Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          dR8G3nh1rXOM1oRc2P8IRHKSrunXCKqjA1Yi90pIvvU=
Subject key identifier:   7A:B5:DC:26:0B:31:F3:39:10:98:75:60:0E:DD:BA:01:9C:EB:46:2D
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       01A08B316BE2B96D091CE2FAE96A7CAC3676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          07C3
Signing time:             Thu 10 Sep 2026 12:01:06 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:06 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:06 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: nqQjhQy1/I5+RgAygYQdtimmMy26HuRG55jbSRx4bKs=)
                          2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:6b:e2:b9:6d:09:1c:e2:fa:e9:6a:7c:ac:36:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Sep 10 12:01:06 2026 GMT
            Not After : Sep 11 12:01:06 2026 GMT
        Subject: CN=7ab5dc260b31f339109875600eddba019ceb462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:49:48:d6:d1:4d:67:5a:ab:05:4a:c7:a7:
                    65:c7:98:c7:7a:18:d2:80:c6:6e:db:85:41:2e:6a:
                    90:bf:15:8e:00:73:cc:24:04:9c:46:91:e8:b7:d8:
                    0c:94:74:2b:a0:40:de:2f:a7:a1:4a:10:b4:af:71:
                    9b:78:e7:98:a9:91:10:43:6d:10:00:79:b2:f6:08:
                    b0:46:d0:22:16:e7:e4:d8:29:5a:fe:79:8d:91:d3:
                    2a:08:ef:63:13:cf:dd:da:48:2a:90:18:c8:48:04:
                    56:58:b6:5d:d4:85:5c:bb:80:47:f2:9b:44:fa:ec:
                    e9:17:d5:11:64:6f:bd:7c:20:76:ad:f1:7f:a5:81:
                    83:88:45:a9:8c:31:a1:28:a6:ac:54:65:a9:3a:30:
                    55:ff:54:9a:34:a1:f9:6f:2c:76:9b:5e:65:3c:1d:
                    b1:d4:20:21:16:48:0e:cc:24:59:38:3b:20:a0:17:
                    1f:9a:34:3d:c9:d2:d5:d4:ab:0a:40:3d:ad:d4:ad:
                    b8:69:30:b0:c9:1d:e8:a6:4b:22:dc:b9:fd:6d:1d:
                    22:00:7d:a0:2a:26:b4:a5:27:72:94:61:24:b2:db:
                    3a:e6:9b:a0:24:42:bd:fd:17:cb:e7:d4:03:e5:21:
                    98:1a:5d:45:e0:34:98:7b:bf:71:92:c7:4e:00:de:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:DC:26:0B:31:F3:39:10:98:75:60:0E:DD:BA:01:9C:EB:46:2D
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:5e:8f:50:74:44:e4:75:eb:f0:9e:d3:f1:61:f4:52:26:
         50:38:2c:05:c4:30:94:7e:23:8a:af:60:76:5f:eb:89:03:24:
         be:b9:db:b2:d7:4e:2d:ad:85:f2:05:2f:ad:d1:5a:d7:29:b4:
         b2:f4:90:5f:b4:19:ed:50:64:e1:cc:ed:74:28:2c:ef:12:53:
         68:71:6d:f4:5c:54:f3:e6:b9:84:60:f4:66:ce:73:bb:c7:47:
         e4:af:98:31:b7:a8:89:7a:12:87:84:07:40:09:9d:96:e6:69:
         c7:03:56:e6:41:4e:d2:87:b8:33:a1:f1:bd:da:37:71:b7:81:
         2c:c8:8e:49:65:af:f4:1d:cd:b8:33:84:86:04:89:fc:f0:62:
         23:88:12:26:82:5d:5b:59:ba:69:0b:07:a3:89:e1:88:4d:c0:
         9f:6c:45:59:f1:90:83:7f:9b:ba:cd:42:1c:ff:9f:8d:70:c2:
         88:ac:b0:3a:e4:26:59:8d:cf:a8:f2:77:42:3a:f6:72:e8:e4:
         74:91:27:82:d4:31:ab:ec:63:01:97:8a:e2:a1:1f:ea:dd:2a:
         3e:77:81:24:c4:e8:93:c7:35:e6:bc:89:de:8d:e7:4e:e2:b3:
         91:e1:8a:81:e2:a0:6e:ef:5e:f1:30:4b:eb:6c:68:4b:76:31:
         b6:31:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:42 2026 by rpki-client