Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          XEwSP/h7SLti0nFULbEJtG1OhLAvlgTEkBBfXprWsac=
Subject key identifier:   3D:7F:E5:0E:ED:C2:36:64:40:E9:18:82:DA:CA:9A:BC:79:7A:5A:52
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       019D38D3B7252A1E105559E11C6E1922AD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          95
Signing time:             Sun 29 Mar 2026 09:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:32 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: GFliAqO7Uomcyry+D4DqW19D31cxbb0R+P4iWT2VR/s=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:b7:25:2a:1e:10:55:59:e1:1c:6e:19:22:ad:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Mar 29 09:01:32 2026 GMT
            Not After : Mar 30 09:01:32 2026 GMT
        Subject: CN=3d7fe50eedc2366440e91882daca9abc797a5a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:c9:81:32:72:1c:60:8a:c6:90:94:28:53:
                    cc:50:a3:d4:c4:13:df:85:d6:ee:f8:78:6e:ae:15:
                    cb:ef:c2:cb:40:8c:9b:19:22:1d:93:bb:14:60:c9:
                    42:b5:21:a8:1c:bb:fa:be:bb:22:fe:3c:30:dc:17:
                    64:0e:35:e2:7b:e6:8e:ce:8e:71:01:ca:ec:35:8b:
                    19:f4:83:55:d1:94:b8:9d:00:38:0b:22:d3:2e:99:
                    ed:a1:06:dc:ec:33:20:84:08:c2:a4:45:61:dd:45:
                    98:7f:1a:4b:e0:d8:53:58:07:67:c4:74:97:67:59:
                    c9:1a:25:15:d5:b0:38:9b:e8:26:a1:5a:d5:e5:ec:
                    ec:c4:19:ff:64:59:e6:9b:8d:e7:0d:28:43:6a:c5:
                    c8:11:6e:0a:76:79:3f:f5:95:fc:cc:0c:12:b8:40:
                    fc:6e:95:ae:d8:ee:d5:a9:b0:cf:e6:50:57:2c:ce:
                    ad:aa:6c:4a:15:37:38:75:56:c7:51:91:cf:0e:98:
                    44:63:64:48:c5:a7:c1:98:7e:b8:b1:ea:3e:3b:90:
                    38:67:dc:60:02:0e:91:3e:f5:a4:3f:76:a8:04:48:
                    29:98:e6:50:be:60:0e:22:48:34:23:02:cc:74:93:
                    58:0b:f1:5b:32:82:66:76:a1:f4:43:5f:6e:44:96:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:E5:0E:ED:C2:36:64:40:E9:18:82:DA:CA:9A:BC:79:7A:5A:52
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:d5:56:b9:6d:cb:38:19:b1:41:03:12:e0:a9:c8:a4:e5:
         61:74:40:39:d9:23:26:be:b1:ad:6e:d2:d1:68:03:74:33:9a:
         46:e7:0e:68:ed:68:31:74:31:bd:60:ac:6d:4f:d3:87:8b:ae:
         58:2b:9f:58:3a:25:ca:1b:de:99:8a:0a:bc:db:fe:87:51:c6:
         0c:10:ca:4f:80:58:24:87:e3:f7:29:a8:6c:df:2b:e3:8a:94:
         06:94:f7:5c:45:23:b2:8d:39:4d:45:b8:f2:8c:d2:60:d9:8b:
         8b:a8:d5:53:c3:8f:34:37:81:72:ec:5d:58:90:9c:da:a6:92:
         e8:9e:dd:d9:70:b2:af:cb:13:dc:40:02:34:fc:4b:e9:4b:68:
         7a:be:dc:16:c3:59:c4:b3:e7:b8:d8:a9:56:b9:8a:c0:da:52:
         92:5f:e1:73:47:26:70:5e:65:6e:f7:9a:c5:e1:9e:b9:f9:bf:
         bb:83:79:0e:5d:92:d7:51:e1:07:b4:87:a4:3a:75:84:63:5d:
         28:d7:b5:91:f4:c3:24:17:09:4e:90:ab:b4:9c:bf:c4:af:8d:
         69:2a:96:32:88:ef:13:33:bb:84:fe:92:c6:f9:7f:f7:f5:64:
         9f:f5:f3:39:af:2b:55:76:e3:30:bf:06:b3:cd:1e:50:02:d4:
         d8:61:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:53 2026 by rpki-client