Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
File:                     06ruF4ixbgpxpCBqirjaxoB-6J8.mft (raw, json)
Hash identifier:          sSjf5lS4PQEsqU2XAvJhz9yAIBmZKE0kko7k1WkD44k=
Subject key identifier:   30:A9:D2:98:70:4E:27:BC:85:E8:C8:CA:D6:54:32:2D:31:47:AC:89
Authority key identifier: D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
Certificate issuer:       /CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Certificate serial:       019E1CC116BA345BA4ACF26E2E69334F3AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
Manifest number:          02
Signing time:             Tue 12 May 2026 15:14:36 +0000
Manifest this update:     Tue 12 May 2026 15:14:36 +0000
Manifest next update:     Wed 13 May 2026 15:14:36 +0000
Files and hashes:         1: 06ruF4ixbgpxpCBqirjaxoB-6J8.crl (hash: DMniTkcMnlSAFWTxuupIJNcOfuGJuaZFNzKxZOFJxPM=)
                          2: WUaM5ilAPH-D9YxJO0tBjb5UqeA.roa (hash: 2s5WM8piz53LhTZIiMHbjkTVNE13rJmuQh0N4/W6csE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:c1:16:ba:34:5b:a4:ac:f2:6e:2e:69:33:4f:3a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
        Validity
            Not Before: May 12 15:14:36 2026 GMT
            Not After : May 13 15:14:36 2026 GMT
        Subject: CN=30a9d298704e27bc85e8c8cad654322d3147ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:44:bf:b6:17:65:c7:7b:11:43:2f:ae:7b:
                    77:d5:d9:73:3f:b4:b8:18:3f:01:90:95:a0:62:c1:
                    78:7b:47:49:22:49:16:71:62:83:eb:37:67:ad:c8:
                    ea:e1:3c:3a:ed:25:ab:fb:c4:4e:9e:9d:a2:db:c3:
                    f9:60:d8:cf:72:d1:56:57:cc:67:28:6d:53:bc:98:
                    fa:90:ab:1c:27:c2:bc:d9:ba:d4:d7:df:4d:30:5d:
                    ee:a3:6a:a6:7a:b3:6c:23:fc:75:ba:bd:b0:c1:1a:
                    32:70:18:c1:70:29:16:51:7a:65:e0:25:59:04:8c:
                    56:e3:ef:2c:48:81:12:d7:7c:35:df:17:3a:9d:51:
                    54:ac:ae:e3:6b:1d:84:72:b4:41:73:a3:38:cd:96:
                    e6:62:51:30:a4:16:a8:a4:a0:39:75:0b:dc:45:15:
                    f9:0e:cf:40:42:e6:19:ca:ad:0e:19:ca:e8:8f:9e:
                    13:d2:c6:21:e5:d2:54:27:5b:13:da:7d:4d:dd:e9:
                    e5:08:b9:9b:73:be:00:06:e9:39:6d:45:99:9c:6e:
                    11:f0:ee:e1:bd:b6:d5:0a:f7:19:68:54:db:5d:62:
                    ee:cd:c2:22:70:f3:02:ae:e2:42:0d:34:40:f5:bd:
                    97:34:c3:9c:4f:4a:3f:cb:00:44:9d:61:78:53:00:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A9:D2:98:70:4E:27:BC:85:E8:C8:CA:D6:54:32:2D:31:47:AC:89
            X509v3 Authority Key Identifier:
                keyid:D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:60:05:81:07:4a:01:1a:6a:ae:1c:f3:45:6b:2a:c5:03:
         73:18:f5:8c:71:62:42:3d:fa:86:53:39:ea:d1:75:1d:21:a1:
         9e:13:95:0a:23:7e:54:12:6b:37:e2:71:cb:82:74:b8:cc:45:
         ec:9b:fa:17:22:b0:0f:f1:92:db:56:bd:a8:c9:be:89:72:19:
         60:22:8d:10:73:8e:3b:f2:de:52:c3:d2:a1:d3:45:0e:78:86:
         be:92:b9:53:d7:87:2d:5f:e1:b9:14:17:de:6e:b9:f3:58:07:
         d7:da:8e:a8:6a:49:9b:37:30:df:1a:58:93:23:12:b5:6d:a8:
         14:ca:ce:17:30:1f:a2:7a:a6:75:20:a5:a5:a7:e7:b5:b1:86:
         2e:c8:dc:10:45:68:76:28:34:ae:a1:a8:a0:12:d2:46:c4:9e:
         86:d7:ad:eb:d4:8e:1c:78:4d:51:77:be:44:6d:11:be:96:1b:
         37:2d:13:da:1e:00:83:28:61:36:14:eb:b4:80:56:fc:1e:29:
         cb:94:9b:99:81:26:e8:8f:e4:a7:65:27:4d:01:23:4b:07:fa:
         65:d9:4d:a4:fa:27:64:75:9d:24:4e:f8:60:7f:cd:63:04:ee:
         e9:dc:c4:94:34:c7:0d:12:9e:23:b3:50:97:81:f8:c8:83:85:
         3a:db:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:56 2026 by rpki-client