Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File:                     06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier:          F57c3D2aCD4s6tpxyrMwBvoZNxq6mh53OGjNSqFIl9M=
Subject key identifier:   9C:D3:5B:F5:08:CD:EB:28:73:F7:1D:44:D9:84:8A:51:6E:C1:A0:80
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer:       /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial:       019D265FCACF393BB138D47ED9092FF82953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number:          0544
Signing time:             Wed 25 Mar 2026 19:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:45 +0000
Files and hashes:         1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: LEOQ7lYjvMMFQqOqIZlOjlai4ery3aA/zLF/HTQsRik=)
                          2: rIj8wufE-prK99O3Ylq0RCBcGE8.roa (hash: m+lWR0TLu74BujfNz39crAI9zcqKkYdaZMG20ho5wX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ca:cf:39:3b:b1:38:d4:7e:d9:09:2f:f8:29:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
        Validity
            Not Before: Mar 25 19:01:45 2026 GMT
            Not After : Mar 26 19:01:45 2026 GMT
        Subject: CN=9cd35bf508cdeb2873f71d44d9848a516ec1a080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:60:62:76:65:ab:64:f3:bd:62:d2:ba:2a:
                    2d:e4:a9:0e:9f:53:88:7c:bc:8b:c8:f8:f5:f6:8a:
                    0c:aa:d2:38:04:db:bd:fb:3d:42:b1:36:0f:a5:2d:
                    96:42:0a:41:f6:8f:22:74:8e:00:0a:95:41:9f:80:
                    69:4d:60:1b:7a:bd:b6:d1:39:3b:9a:7a:b3:03:e3:
                    4b:eb:fc:5b:bf:75:b0:70:bb:93:9f:1e:2d:7c:13:
                    7b:aa:f3:6e:26:d0:f0:15:4b:e3:af:4a:4b:f3:0d:
                    20:dc:6a:5a:30:5f:43:72:f5:40:e7:8d:2f:28:fe:
                    6a:71:09:1e:6d:d3:3a:55:f9:9b:f8:56:87:1d:49:
                    8c:9c:c1:f4:be:ae:7b:24:f9:3f:34:d2:8b:3e:01:
                    24:9d:8f:69:a3:af:1f:05:2e:d7:6f:84:b4:a3:ad:
                    91:7b:9b:3e:e9:84:76:85:e1:f1:b1:dc:91:99:e4:
                    29:a8:65:c3:60:76:ef:02:f9:15:66:d7:dd:55:fb:
                    0d:30:29:ec:8a:1b:ef:c1:33:98:c5:83:05:94:93:
                    f6:2b:2b:7b:99:92:9a:81:1e:9f:5b:a3:44:fd:45:
                    60:67:83:f0:1a:78:48:5c:83:ed:9e:e6:0d:90:38:
                    ce:a6:fa:a4:49:4d:1e:a7:e1:97:5b:ab:2c:44:b4:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:5B:F5:08:CD:EB:28:73:F7:1D:44:D9:84:8A:51:6E:C1:A0:80
            X509v3 Authority Key Identifier:
                keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:e6:41:ac:e9:ff:11:44:39:18:f8:e6:a7:0f:67:b7:29:
         a9:50:47:7d:74:cc:bc:45:a2:4f:e0:ef:a9:31:cf:3b:da:28:
         8b:b5:a8:07:34:07:c0:4a:90:6b:f3:d6:26:48:f6:af:eb:cb:
         29:f4:0e:54:4b:75:56:a7:9a:64:d4:83:9d:b3:78:65:3c:f7:
         a8:5b:a0:07:d7:8d:c7:b4:46:fe:47:3e:7c:2a:35:89:72:2b:
         e5:2f:c5:a7:7e:cf:fe:ea:92:0e:f5:41:cc:27:c0:1f:ec:b7:
         1d:80:c6:a4:42:68:c8:50:37:74:45:56:6c:93:2d:47:0b:c5:
         4e:45:70:5b:1a:56:7d:93:7c:4e:59:e3:ac:da:e6:1b:d8:71:
         22:95:6e:a2:0b:10:f9:ce:f5:32:99:db:c1:98:a5:6e:7c:29:
         99:70:29:db:b0:19:11:d0:96:2d:df:4e:2a:a3:89:01:03:76:
         d4:29:45:15:04:d6:35:02:cd:fc:a0:b5:f8:3e:0e:7f:73:0f:
         36:eb:38:ee:15:4d:6c:23:f5:9f:49:8a:de:56:0e:0f:1e:29:
         ae:58:a0:e2:5e:fe:7c:a1:14:9c:fd:83:cb:4b:8c:43:5e:cf:
         f2:03:19:f4:f3:33:9a:ed:9c:b8:bc:e0:f6:1f:3b:12:ba:e7:
         09:20:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:12 2026 by rpki-client