Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          QhTAb7F0hMx1XwBawrNZYNIlNkHZYK7w2XjnPqIAr9k=
Subject key identifier:   33:C8:2A:90:EE:D1:CE:07:17:F2:BC:25:F7:DC:4E:0C:68:25:DF:A2
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019EB80F3DC5C7DB33D9401A7E8A321B12F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          0747
Signing time:             Thu 11 Jun 2026 19:01:06 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:06 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: HV22Cqf1pTPiT0f4vc/JWIv7hUleovYGDpBYqs8+BME=)
                          2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
                          3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
                          4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:3d:c5:c7:db:33:d9:40:1a:7e:8a:32:1b:12:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Jun 11 19:01:06 2026 GMT
            Not After : Jun 12 19:01:06 2026 GMT
        Subject: CN=33c82a90eed1ce0717f2bc25f7dc4e0c6825dfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:9b:ad:1e:22:50:29:8b:8e:2f:7e:9e:96:
                    09:f4:8e:48:56:da:cb:a4:cf:15:ef:5a:1a:60:7d:
                    2a:70:0e:df:50:2c:13:5c:f4:00:f4:41:a2:f9:0a:
                    fa:59:eb:bb:cc:77:ba:93:44:a2:66:55:91:9f:11:
                    92:81:0a:d5:e0:31:4e:ca:08:6c:5d:11:d1:27:7f:
                    ef:3b:3c:d8:59:00:39:34:0a:63:3b:83:86:4c:1b:
                    25:01:60:44:a8:0f:dd:49:2c:e8:8a:6b:b1:ad:02:
                    b0:ac:44:8e:d8:ef:75:2a:7a:8b:7b:ac:19:5f:1f:
                    fc:10:72:13:8d:c9:f0:04:55:6e:a1:8f:1e:d4:37:
                    1c:54:9b:f7:9c:5b:8f:d5:32:4c:ee:70:9e:ce:71:
                    4d:40:45:62:55:34:8c:23:94:47:98:c5:40:e2:70:
                    d9:61:ee:9c:80:78:5a:dd:51:49:5d:40:1d:95:bd:
                    f7:5e:3c:98:e7:39:e0:52:e0:db:65:6c:0a:ec:d5:
                    94:d2:23:2b:5e:55:4e:fa:d8:c3:8d:73:80:dc:49:
                    43:2a:aa:f4:69:85:c9:5f:46:69:a0:71:a7:69:51:
                    6d:24:80:b9:08:95:24:3e:af:25:50:76:d1:d6:6d:
                    70:96:a6:5c:2f:75:38:dd:ad:6f:31:c9:61:d1:30:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C8:2A:90:EE:D1:CE:07:17:F2:BC:25:F7:DC:4E:0C:68:25:DF:A2
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:da:36:3d:ec:bc:57:4c:81:b6:a0:b3:71:c8:c6:07:e8:
         4e:5c:9e:fb:9a:de:53:91:76:94:d3:06:9f:a1:a7:47:c4:58:
         4a:f8:4e:b2:cf:c1:be:7d:0d:1e:53:4f:35:6c:b9:8a:f1:ae:
         a2:62:15:58:42:52:95:25:e8:5c:d7:dd:37:ef:5a:ab:63:04:
         b2:fd:ca:1a:f8:cb:79:b1:b4:d9:d2:42:d2:c4:4a:2c:49:07:
         a5:a5:38:0b:df:56:f3:00:39:61:44:fd:62:b4:46:fd:98:cf:
         4f:9c:1d:a9:02:79:36:98:de:71:56:a6:d1:12:19:44:65:08:
         74:c7:4b:4b:48:51:f9:f5:0a:db:e8:24:f0:c5:84:f9:76:44:
         ff:2d:a7:0b:9d:e7:56:1d:2b:c2:35:07:9b:34:8e:7a:0f:83:
         c5:7c:35:b2:df:0a:33:3f:78:06:c8:7c:1d:a9:a0:23:a4:9f:
         86:04:d3:6a:d6:36:d4:cf:02:29:4a:6d:a3:48:6d:bb:ef:34:
         b8:4f:73:3f:64:c0:53:f3:8a:b1:20:f5:b5:37:c8:34:32:a5:
         28:f7:05:3e:e3:8a:70:47:53:82:5d:21:3a:c7:76:e8:52:41:
         a1:ba:ca:7d:d4:1a:81:a8:29:4e:72:be:ea:df:31:dc:6a:31:
         8b:6d:3d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dz3Fx9sz2UAafooyGxLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjYwNjExMTkwMTA2WhcNMjYwNjEyMTkwMTA2WjAzMTEwLwYDVQQD
EygzM2M4MmE5MGVlZDFjZTA3MTdmMmJjMjVmN2RjNGUwYzY4MjVkZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/abrR4iUCmLji9+npYJ9I5IVtrL
pM8V71oaYH0qcA7fUCwTXPQA9EGi+Qr6Weu7zHe6k0SiZlWRnxGSgQrV4DFOyghs
XRHRJ3/vOzzYWQA5NApjO4OGTBslAWBEqA/dSSzoimuxrQKwrESO2O91KnqLe6wZ
Xx/8EHITjcnwBFVuoY8e1DccVJv3nFuP1TJM7nCeznFNQEViVTSMI5RHmMVA4nDZ
Ye6cgHha3VFJXUAdlb33XjyY5zngUuDbZWwK7NWU0iMrXlVO+tjDjXOA3ElDKqr0
aYXJX0ZpoHGnaVFtJIC5CJUkPq8lUHbR1m1wlqZcL3U43a1vMclh0TBVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPIKpDu0c4HF/K8JffcTgxoJd+iMB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr3aNj3s
vFdMgbags3HIxgfoTlye+5reU5F2lNMGn6GnR8RYSvhOss/Bvn0NHlNPNWy5ivGu
omIVWEJSlSXoXNfdN+9aq2MEsv3KGvjLebG02dJC0sRKLEkHpaU4C99W8wA5YUT9
YrRG/ZjPT5wdqQJ5NpjecVam0RIZRGUIdMdLS0hR+fUK2+gk8MWE+XZE/y2nC53n
Vh0rwjUHmzSOeg+DxXw1st8KMz94Bsh8HamgI6SfhgTTatY21M8CKUpto0htu+80
uE9zP2TAU/OKsSD1tTfINDKlKPcFPuOKcEdTgl0hOsd26FJBobrKfdQagagpTnK+
6t8x3Goxi209KA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:19 2026 by rpki-client