Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          2e1V7P0H+jGT19bYxBHks3mpOB6WXy400RmBwrzhuRA=
Subject key identifier:   7E:B4:1D:7E:B0:C8:3C:D0:75:31:91:83:68:67:BE:FD:DE:EF:FD:CA
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019D284DAD8FFE44CF1DAE5ABE7C1B890296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          0678
Signing time:             Thu 26 Mar 2026 04:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:12 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: ck7KpM0h5XH53EaZWLxI/4aNsv+DbtZXtzuHH4eGZL0=)
                          2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
                          3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
                          4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:ad:8f:fe:44:cf:1d:ae:5a:be:7c:1b:89:02:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Mar 26 04:01:12 2026 GMT
            Not After : Mar 27 04:01:12 2026 GMT
        Subject: CN=7eb41d7eb0c83cd0753191836867befddeeffdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:12:44:ea:a5:77:72:8a:45:ab:a5:03:ec:
                    33:4d:1e:65:78:36:eb:63:dc:86:0e:95:13:70:a9:
                    43:9b:0b:89:1d:74:1e:49:b3:6d:70:da:f0:ff:5f:
                    20:57:c2:94:9e:87:41:30:e1:d2:f5:e1:e1:53:96:
                    e9:55:9d:87:df:34:3b:c9:56:d1:7a:58:4c:17:28:
                    45:7f:0c:91:ce:65:44:10:e5:64:b3:f4:6e:67:24:
                    a2:bd:36:e3:46:e6:4d:02:cc:a0:b0:70:ef:ac:ea:
                    23:41:e3:ce:0c:ff:22:d5:9f:06:c5:63:6f:ba:29:
                    56:43:aa:fa:1a:85:50:ab:eb:e4:96:f5:e1:e2:2e:
                    e9:a7:a4:e8:cc:cf:25:a9:62:1b:28:2a:8d:60:58:
                    7f:99:6c:4a:a2:29:ca:03:31:69:ab:cd:39:7b:63:
                    01:2b:83:6a:84:3e:e7:c7:51:71:f9:b0:60:73:5b:
                    49:00:ff:ff:32:07:a8:3a:29:01:db:8c:52:8a:11:
                    90:18:6b:cb:53:c4:95:d4:00:99:0c:37:3c:32:f7:
                    73:2f:e7:5c:23:15:de:4e:c7:f6:5e:f5:63:e1:32:
                    f4:c4:03:10:85:d5:f8:31:cf:b5:61:03:12:0b:bf:
                    54:8d:d6:cc:f1:e7:0b:9a:ae:57:00:0f:f2:85:ff:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:1D:7E:B0:C8:3C:D0:75:31:91:83:68:67:BE:FD:DE:EF:FD:CA
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:bf:72:f4:0a:ff:71:e1:d3:1a:3d:0c:13:88:55:c7:9e:
         34:cf:f3:c8:b3:a7:71:a5:22:1f:18:84:86:fb:1b:39:20:6d:
         50:3e:48:ee:d5:4d:85:3a:c6:c3:9c:6e:a6:09:ab:0a:fc:8c:
         af:36:90:d2:54:46:7d:3f:ee:8a:a8:f5:18:01:8f:a1:81:ab:
         8c:ee:a3:dc:95:1f:15:09:84:ee:1d:b5:1c:2b:3f:b0:0e:c2:
         55:42:3f:7d:48:45:4d:1a:c0:59:a6:91:4b:a1:05:6b:58:1c:
         7f:fc:e8:a5:71:87:ae:46:1f:f0:f9:81:56:a6:cc:cb:2f:6b:
         f3:a8:62:59:55:ac:98:5b:7d:1e:1a:de:bd:dd:c5:fd:27:fd:
         8f:2b:a9:99:27:1e:34:58:48:d9:46:26:f4:bf:1e:6d:8f:cb:
         78:01:11:5f:86:10:ea:12:28:af:7c:37:f5:10:ce:f9:dd:54:
         8f:6b:10:95:58:e5:42:d3:4d:06:7b:6f:1d:24:47:85:16:2d:
         81:78:05:fa:46:fd:66:e2:94:90:b1:16:2f:3c:56:2c:c8:ad:
         20:73:d0:d3:8d:60:f8:2d:44:b8:2d:1d:a6:0f:32:f4:a4:7d:
         26:c9:31:62:81:c8:fd:a4:a9:77:df:b6:6d:02:35:3b:fd:f2:
         c0:a5:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:28 2026 by rpki-client