Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          kxmq3Sg/lxZUiZm8OBuicccLeWT6pZ5l5gFWmhbhy54=
Subject key identifier:   6B:59:4E:62:D3:51:03:02:65:DF:56:63:26:25:44:47:64:2A:C8:66
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       019E30A8ECE88C8D54ED4DF48057B07DCF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          068B
Signing time:             Sat 16 May 2026 12:00:37 +0000
Manifest this update:     Sat 16 May 2026 12:00:37 +0000
Manifest next update:     Sun 17 May 2026 12:00:37 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 9DSZrJIL6IvcZ2UP1JBRckB41dG3hJRr6CGD6fCbZq8=)
                          2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:ec:e8:8c:8d:54:ed:4d:f4:80:57:b0:7d:cf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: May 16 12:00:37 2026 GMT
            Not After : May 17 12:00:37 2026 GMT
        Subject: CN=6b594e62d351030265df566326254447642ac866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:c3:b0:9f:3e:07:4e:e5:4c:3a:8d:f6:ef:
                    d6:04:52:8a:9c:4f:57:82:33:0a:65:02:d8:88:d6:
                    17:2b:69:26:d8:a4:69:a8:a0:0e:2c:a1:e1:94:77:
                    4f:ed:33:2e:4e:4a:50:db:61:74:76:3b:9e:3d:81:
                    17:03:b0:92:c9:c6:17:72:06:71:85:69:7b:1c:53:
                    c6:7b:31:17:91:42:76:3f:b8:8e:91:07:ac:30:c5:
                    09:22:7a:90:64:da:c3:37:81:38:35:af:0b:a5:34:
                    ac:62:9b:75:40:5b:a8:ee:c5:26:ca:fa:ec:20:ef:
                    54:70:31:76:fe:8c:fa:26:c9:79:ba:54:ce:5a:a7:
                    11:1c:06:f4:99:d0:c2:2a:39:3d:3c:09:cc:08:3b:
                    33:82:e8:d4:6d:dc:25:7c:e3:ad:cb:44:80:72:8c:
                    1b:f8:3e:70:cb:e3:ae:9f:96:b3:4a:f0:af:51:df:
                    e3:44:b1:b8:59:7e:50:8f:5e:83:11:f3:5a:fd:d7:
                    17:d3:07:4d:76:2b:7e:0b:ea:74:30:c3:51:96:9d:
                    9e:e1:c9:c9:be:66:e6:e3:fd:d0:3e:bc:ea:d9:11:
                    36:74:fd:8b:42:65:f0:62:70:83:c7:89:d1:3f:77:
                    a1:33:d1:d0:ab:67:7f:f1:62:0c:27:50:ae:13:ab:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:4E:62:D3:51:03:02:65:DF:56:63:26:25:44:47:64:2A:C8:66
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:45:27:34:59:34:6b:c6:15:23:1f:1e:aa:38:03:ea:a5:ba:
         e9:37:86:80:02:60:7d:22:45:1d:ed:5c:ad:df:24:3c:d5:29:
         f2:a0:8e:43:a6:3d:2d:19:10:13:64:b8:e6:37:1d:22:d8:53:
         d4:8c:8a:5c:60:06:6c:a7:db:3a:bd:3e:75:2d:ff:6f:83:25:
         27:5f:41:e0:6e:50:ee:6d:6f:bf:45:c6:78:98:53:c7:79:e1:
         d9:ef:34:22:ec:0f:9f:df:13:21:16:1b:71:cf:e1:81:68:50:
         bc:24:00:30:80:c5:cc:91:fe:57:7b:c3:32:c1:cd:06:4b:74:
         71:eb:10:2f:11:49:e4:3e:25:91:f2:c8:48:ea:a5:26:c8:84:
         af:6f:13:1e:a9:74:0e:da:87:05:11:43:a5:1d:53:5b:f5:1c:
         f5:d5:3f:bc:ff:a2:0f:83:f0:27:ba:e1:3c:87:e6:ef:c0:8b:
         6b:1a:2d:5c:ec:df:f8:17:92:ee:84:e7:45:45:1c:bd:d4:c6:
         f0:1b:2e:74:a3:22:7f:fc:2c:64:d7:81:eb:c8:8d:90:99:41:
         58:4c:67:52:b6:c4:d4:bb:8b:65:28:47:99:d5:85:0c:20:fc:
         8e:fd:2e:97:b0:d9:a7:a2:d5:9c:f7:5a:eb:63:20:98:c1:c8:
         ae:62:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:57 2026 by rpki-client