Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          kFzLA5WLQ8U+eAStd+GjgJwkCkCKT3TVpiCK8e6DbX8=
Subject key identifier:   86:EA:80:00:13:E5:4B:FA:E5:EB:5F:B0:80:C2:80:39:51:AF:0F:FB
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       019EBF91DF44711632991D166B18326CCBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          06D5
Signing time:             Sat 13 Jun 2026 06:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 06:01:08 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 92ViprWNFX4e8aXuTIsr8o2bhqKADNLimp/9f8DLcJ8=)
                          2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:df:44:71:16:32:99:1d:16:6b:18:32:6c:cb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Jun 13 06:01:08 2026 GMT
            Not After : Jun 14 06:01:08 2026 GMT
        Subject: CN=86ea800013e54bfae5eb5fb080c2803951af0ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:41:6c:5d:5b:db:7a:ff:70:23:b5:68:f6:
                    d7:e9:a7:e5:00:b3:e3:7b:ea:82:06:ac:22:af:34:
                    bc:e8:ba:d6:ac:a0:25:9d:fa:ee:bd:59:cc:71:89:
                    58:29:14:ad:00:69:53:70:97:9c:2c:4a:0b:3c:0a:
                    c7:c1:02:96:e6:f2:3a:7a:ce:85:dd:25:fb:83:db:
                    33:de:8d:d1:b1:4b:ed:be:00:49:11:75:d5:ba:7f:
                    47:b3:7e:8e:f6:c6:9d:1b:79:97:8a:b7:1f:d8:80:
                    b4:cf:3d:22:a5:26:59:7c:ad:9d:e4:69:e1:a7:e3:
                    cc:b6:5a:52:d8:98:d8:83:bb:25:1a:bb:73:3a:82:
                    09:ab:a5:25:a3:ee:93:79:e6:c1:dd:26:e5:2f:0e:
                    67:3e:e1:4a:c4:ad:d1:f9:7e:3e:1e:3c:e7:04:ea:
                    63:67:30:8b:bd:25:15:14:87:da:43:32:01:f2:29:
                    57:92:b7:42:54:1b:8d:79:f0:52:f9:d1:1f:5a:52:
                    bb:57:77:2b:58:78:11:80:f7:31:9c:b7:33:cd:ad:
                    d1:42:20:9e:b8:99:ac:6e:2d:e1:bd:aa:f7:93:79:
                    54:e8:04:92:c8:8d:ca:de:e0:6f:33:69:d3:69:67:
                    9d:47:e2:b3:be:01:22:a6:0e:12:57:66:4e:e7:80:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:80:00:13:E5:4B:FA:E5:EB:5F:B0:80:C2:80:39:51:AF:0F:FB
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:b8:b9:07:5c:d0:8d:85:d5:65:df:d2:e2:b7:18:f8:7b:
         a4:65:1c:5d:55:25:80:f2:54:db:78:b6:08:73:a0:31:11:0e:
         a0:c9:e2:16:11:91:f1:fd:37:d8:e1:71:1c:b5:f5:a7:37:4f:
         a8:ed:03:6a:8b:df:48:8a:fc:4a:fb:cd:40:53:66:df:0b:9a:
         30:58:5f:14:3a:1b:01:c6:65:e1:66:4d:d0:7b:0f:a7:9a:46:
         b6:05:a8:43:e8:ab:6c:90:0f:2c:e7:04:29:44:ea:60:46:37:
         ab:58:5a:71:a5:fa:73:11:bc:1e:05:59:49:79:cd:50:d9:c8:
         9a:f1:44:d0:d6:d1:ef:a2:11:34:68:57:cb:8b:5a:fe:89:18:
         a8:0c:e1:f1:1a:7f:71:6b:b3:d6:58:1d:85:cd:6d:bb:eb:d1:
         38:1a:7b:69:96:fe:34:e6:0e:b9:1e:c5:c7:36:74:7d:2a:b5:
         5c:b1:9e:77:b9:90:18:ce:e0:21:45:56:34:46:86:0f:bc:ed:
         be:c4:58:38:47:2f:78:57:98:3c:f4:c4:d3:3a:5b:93:e9:49:
         3f:57:9b:76:00:02:e7:c6:6e:27:1a:f1:cb:92:f8:7f:9c:dc:
         54:70:73:ff:18:3b:88:b8:75:49:0d:86:a7:2b:a5:cd:cc:98:
         55:c1:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:00 2026 by rpki-client