Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          TRQQYaRE5anQ5Wwku3zyZLD2MAsphPrOcX4sE919mSs=
Subject key identifier:   3A:7B:12:B3:AD:93:18:BE:B7:52:B8:26:AA:AC:E1:8F:4C:F3:7B:9A
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       01A089E82410A5E23133844085C0C32C9446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          0839
Signing time:             Thu 10 Sep 2026 06:01:27 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:27 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:27 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: zQR1CW5pWnWea67uoMafZ400zrTLbwLA1t7PQLd/iUg=)
                          2: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e8:24:10:a5:e2:31:33:84:40:85:c0:c3:2c:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Sep 10 06:01:27 2026 GMT
            Not After : Sep 11 06:01:27 2026 GMT
        Subject: CN=3a7b12b3ad9318beb752b826aaace18f4cf37b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:f1:85:98:6a:8c:3c:a4:eb:6f:65:e4:15:
                    e2:53:13:76:3f:7d:7a:bf:b5:0c:9f:e7:6e:d4:c3:
                    85:83:42:8f:c5:72:8d:cb:0e:a0:03:d4:fa:f3:f4:
                    81:e3:27:a4:f6:ad:d9:ec:26:0a:cf:48:08:39:3d:
                    1a:49:1a:89:b4:5b:be:df:43:f1:07:ed:5b:ab:ea:
                    31:a0:0f:08:75:1b:d2:dc:d5:8b:6b:80:29:6a:5a:
                    5a:5d:33:98:d8:76:8a:de:12:39:c5:32:3f:7b:ba:
                    f1:23:dd:e8:56:79:10:59:9f:06:c1:c9:7d:98:2f:
                    10:f9:f9:83:99:fb:49:a8:95:90:cc:5f:5c:7f:7c:
                    6d:49:65:67:b8:6c:59:4c:96:bd:3c:74:46:c2:dd:
                    ca:e2:22:57:56:68:64:54:8b:1e:39:b2:ee:88:f5:
                    d8:3e:24:01:f7:fb:bd:7b:74:d1:0c:7e:5d:9a:05:
                    f3:82:7e:c8:20:44:35:ee:51:aa:b5:b3:87:9a:c6:
                    94:1f:65:ee:56:c2:9a:f2:2e:4a:2e:f7:47:89:66:
                    b6:b1:90:74:b7:0b:7c:df:48:30:6b:5f:21:cf:6f:
                    8c:b8:b5:8a:fa:7c:2c:57:5f:49:cb:84:4f:ca:c3:
                    6d:0a:6b:f8:be:ba:fc:8b:6c:c0:f6:d4:72:8e:cf:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:12:B3:AD:93:18:BE:B7:52:B8:26:AA:AC:E1:8F:4C:F3:7B:9A
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:66:f7:f3:9e:11:61:7c:3a:f4:27:95:8b:84:bd:fe:88:ee:
         8d:28:4a:11:2b:9b:3f:bb:dd:b4:3b:7e:cb:a4:a9:59:ea:91:
         76:a1:c3:94:30:6d:fe:d8:14:a0:67:19:2a:77:a7:61:41:d4:
         16:b7:6a:c8:6c:67:b4:8d:52:5d:92:59:ea:33:bb:d7:f8:29:
         24:c2:99:a8:6f:d3:d0:b2:69:b8:65:d5:6c:5e:69:fd:bd:b5:
         de:29:43:c2:8b:9a:46:ad:b6:79:bf:f9:e3:b2:3f:33:6e:9a:
         34:f5:14:d8:35:3d:c8:e4:be:14:16:bf:db:62:26:7a:ec:3c:
         71:d7:9d:ef:b5:d5:4a:72:7d:43:b9:00:64:1f:d8:55:d3:8d:
         f2:75:e2:27:d1:be:22:5d:ae:83:bc:c8:13:3b:b1:66:9f:56:
         2c:9b:29:24:83:bc:84:3f:9b:6b:9b:d4:fe:43:ea:73:7a:68:
         35:0b:4a:71:f4:c7:47:02:97:08:f9:29:7a:25:e9:41:96:e1:
         eb:08:32:92:05:fa:8b:71:ad:5d:99:f6:63:4a:a3:4f:f3:78:
         e7:52:26:cb:bd:53:b9:2a:ac:cc:17:9f:b2:d6:56:98:39:2d:
         d9:8c:0a:c9:94:e9:e6:ce:fc:34:31:b1:1d:d0:29:44:f7:0e:
         d5:fe:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:31 2026 by rpki-client