Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          mHUbmTInLEjeTqIJTpiIASHDkjLmMjzF8Id54OGqLPc=
Subject key identifier:   53:0B:FE:6F:C8:FF:AB:EA:8E:8D:40:88:5A:4B:C7:1D:F6:9E:9C:DA
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       019FA184CE81916FC6874C3E1A6E58F0E0F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          074A
Signing time:             Mon 27 Jul 2026 03:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 03:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 03:01:03 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: v/uDoa6ac2+Lx44vt4bLz46X6knvG72XWZOIkzPEBcg=)
                          2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:ce:81:91:6f:c6:87:4c:3e:1a:6e:58:f0:e0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Jul 27 03:01:03 2026 GMT
            Not After : Jul 28 03:01:03 2026 GMT
        Subject: CN=530bfe6fc8ffabea8e8d40885a4bc71df69e9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:c4:ac:cf:2a:a1:b1:4e:47:66:56:c9:4d:
                    9e:42:ac:1e:0c:1f:89:d9:ff:9b:d0:9f:a0:d9:49:
                    39:c0:7f:5e:8a:13:11:0f:8e:76:14:5c:25:c4:60:
                    d4:1f:4c:d0:35:4b:33:d9:45:7e:10:16:5f:a9:70:
                    e7:3c:ea:4a:f1:24:91:d9:1f:75:1a:1c:c0:d6:ff:
                    44:e5:9b:51:fe:ae:9e:30:60:67:4d:1a:4f:11:85:
                    96:66:91:0b:39:1b:db:6e:7d:d4:57:9d:77:4d:c5:
                    28:2e:46:7a:9e:c9:f4:f0:4e:65:99:99:8f:f3:de:
                    01:85:cb:7f:cc:cb:12:ce:70:e2:c4:b4:4e:af:41:
                    3f:af:fa:e5:3f:bf:7b:ae:d8:3f:00:5c:1b:d0:a6:
                    db:a4:81:04:28:2a:a9:59:d6:06:aa:fe:51:c7:17:
                    f8:86:13:8e:fb:61:bb:8a:af:ff:1a:13:b9:62:f6:
                    58:93:40:bf:01:93:fb:79:d4:69:88:ee:c0:83:60:
                    5f:91:77:aa:a9:64:91:f6:1a:8d:5d:f0:09:4d:93:
                    ba:67:11:b4:e6:1e:75:6b:e6:94:4e:c5:5d:17:8d:
                    7c:84:7b:3f:89:7f:67:f5:fc:6e:43:40:8d:07:0a:
                    3c:68:57:de:ae:d3:5f:27:f7:0b:7c:91:52:e5:8e:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:FE:6F:C8:FF:AB:EA:8E:8D:40:88:5A:4B:C7:1D:F6:9E:9C:DA
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:87:05:d3:3a:cd:c2:91:b7:fe:04:78:6c:87:e2:d0:b5:
         41:72:86:38:09:91:e3:47:d0:9c:d8:f2:62:89:46:90:b7:28:
         02:fd:47:cd:02:40:e8:4d:f7:24:71:23:8e:a8:14:ef:ab:98:
         99:5d:78:42:36:47:2d:90:9d:40:77:9d:4e:20:2c:15:7d:bc:
         80:58:08:9b:2f:67:c0:5f:d0:29:bc:24:bc:af:ca:8a:95:7e:
         be:90:4e:5f:6a:43:98:71:c0:a2:cc:1e:df:1f:71:26:ad:ff:
         dc:b9:57:2c:4e:3b:cf:db:d3:45:8e:b2:bc:67:d1:ef:42:1f:
         c2:bc:a2:3e:b3:f8:21:f1:76:0e:bd:d5:aa:60:b6:e0:51:9d:
         de:88:15:f6:d8:64:74:ed:b5:df:d6:aa:be:1b:24:ba:ec:aa:
         6f:1a:5f:51:0e:c2:c6:e0:77:29:40:83:8e:dc:c6:3d:02:8b:
         32:3c:64:b7:16:97:2d:64:08:d3:6a:e9:be:70:8c:fb:2b:aa:
         78:e2:78:d3:24:21:8c:5a:a8:b1:71:69:05:24:b9:3d:2e:73:
         9c:7e:97:89:eb:e8:23:b2:db:e9:be:1f:9e:77:8a:69:6f:c5:
         85:e7:70:af:14:bc:53:b1:4e:40:85:a8:cf:de:fc:01:3b:f4:
         5e:68:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:17 2026 by rpki-client