Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          bb1rUtBw9zgvM9Or+0gSkZ3FD1hCOU16N1nTGZ4ufuI=
Subject key identifier:   34:D9:E3:7A:E6:81:F9:0A:80:47:DF:5C:E9:04:1D:EB:A6:49:EA:CD
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019CAAC64F931D64E4CC709DBDAE231AFC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          0637
Signing time:             Sun 01 Mar 2026 19:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:49 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: Hk6207JzFTJ7tVP+ytwSN8s4LrLYK0xamL8T5bRgu+w=)
                          2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
                          3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
                          4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:4f:93:1d:64:e4:cc:70:9d:bd:ae:23:1a:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Mar  1 19:00:49 2026 GMT
            Not After : Mar  2 19:00:49 2026 GMT
        Subject: CN=34d9e37ae681f90a8047df5ce9041deba649eacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:c8:5f:aa:6c:29:50:6c:4c:24:94:f1:6c:
                    6f:58:21:1a:0e:48:f0:bf:c0:0b:96:c5:f4:71:a8:
                    9b:8e:21:c0:5b:6f:65:e6:33:d1:60:3f:e4:e1:ce:
                    83:d2:f0:e7:31:ed:21:df:9a:f6:9a:97:48:6a:ff:
                    42:e6:5b:1d:11:7d:43:9f:5d:a1:9d:e2:03:52:95:
                    71:33:4c:d8:c3:db:89:88:18:b1:35:a4:e9:57:4d:
                    27:31:d8:22:92:42:a5:15:57:4d:43:0f:33:49:7a:
                    90:48:1b:5f:c6:74:13:9d:e1:14:02:8e:25:55:70:
                    69:c6:67:be:22:30:18:50:93:bc:13:2a:46:43:ed:
                    c3:f2:dc:84:39:ba:ab:70:df:7c:cc:cf:13:1c:98:
                    4a:ab:e7:b3:f4:48:51:45:34:d1:34:44:88:c2:56:
                    98:b6:fd:77:e0:c7:93:4a:85:86:5e:c8:f7:22:eb:
                    4f:ec:b9:87:ce:10:97:3c:0b:4c:1a:c6:69:76:06:
                    92:9b:da:22:01:05:76:69:6f:1e:bc:36:e6:07:6f:
                    91:33:03:00:3f:9a:15:ca:e5:6e:ae:f6:50:88:c1:
                    c5:81:7b:11:f0:5c:23:dc:e7:c4:6e:48:e3:23:25:
                    7c:d5:2b:cc:96:d6:20:19:78:19:e5:67:4d:c4:73:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:E3:7A:E6:81:F9:0A:80:47:DF:5C:E9:04:1D:EB:A6:49:EA:CD
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:89:2b:d5:bb:04:97:0e:f3:a4:8c:d3:ed:27:c9:95:b4:9b:
         3d:7e:95:18:9d:f5:47:1e:d1:34:fe:22:20:5d:b0:33:4c:b8:
         fb:a1:ab:4c:75:09:46:e1:d1:5b:e5:c9:b1:10:6d:5d:4a:06:
         71:62:22:9c:57:c7:b2:df:86:16:86:cf:84:e9:58:38:cc:03:
         4d:6b:f1:0c:61:d2:c3:b0:a5:dd:db:be:b5:ca:48:8d:22:6d:
         3a:21:b8:9b:c2:bf:ef:31:ec:77:ae:8d:13:76:bf:85:99:29:
         2d:e5:1a:5e:cb:d1:9d:d3:3c:bf:11:7a:df:d7:90:f0:14:e8:
         38:ad:4e:fa:30:88:54:c2:0e:62:81:ae:d4:24:b6:6e:04:77:
         a6:90:d6:d3:86:63:c4:41:f6:14:72:fd:f3:97:30:44:db:71:
         bd:3a:f7:e8:72:8e:df:83:13:90:44:b6:f4:e7:a1:7c:75:cc:
         e7:f0:aa:70:51:7f:54:ff:eb:e4:10:20:4f:ff:ea:1f:ec:f2:
         c0:51:53:8c:e6:33:cf:a2:2f:df:16:9d:a3:79:0a:7d:1b:39:
         e6:04:a8:8c:8b:91:76:ee:89:14:d2:51:ec:02:06:3d:a5:d2:
         1e:93:a8:c6:48:35:a1:79:df:1b:fe:45:e8:ee:c8:55:42:18:
         b1:2c:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:00 2026 by rpki-client