Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          fq8tUhgVFcFQT/cvMT4JN+l2gGjRyljHuxPcbWXIA8k=
Subject key identifier:   AC:C7:4D:E6:04:29:D3:F0:F8:77:FE:12:BE:A7:23:52:9F:EA:3F:04
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       019D28BB4E4BB22202109BDB4CA6B1B42A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 06:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:57 +0000
Files and hashes:         1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: byGhOoRfOZtdU8dvqks4779NEZcGBrKdQ6aSSKUYW/M=)
                          2: CDDBIhPlFZ0la4xFUCyUslJRm_w.roa (hash: APBpif6BQi/aq1agj/dNgGEFPrydGKCzR1HfGBm5Jbw=)
                          3: VEYj2LHmN-togd_mlPbNrhUEwf4.roa (hash: 9Rwuw5dPRTSkAe/qbyFWR8ARVN2r+Tl0lHJCSvWgs68=)
                          4: dnwGTH0FieAd94oqN2OTApOST_Q.roa (hash: aIR54WoUK0WT8TJ7U0JAbOT4DOCp5Eb6XBrXkWKbnto=)
                          5: istOwulN0TBtCeTz_FD-nhvpIck.roa (hash: IbiJxrUh2vHPG6p5xcqxXoKoxW9imoB9piUbP1LLjPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:4e:4b:b2:22:02:10:9b:db:4c:a6:b1:b4:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Mar 26 06:00:57 2026 GMT
            Not After : Mar 27 06:00:57 2026 GMT
        Subject: CN=acc74de60429d3f0f877fe12bea723529fea3f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:bd:ed:07:fd:6d:22:27:81:d0:ec:16:63:
                    8b:b3:a9:50:7e:cd:2d:7e:bb:67:ef:44:22:fd:dc:
                    be:00:a7:94:12:fc:12:e7:76:5c:06:84:ce:a4:f3:
                    df:75:85:e9:c1:50:ba:54:87:16:46:60:11:ae:5d:
                    70:11:08:04:ce:9e:a8:49:33:18:c0:7d:04:3b:24:
                    6d:8e:6f:10:ca:fd:d2:44:75:38:cd:2c:22:5f:3e:
                    54:ba:e2:04:1a:da:09:82:9c:17:a1:60:2d:b6:b2:
                    df:c9:77:6f:dc:a9:68:b9:ef:70:98:5b:97:1d:c6:
                    38:df:eb:14:d3:b3:f1:2e:df:1e:91:4c:f5:9d:77:
                    1b:3a:95:24:69:12:7a:80:b1:87:f1:15:d9:63:4a:
                    dd:67:7b:ca:bc:bc:af:a8:fa:3a:b7:7d:8b:bd:b2:
                    ee:4f:48:f2:c0:cc:8a:a0:0a:44:b6:c4:cb:af:3b:
                    1e:2f:63:b5:23:2b:ae:3c:5a:a6:9d:9f:ca:79:be:
                    c0:09:8e:68:c0:44:f5:3b:02:9a:0e:92:cc:2d:e9:
                    7d:92:f8:0e:28:f9:cc:e4:26:bd:da:44:c4:79:3f:
                    90:07:4b:28:8b:38:da:db:f0:15:bc:2a:c1:f1:99:
                    81:c0:ff:50:64:a4:51:7c:32:9f:cc:07:d2:e0:2a:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:4D:E6:04:29:D3:F0:F8:77:FE:12:BE:A7:23:52:9F:EA:3F:04
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:e2:a9:e7:7b:79:9d:08:f2:c2:c2:39:38:03:7c:2d:86:
         73:0e:ae:2f:09:e5:c7:27:27:07:3d:fb:2f:f8:c0:4e:59:c6:
         78:90:49:76:55:03:bd:a5:91:d7:f2:08:8b:ba:68:f8:2a:a6:
         b0:b6:0d:06:01:48:42:25:29:8c:19:f5:2e:00:f2:38:d3:55:
         9d:27:14:f1:d6:88:19:fa:ae:48:de:d3:fd:0a:5f:fc:c1:45:
         42:13:34:36:b3:df:19:1e:51:09:f5:f2:fa:7c:1e:a3:d7:9c:
         45:83:0d:e9:55:f3:7d:1a:9d:c6:3f:33:78:69:76:c4:75:9a:
         15:b8:1f:69:15:dc:8f:e3:5d:d8:5f:8f:ff:73:5a:55:fe:09:
         14:f6:bf:c0:37:b0:a0:3a:11:53:4a:a3:4a:ce:c6:f2:f0:af:
         46:49:b7:d4:dd:cc:16:c9:58:52:74:34:04:32:aa:3a:5b:4c:
         5f:16:b3:24:03:99:ff:48:05:4e:12:67:e2:57:44:d3:9d:05:
         3b:b3:ec:be:58:6f:e2:70:89:b2:7c:f7:21:23:c2:c4:2a:03:
         86:a4:b1:a6:d0:e9:01:47:9b:82:11:e5:ed:6e:cd:17:07:02:
         a8:0a:40:5d:b0:78:a2:e5:51:e4:3b:55:a3:1a:d5:57:0c:22:
         e3:bb:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:24 2026 by rpki-client