:94:eb:fe:50:25:09:43:cb:46:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Jul 29 06:00:49 2026 GMT
            Not After : Jul 30 06:00:49 2026 GMT
        Subject: CN=b6ecfaef0ba6adea2c977df5e465a30be306c642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:95:64:2f:30:74:ba:ec:51:7f:37:a5:36:
                    29:3f:0c:04:e9:0a:80:dc:ab:d7:ab:86:72:15:32:
                    2d:e9:0f:de:38:41:8d:75:6e:7d:81:b2:b0:e4:48:
                    cf:01:61:a3:fa:ca:21:d7:11:63:f5:c7:6e:8a:60:
                    d9:f8:0b:c2:9e:3b:de:54:96:d3:11:fe:fb:9f:63:
                    ca:28:51:77:f7:cf:93:06:c5:43:75:ce:00:dd:02:
                    0e:ae:26:70:83:98:ed:01:be:45:31:3d:25:e2:5d:
                    45:9f:36:80:08:e4:a3:b9:51:58:98:6c:9f:69:b6:
                    4e:68:ab:2c:1c:ee:a6:62:08:37:3c:94:7d:4c:bd:
                    94:f7:87:a3:36:7d:fa:ca:2b:aa:95:af:af:10:54:
                    4f:3e:3e:3f:3c:81:0c:25:63:c2:1c:94:75:27:13:
                    50:25:16:09:3d:c8:b1:08:7c:b5:bb:8a:c1:7c:5d:
                    e0:22:43:52:be:dd:48:66:ea:39:be:d3:a9:36:10:
                    7f:3c:88:38:5c:e3:3d:43:71:3a:3a:f8:1a:1e:dd:
                    3a:e4:7a:a2:91:60:42:33:79:04:9d:73:ae:f2:60:
                    32:79:68:55:e0:77:7e:03:cb:95:ca:16:f6:c2:36:
                    dd:f3:97:4d:7c:0f:0b:3a:6b:eb:fc:9c:ea:14:19:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:FA:EF:0B:A6:AD:EA:2C:97:7D:F5:E4:65:A3:0B:E3:06:C6:42
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:e5:ec:56:08:b8:53:5b:f5:e5:7c:3e:ad:43:bc:ac:1b:
         9b:c4:b6:63:82:47:20:8c:fe:a1:60:07:69:63:6b:37:79:13:
         bf:3c:56:d9:88:0c:57:1c:b5:d6:a9:98:10:d2:ac:4f:8a:ad:
         d9:b8:be:00:6d:03:04:6c:06:ac:f4:41:df:77:95:21:ad:45:
         8b:da:ae:9a:02:be:da:e9:a7:b6:8b:32:3e:05:e7:2d:82:90:
         fb:26:9a:ba:21:c0:f1:88:40:a5:77:cf:24:ee:45:97:6e:d8:
         51:04:86:ab:f0:ef:d5:5f:e0:1a:59:58:e0:c5:45:5e:31:6b:
         1b:01:a5:ea:b6:89:e7:2e:61:97:b3:00:c8:bf:5d:6d:9f:f9:
         15:ca:f5:b9:74:82:26:01:1e:91:1a:20:85:4d:0e:80:4e:bc:
         fb:94:57:f5:f6:8a:65:e6:81:7f:99:e1:53:cd:c2:a5:0c:31:
         53:73:3b:64:39:16:a7:6a:c2:98:fd:56:39:85:f6:34:c4:ec:
         0e:ec:3b:d3:03:a7:22:68:52:2f:a8:ca:a5:ff:14:27:11:e0:
         03:dd:7a:b3:67:de:e9:b5:fe:92:da:db:4b:48:ce:46:b1:28:
         43:1e:55:f3:c6:74:da:38:17:87:30:13:65:59:a4:44:31:21:
         ef:45:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:41 2026 by rpki-client