Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          oTRKl0wn7JzFI5yM3DdGp5abxL4Yo+44QhxfGg0Lfi4=
Subject key identifier:   32:4F:F3:F2:00:95:2C:7E:D5:8A:93:48:99:43:B9:C2:B2:3A:E7:BA
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019CBA396D8127F02AA1FB510E9516ADAE16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          063F
Signing time:             Wed 04 Mar 2026 19:00:51 +0000
Manifest this update:     Wed 04 Mar 2026 19:00:51 +0000
Manifest next update:     Thu 05 Mar 2026 19:00:51 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: gbiUwRzLuoCAfCnR8r7X19c4f4cpfGndOGPm546n9Rk=)
                          2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
                          3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
                          4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 14:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ba:39:6d:81:27:f0:2a:a1:fb:51:0e:95:16:ad:ae:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Mar  4 19:00:51 2026 GMT
            Not After : Mar  5 19:00:51 2026 GMT
        Subject: CN=324ff3f200952c7ed58a93489943b9c2b23ae7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:b0:3e:ae:d9:5d:0d:98:f1:c8:9c:38:c2:
                    82:90:a1:07:59:2f:d4:83:09:21:92:39:71:c4:2e:
                    12:b3:37:bb:6a:f6:a2:d0:15:ba:c4:5c:f9:b9:b0:
                    28:e1:61:52:52:15:fa:cd:8d:17:f3:67:b1:20:39:
                    91:d3:e0:21:d9:df:85:3e:05:e8:bd:90:e8:cc:7f:
                    f3:a7:ba:7c:f3:c4:f6:f1:a0:92:b5:6b:66:f7:c4:
                    39:f1:e3:62:3c:db:d4:1d:2a:18:dd:99:9f:32:bf:
                    dd:14:d6:9e:c0:a1:99:2d:3a:72:4a:85:56:79:23:
                    01:56:d4:c9:7d:55:55:74:ac:0e:37:8e:f0:65:12:
                    4e:d9:81:b8:39:17:d9:d5:cb:cf:20:cb:bc:e4:26:
                    3c:88:2a:3a:28:60:56:ca:56:f1:c4:d7:0b:3f:52:
                    a4:ba:78:3f:11:37:15:ca:1f:b9:76:b9:ed:a6:36:
                    db:d8:3e:07:7d:9b:d6:16:33:3e:b0:f8:4d:c3:f1:
                    cb:af:59:37:2f:11:53:b6:39:fb:8f:53:06:ac:cc:
                    59:93:1a:bc:37:81:3a:30:fb:4a:05:6e:ac:ab:62:
                    91:90:aa:b2:12:8e:f3:71:c2:73:ed:fe:47:70:63:
                    b0:f6:51:4d:49:b1:90:7e:7f:a0:86:20:df:be:49:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4F:F3:F2:00:95:2C:7E:D5:8A:93:48:99:43:B9:C2:B2:3A:E7:BA
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:99:e0:50:0c:29:81:2c:75:10:04:c9:7b:68:5e:bf:db:
         38:e5:f8:56:dd:86:48:5b:f3:49:91:14:2e:96:66:39:85:34:
         19:68:81:4a:84:f1:9c:92:ca:21:12:c4:81:79:f6:17:08:24:
         93:94:33:c7:97:ae:7a:1f:ce:9f:bd:fd:a5:51:09:21:18:a8:
         84:c9:85:ed:50:a3:e7:b0:7d:b7:54:cc:be:a8:f7:be:55:65:
         97:4f:a0:12:de:03:7f:d1:c0:62:c8:a6:b5:30:d6:3a:1b:06:
         22:b9:51:1a:71:f5:b4:aa:db:51:85:f9:0d:1d:98:dc:f6:c9:
         31:e4:b2:cb:71:76:f8:44:c9:e6:b8:0a:30:4a:a7:46:a5:d4:
         4c:45:32:06:23:c6:ec:d3:c3:37:35:19:6a:4f:24:bf:fe:a4:
         84:ce:fe:6d:07:95:62:aa:d3:ba:8c:2e:a7:2d:88:c8:d7:b3:
         2f:47:1c:b2:ff:cf:fa:42:82:e3:31:b9:90:b4:c4:52:0b:87:
         9f:14:01:a2:87:ba:b1:e8:43:58:89:f4:11:3e:39:83:48:96:
         f9:9c:9f:86:b1:8c:4f:33:9d:c3:7b:24:7e:85:21:12:23:61:
         56:94:e9:b5:2d:01:58:c8:c0:b0:e3:1a:2d:0b:f7:81:57:e0:
         bd:3d:9c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy6OW2BJ/AqoftRDpUWra4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjYwMzA0MTkwMDUxWhcNMjYwMzA1MTkwMDUxWjAzMTEwLwYDVQQD
EygzMjRmZjNmMjAwOTUyYzdlZDU4YTkzNDg5OTQzYjljMmIyM2FlN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qwPq7ZXQ2Y8cicOMKCkKEHWS/U
gwkhkjlxxC4Ssze7avai0BW6xFz5ubAo4WFSUhX6zY0X82exIDmR0+Ah2d+FPgXo
vZDozH/zp7p888T28aCStWtm98Q58eNiPNvUHSoY3ZmfMr/dFNaewKGZLTpySoVW
eSMBVtTJfVVVdKwON47wZRJO2YG4ORfZ1cvPIMu85CY8iCo6KGBWylbxxNcLP1Kk
ung/ETcVyh+5drntpjbb2D4HfZvWFjM+sPhNw/HLr1k3LxFTtjn7j1MGrMxZkxq8
N4E6MPtKBW6sq2KRkKqyEo7zccJz7f5HcGOw9lFNSbGQfn+ghiDfvkny4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJP8/IAlSx+1YqTSJlDucKyOue6MB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFyZ4FAM
KYEsdRAEyXtoXr/bOOX4Vt2GSFvzSZEULpZmOYU0GWiBSoTxnJLKIRLEgXn2Fwgk
k5Qzx5eueh/On739pVEJIRiohMmF7VCj57B9t1TMvqj3vlVll0+gEt4Df9HAYsim
tTDWOhsGIrlRGnH1tKrbUYX5DR2Y3PbJMeSyy3F2+ETJ5rgKMEqnRqXUTEUyBiPG
7NPDNzUZak8kv/6khM7+bQeVYqrTuowupy2IyNezL0ccsv/P+kKC4zG5kLTEUguH
nxQBooe6sehDWIn0ET45g0iW+ZyfhrGMTzOdw3skfoUhEiNhVpTptS0BWMjAsOMa
LQv3gVfgvT2cHw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 23:37:23 2026 by rpki-client