Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          FMsf0lx65+f/Qv19TVb7hlFTh57sbIdZ7sklNTzGud4=
Subject key identifier:   73:BB:28:38:1A:CB:8F:3C:D7:26:AE:21:C6:2C:CE:7A:81:19:81:E4
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       019F8F7EB18A2CF13A032B13814AC6BBAA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          01CB
Signing time:             Thu 23 Jul 2026 15:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:12 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: VnG/patYk63pF8VVFqIWbJiA7ftDciWf6w0lsFV8u9g=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:b1:8a:2c:f1:3a:03:2b:13:81:4a:c6:bb:aa:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Jul 23 15:01:12 2026 GMT
            Not After : Jul 24 15:01:12 2026 GMT
        Subject: CN=73bb28381acb8f3cd726ae21c62cce7a811981e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:20:ce:dc:52:c2:1b:e6:5c:fc:96:43:7e:
                    6d:38:d7:45:05:d9:fa:e8:81:9b:74:cf:47:61:d5:
                    b8:cc:9c:e9:34:77:a4:e8:c5:39:db:7c:5f:fe:33:
                    3b:d2:b3:7b:5c:e7:f4:b1:83:7b:b6:63:82:5d:51:
                    6b:de:82:ef:86:bc:0a:85:75:0c:8b:79:3a:e9:5b:
                    a9:bf:b8:44:7b:b5:24:fa:c4:5f:7c:51:5e:d1:c8:
                    dc:3b:eb:77:4f:d4:a7:d3:99:ef:93:a2:05:f5:78:
                    da:a3:9e:6b:12:19:9d:35:95:87:0a:35:a9:55:b2:
                    a0:de:b6:85:8e:1e:bb:b9:00:34:e9:2e:db:cb:66:
                    fa:a1:54:48:a7:90:3a:9b:e4:5a:39:e7:88:9d:68:
                    35:f4:2f:81:04:2d:f9:64:0e:68:35:7d:ba:f7:2f:
                    9f:73:42:a8:a3:6e:4d:b6:9d:85:eb:16:64:36:51:
                    68:f1:cf:45:e1:7c:cd:fb:c6:24:22:3f:5c:63:20:
                    bf:76:55:fe:e4:69:a0:49:a0:51:3d:c2:61:d2:a6:
                    33:c3:68:a8:5d:c8:1b:d6:aa:e0:ea:7f:3f:5a:84:
                    7a:6e:02:98:dc:e6:68:a1:62:86:40:96:e9:fa:38:
                    79:f8:b4:7a:a5:72:6e:40:d6:26:61:0d:d4:cf:29:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BB:28:38:1A:CB:8F:3C:D7:26:AE:21:C6:2C:CE:7A:81:19:81:E4
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:61:30:a8:1f:95:c7:ae:d3:04:ba:66:90:6f:45:e2:9b:86:
         b1:64:50:6e:a3:ef:21:56:3d:ac:09:07:78:fa:1b:89:90:9e:
         c7:88:56:ca:8c:d0:8b:bd:56:e5:ee:c8:7c:d0:3c:c5:8f:80:
         2a:dd:c0:0b:ba:33:2f:29:21:b5:2b:c4:19:de:4d:de:97:b2:
         04:7c:6a:5c:3c:2f:cb:74:cc:77:82:57:d5:63:34:70:54:f8:
         06:a3:2c:7c:ff:55:5b:b0:64:47:e7:bf:0f:c2:43:c7:26:13:
         d0:6d:35:9a:1e:0a:a3:18:7e:d7:de:0c:02:6c:ca:17:c9:29:
         fa:74:0e:6c:78:01:7a:ca:6a:cf:22:9b:7f:83:48:0e:46:42:
         57:34:e8:11:c2:33:1e:34:94:b6:f1:8b:bc:f3:04:ff:e2:d4:
         3d:31:57:bc:43:4f:f7:57:07:29:ef:41:5b:f3:17:0a:76:84:
         ca:16:34:a6:94:27:b7:6e:5e:38:fe:b4:b3:f2:27:4c:5b:65:
         87:30:82:e5:73:05:61:01:91:8a:78:c5:f6:0e:6c:bd:df:12:
         14:19:fc:96:0b:40:76:1c:c1:64:d6:b6:50:77:c4:3b:bb:71:
         74:6b:ca:5e:be:fa:73:4f:72:c1:db:ac:27:17:e9:09:45:a6:
         c5:e7:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:26 2026 by rpki-client