Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          Ch5UK7RHUs5npUWbF2tW/FdQ3Vp3xm/6hNqY/AzdLY0=
Subject key identifier:   E0:37:F6:24:42:7F:66:75:59:54:FA:AC:CE:35:45:31:81:9C:4D:21
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019DA7C2B6504FBB29F49DA529BDBB4C6439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          06BA
Signing time:             Sun 19 Apr 2026 22:00:48 +0000
Manifest this update:     Sun 19 Apr 2026 22:00:48 +0000
Manifest next update:     Mon 20 Apr 2026 22:00:48 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: vaqfBv55YqB7k2JCgaL+viu9eLUdTpEtp77dwlMwrWE=)
                          2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
                          3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
                          4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:c2:b6:50:4f:bb:29:f4:9d:a5:29:bd:bb:4c:64:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Apr 19 22:00:48 2026 GMT
            Not After : Apr 20 22:00:48 2026 GMT
        Subject: CN=e037f624427f66755954faacce354531819c4d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:14:8c:5f:75:de:0b:ce:ff:f4:05:37:f9:
                    59:81:74:d9:fa:3f:45:51:c3:d1:49:1f:69:0c:45:
                    ca:e6:77:08:ac:34:c3:fe:42:8a:c2:4a:67:cc:1f:
                    5c:fd:45:67:78:de:cc:63:4a:53:9d:19:80:cf:62:
                    06:82:86:9d:34:7c:eb:0a:11:65:92:bf:14:a3:56:
                    fa:fe:25:b5:9f:6f:2e:91:87:07:9f:ef:5f:d5:bf:
                    54:a2:7a:6f:39:a6:4c:ea:04:aa:c7:8b:48:37:fe:
                    01:8a:d1:87:0e:b4:87:b2:46:1b:74:8f:bb:21:c3:
                    8f:47:b0:c3:25:47:62:e8:d2:18:e1:18:9d:b0:64:
                    88:50:0b:bb:51:68:0c:2d:3e:1b:2b:58:61:82:22:
                    33:b8:09:2d:34:a9:30:33:c5:51:0b:f4:2e:dd:28:
                    c2:c8:6d:e6:e9:1d:3d:ae:3d:ba:ce:22:07:47:d4:
                    79:84:ce:a2:49:5c:fc:5c:75:ab:04:3a:44:17:a8:
                    3e:0d:8b:a6:13:21:0d:f6:12:fd:1a:11:e6:58:88:
                    30:68:6c:ed:0e:2d:49:f4:6c:bd:33:dc:7d:54:91:
                    12:72:f3:4c:cc:76:72:b8:ab:50:ef:6d:60:60:2e:
                    a8:37:f0:bc:5e:21:37:2a:5a:e3:fb:24:d2:22:cb:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:37:F6:24:42:7F:66:75:59:54:FA:AC:CE:35:45:31:81:9C:4D:21
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:38:70:58:93:d5:22:68:b9:7c:a8:fd:2a:77:e1:6e:6b:8f:
         3d:ad:d5:65:32:d3:ee:20:b4:7e:ef:c2:b2:1d:93:5b:2a:18:
         89:93:b4:85:dc:72:0c:60:51:fd:80:25:db:8a:63:ea:63:e1:
         ac:f8:92:df:04:5b:ae:63:5a:69:74:ad:13:9e:99:d1:5d:49:
         8a:ba:ee:59:a0:ff:2c:e9:a7:a3:70:c4:d7:2e:41:fc:18:ba:
         4e:2a:72:e6:b8:ce:d0:1d:e8:9e:a3:9c:55:fd:e1:04:0c:dc:
         83:80:5c:23:05:4d:47:7f:38:42:0d:bf:41:ab:ec:da:39:17:
         9e:9b:28:7a:a2:7c:0a:1f:c4:51:32:79:a8:4e:af:c1:5c:19:
         eb:3a:ae:6a:02:c2:d5:53:9e:d5:68:6a:2f:0b:9b:03:fe:9a:
         59:d5:f2:fc:d7:ff:bb:75:61:8e:40:98:82:27:f0:af:20:e1:
         c7:04:c8:19:51:5b:e9:d9:9d:79:56:e7:74:cf:15:b4:da:5e:
         f6:95:e7:0f:62:c1:8b:d5:61:53:71:a7:50:03:f3:85:51:1d:
         49:4a:e2:64:f0:11:68:9e:58:74:a0:bd:ab:79:83:4e:3a:9f:
         45:95:6b:d8:9e:28:39:a5:4d:f5:43:5d:6f:31:a4:ed:85:68:
         97:4a:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:30 2026 by rpki-client