Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          YAwdxA1MENsPnrUQuH0RrfLgiD/CdHzPGKoR6X1NEVk=
Subject key identifier:   A6:B3:D9:2C:77:09:38:90:C5:E3:3A:39:96:A0:69:65:C5:A8:DB:74
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       019F18307B9EBACE2F0508391D8106146415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 11:00:57 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:57 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:57 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: L55+kujguhiz8Jie+T4ttlKQmwbEeTwl2edOjwSPDVU=)
                          2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:7b:9e:ba:ce:2f:05:08:39:1d:81:06:14:64:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Jun 30 11:00:57 2026 GMT
            Not After : Jul  1 11:00:57 2026 GMT
        Subject: CN=a6b3d92c77093890c5e33a3996a06965c5a8db74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:bc:1f:c3:a5:24:f9:41:d1:cd:b4:4c:a3:
                    9c:e9:a0:16:7f:e6:cb:03:48:3a:90:19:d8:2e:4c:
                    08:af:4d:b1:89:4a:46:35:73:dc:40:cf:92:ef:ea:
                    7c:b3:bf:3d:57:4c:42:2d:e8:4a:10:db:0e:8e:e6:
                    24:35:46:86:45:f1:b3:38:46:a7:5b:e3:b6:37:53:
                    51:85:39:b5:27:84:12:91:3b:b8:02:c2:a5:35:24:
                    52:2b:66:a1:ed:a2:a0:9f:87:a2:5f:4a:61:13:94:
                    f3:98:b4:1e:87:60:4b:2c:51:b2:53:b9:38:6f:e1:
                    95:9b:56:07:9d:88:c4:99:36:0c:89:24:58:51:02:
                    2c:d9:e6:52:72:7c:5c:11:bf:f1:13:b5:c3:4e:41:
                    11:22:b0:3d:6f:eb:24:c2:94:15:70:e2:ad:3a:b3:
                    5d:fe:a7:d0:12:3f:4b:43:21:65:3a:b9:b5:37:af:
                    f3:58:d9:d3:e1:80:4f:40:a8:61:46:2f:cb:97:79:
                    4e:c3:50:d4:c6:87:1c:05:00:cf:39:18:d0:74:09:
                    aa:d8:af:a2:ce:09:40:17:ff:9f:2a:71:cc:70:03:
                    83:9b:49:af:e9:df:92:eb:2c:d1:b5:dd:e7:a2:78:
                    b0:95:cf:0b:55:7f:e9:c7:bf:b1:8e:c3:b0:96:82:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:D9:2C:77:09:38:90:C5:E3:3A:39:96:A0:69:65:C5:A8:DB:74
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:33:8a:ba:05:df:80:0d:23:63:3b:62:ed:71:aa:83:0f:5b:
         df:d0:1c:e8:a3:bb:ac:32:62:35:d3:f6:22:15:d1:d7:b5:1a:
         97:db:74:25:ef:0c:47:14:0c:02:24:11:77:e2:2d:b0:87:df:
         a2:9a:9a:e2:34:32:a6:f8:6a:66:ae:3e:8a:6f:73:dd:a5:af:
         5c:12:a3:8a:36:6f:e9:22:f6:fd:ab:22:a2:81:ea:b5:95:69:
         04:d5:de:0f:cd:8e:a7:55:08:b1:31:34:f5:4b:d8:c7:a7:57:
         db:f9:75:c1:46:95:e6:30:88:05:bd:67:8f:74:9d:37:ee:43:
         d2:7b:39:ab:06:84:ca:5c:22:d4:69:79:72:5b:d4:80:1e:2b:
         7e:0f:21:e1:df:57:57:2d:fd:8c:ca:96:2a:26:39:82:57:95:
         6f:ae:64:46:0e:d7:7c:1d:11:2d:16:6b:6d:18:b6:53:51:39:
         1a:c0:87:3b:11:46:eb:26:c3:bc:5e:71:7e:e3:71:02:12:03:
         ae:71:dd:b7:29:38:39:1a:9c:6b:77:e5:60:aa:82:e8:51:6b:
         22:2d:81:e6:6e:e2:8f:72:57:ef:9c:b4:63:13:5a:97:85:f8:
         8e:1f:a2:d1:31:4b:f5:e7:3a:03:41:68:10:52:14:b2:a0:f7:
         42:60:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:09 2026 by rpki-client