Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          cJHpD6DAxoZOzctMkPKZefiocAbUk5OEOZDg00/VFvc=
Subject key identifier:   02:DB:0A:E5:B2:86:66:49:33:9D:36:74:AE:DE:29:67:59:ED:81:20
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       019D28163D8CCD11691B9D7679F130631EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          0602
Signing time:             Thu 26 Mar 2026 03:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:39 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: bUqN9O0Wi0qz+b0B97VMaxy21uf2R0KCd7wA5SsivVI=)
                          2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:3d:8c:cd:11:69:1b:9d:76:79:f1:30:63:1e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Mar 26 03:00:39 2026 GMT
            Not After : Mar 27 03:00:39 2026 GMT
        Subject: CN=02db0ae5b2866649339d3674aede296759ed8120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:96:e8:3c:17:ab:08:e8:48:dc:d2:2d:68:
                    f0:85:27:6c:e4:84:09:df:3a:a3:9c:46:68:1d:15:
                    2b:c8:ca:91:ae:1f:aa:6d:2c:13:1e:4b:ab:5f:5a:
                    29:10:5f:f5:80:87:ce:43:a3:a1:f9:8d:62:7f:69:
                    8e:7d:82:81:9f:b7:10:09:14:e8:2d:ee:b0:40:65:
                    01:aa:13:a5:c5:51:4d:16:fb:49:46:2d:41:60:4a:
                    7b:e5:53:8e:a1:8e:69:be:93:89:a9:b0:e5:ad:b7:
                    3d:fa:26:c6:ef:bb:72:57:5a:cb:4c:bc:d3:f3:c6:
                    54:0b:7f:c5:34:41:c7:96:e4:fc:6e:82:87:f6:9f:
                    6e:07:d7:0e:f0:c3:21:6d:fc:4b:26:05:fe:ce:2c:
                    81:23:7d:fe:d0:ee:f6:8b:22:ce:b1:bd:c1:e0:26:
                    49:ae:48:d6:1b:0b:23:55:27:0d:7c:f4:71:be:c1:
                    e9:2a:2d:ff:2d:58:a0:ef:bc:1d:fd:fc:b3:83:cc:
                    a6:6d:cd:1b:7b:72:ab:46:5a:88:3e:4a:62:44:04:
                    4b:73:4d:67:a8:fe:69:f2:fc:35:ca:bd:5f:6a:8d:
                    6a:1c:41:79:cd:bd:29:6d:79:7d:0d:c7:63:5c:1c:
                    2a:e0:4d:b5:33:57:b3:db:1c:5e:6a:a9:05:43:b2:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DB:0A:E5:B2:86:66:49:33:9D:36:74:AE:DE:29:67:59:ED:81:20
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3f:49:d0:e2:15:d1:39:1c:d5:01:b9:c0:f1:ef:0f:45:52:
         9b:3f:63:9f:8d:ef:e8:c7:fc:ea:77:5c:2b:e7:ec:1a:77:62:
         ed:cc:73:a6:2d:8f:b3:f4:74:32:86:58:04:da:07:61:9d:a5:
         9c:79:4c:2c:63:2c:36:af:24:8f:fc:a1:14:bb:6c:92:23:0a:
         b6:c3:39:b9:3e:70:c2:3f:d8:6a:e6:0f:f1:44:79:59:20:bc:
         e1:73:56:9e:e0:4c:64:ba:af:33:26:00:0a:e2:88:85:e7:7f:
         2a:03:b4:aa:01:4a:f0:fc:5a:64:6f:c1:92:32:51:af:d6:06:
         b1:a5:9a:a3:99:85:8f:a7:e0:ff:82:35:ac:2d:ca:6d:c2:dd:
         e3:67:b5:43:94:a2:91:e7:0a:6a:dd:b6:47:1f:8f:e1:99:1e:
         89:80:b1:6c:f0:a8:95:88:ab:b2:3e:5d:b6:da:70:90:6d:7e:
         ad:42:45:74:8f:e8:a6:2a:b3:51:d2:c8:ad:d5:b3:5c:f5:14:
         6e:94:98:db:9b:b4:aa:4c:f6:20:68:45:29:4d:5b:5b:71:94:
         c8:7c:e9:c6:11:8f:a2:e5:58:fb:ed:30:19:0a:6c:3c:3c:4c:
         fa:3c:67:d1:01:22:8d:75:00:1d:58:bc:fd:cb:06:e0:92:e5:
         c5:0e:49:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFj2MzRFpG512efEwYx78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2
MTkyYTMwHhcNMjYwMzI2MDMwMDM5WhcNMjYwMzI3MDMwMDM5WjAzMTEwLwYDVQQD
EygwMmRiMGFlNWIyODY2NjQ5MzM5ZDM2NzRhZWRlMjk2NzU5ZWQ4MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5SW6DwXqwjoSNzSLWjwhSds5IQJ
3zqjnEZoHRUryMqRrh+qbSwTHkurX1opEF/1gIfOQ6Oh+Y1if2mOfYKBn7cQCRTo
Le6wQGUBqhOlxVFNFvtJRi1BYEp75VOOoY5pvpOJqbDlrbc9+ibG77tyV1rLTLzT
88ZUC3/FNEHHluT8boKH9p9uB9cO8MMhbfxLJgX+ziyBI33+0O72iyLOsb3B4CZJ
rkjWGwsjVScNfPRxvsHpKi3/LVig77wd/fyzg8ymbc0be3KrRlqIPkpiRARLc01n
qP5p8vw1yr1fao1qHEF5zb0pbXl9DcdjXBwq4E21M1ez2xxeaqkFQ7I4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALbCuWyhmZJM502dK7eKWdZ7YEgMB8GA1UdIwQY
MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt
NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk
LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD9J0OIV
0Tkc1QG5wPHvD0VSmz9jn43v6Mf86ndcK+fsGndi7cxzpi2Ps/R0MoZYBNoHYZ2l
nHlMLGMsNq8kj/yhFLtskiMKtsM5uT5wwj/YauYP8UR5WSC84XNWnuBMZLqvMyYA
CuKIhed/KgO0qgFK8PxaZG/BkjJRr9YGsaWao5mFj6fg/4I1rC3KbcLd42e1Q5Si
kecKat22Rx+P4ZkeiYCxbPColYirsj5dttpwkG1+rUJFdI/opiqzUdLIrdWzXPUU
bpSY25u0qkz2IGhFKU1bW3GUyHzpxhGPouVY++0wGQpsPDxM+jxn0QEijXUAHVi8
/csG4JLlxQ5JgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:52 2026 by rpki-client